00475{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"firefox.pcap","alias":"nDPId-test","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"generic-max-idle-time":600000,"icmp-max-idle-time":30000,"udp-max-idle-time":180000,"tcp-max-idle-time":7440000,"tcp-max-post-end-flow-time":120000,"max-packets-per-flow-to-send":15,"max-packets-per-flow-to-process":255} 00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"firefox.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1620927997754,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.178","dst_ip":"146.48.58.18","src_port":51577,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} 00440{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927997,"pkt_ts_usec":754367,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGrBvAqAGykjA6Esl5AbuZmizAAAAAALAC\/\/9OVwAAAgQFtAEDAwUBAQgKNAyUbQAAAAAEAgAA"} 00435{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927997,"pkt_ts_usec":781073,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADQGuB+SMDoSwKgBsgG7yXkJiZGFmZoswaAS\/oiCawAAAgQFrAQCCAo8IAcuNAyUbQEDAwc="} 00422{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927997,"pkt_ts_usec":781165,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGrCfAqAGykjA6Esl5AbuZmizBCYmRhoAQECyfcgAAAQEICjQMlIc8IAcu"} 01121{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927997,"pkt_ts_usec":782476,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"pkt":"EBMx8Tl2KDc3AG3ICABFAAI5AABAAEAGqiLAqAGykjA6Esl5AbuZmizBCYmRhoAYECyf7gAAAQEICjQMlIg8IAcuFgMBAgABAAH8AwMtfA1DC+zpycv9FdmNMUC5bsJuWnUXyup0IQWmFDUmuyCHAxBTXkoz\/MfE2bI\/cLBp15kHYdbtt6EVNjvh9SpQCwAkEwETAxMCwCvAL8ypzKjALMAwwArACcATwBQAnACdAC8ANQAKAQABjwAAABMAEQAADnd3dy5paXQuY25yLml0ABcAAP8BAAEAAAoADgAMAB0AFwAYABkBAAEBAAsAAgEAACMAAAAQAA4ADAJoMghodHRwLzEuMQAFAAUBAAAAAAAzAGsAaQAdACAdqToAdMIvwxEDg\/g+CRDkTMPXNvyCkvGWZE1UHNfqdQAXAEEEaSrAsB1d9DD1rsZ6fsTBmwbdQjaww3ssMweKLDjtvm89IHezibH\/di6RtXqjZOkOURxpgJe+Gaam1ctoaup48QArAAUEAwQDAwANABgAFgQDBQMGAwgECAUIBgQBBQEGAQIDAgEALQACAQEAHAACQAEAFQCUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"firefox.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":4,"flow_first_seen":1620927997754,"flow_last_seen":1620927997782,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":517,"flow_tot_l4_payload_len":517,"flow_avg_l4_payload_len":129,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.178","dst_ip":"146.48.58.18","src_port":51577,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.iit.cnr.it","ja3":"1fd36067223570569bbf156fece40978","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}} 00422{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927997,"pkt_ts_usec":808417,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0i1BAADQGLNeSMDoSwKgBsgG7yXkJiZGGmZouxoAQAfqrggAAAQEICjwgB0o0DJSI"} 02369{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927997,"pkt_ts_usec":814169,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} 00806{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":6,"source":"firefox.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":6,"flow_first_seen":1620927997754,"flow_last_seen":1620927997814,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1440,"flow_tot_l4_payload_len":1957,"flow_avg_l4_payload_len":326,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.178","dst_ip":"146.48.58.18","src_port":51577,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"www.iit.cnr.it","ja3":"1fd36067223570569bbf156fece40978","ja3s":"15af977ce25de452b96affa2addb1036","unsafe_cipher":0,"cipher":"TLS_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}} 02380{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927997,"pkt_ts_usec":814214,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"KDc3AG3IEBMx8Tl2CABFAAXUi1JAADQGJzWSMDoSwKgBsgG7yXkJiZcmmZouxoAYAfpPUwAAAQEICjwgB080DJSIkV5fYoRXYC6+czPRTPt+PI+ePKFm5zRZjUHFHVSD9BFp5p6G5OjZer+b+ukzC55Zeyg8VAvRfmsbJwWiTPkdZTns1DZ1hLMBO2A0RSDrj673FAQ3y5IGaFMbkuWhN6\/GSBgOosvp5VtjWi7tFbFHtv7irCAT7l0c\/yzyWnRX9+vBBatumVDDZ9PuNftreTHg4gueVbRJth65g6ezpjrKt33UgGNstaAqzjd3mSaPBpI\/yg3Mnmr0O8YKcDjxpmKGQeEmtbRQtoUTYKI4B2ZheNZ4Ng42EizmFX1YPZt\/Q\/OJznTBeCukLKwXlQhi1uVHoGjIqY5qc4ot2u8QJF8koE8t+S3lm3pDjFIzQkrLSXFaKdWLT0\/T2ZICC5w1aJ1xXjdeVqs8AZCDUNVZbsRxTKss2mX0pv7ocNzv4M\/xAbXcTSYPlWrg3M3sWEwYw0O+mRjQ1NlFqUG+A40+ZqjeJpFLmcRwI+89XTcBsjJKf\/C5vB40wnFjRr06m6j780lq+LDTQjkpF8\/KPFbFnWfrr\/5PJ6AyPcZHntl\/cpCXNgaTnhEBLsvp81OhGVrrMf0pF5x4M9o3JI7YfIHKNae6\/DeP6LsddkrmSC1qgG0PkRbFfOY0KmtVUvy7qA4EW4bU3bkymfrpjXK0PEKY+4CpRlJ5zaTIB+www0Gv67IAqDVrUelTje9Wc\/RkOn9ghTHylBR0NYpY7kg2LlcdjM0yWmnShECdTyB5qMB2I07w9BBIgcvLg8D7kFrHSjCTxjF0gJ2Q6Td92suk0eKENRMEjfjC9dY4rngZbKaAO1vgwIHYr3NQR15Qt4lzyWpc6CsoTJpNL+RaQz1eK8jRTp0l4XFS3mbdbo\/GNXl0nG6xHliw7vaIz9jj91THzjW0r1MyoZ6\/hVe754CNaNGo5iA1fkBtJLmBQ6QFWEaXA7szl4wvOVFfEkmxylXpJ\/jleWZnprKh7xhIFqob1ppMzBytGFJlbpSTj3VGOx9XpVdKH\/pyLwK7E43T+XG0tvlEeiyL2pETIzQfkEIyIzqhUy0hPpNjyFK8kVK66BrSapwCVO9ez\/G3YpN0UBKZCviArPkYeabvtdfqYTD0sSoVBszLCb8mn9LgridT6F+JVp21cVkoHqv+WrCzqmxh0OgbbfKJ7aogr0zcAb4rtyUs4V5WzISzfJXPvV43l0bhzt4f+E1NzdzcwOpg920l9wRQpvMWLPbfYlaEif4nugFTSjRplH0+aPmmJEI6+DYPqmkr2NiNWGYSJ5hSquzJiKvEf90BBeQ8NgM0AMWesDPcIBqJKzQ3BUYp2ZHzxU03izHLe5m\/TK1kEkNV5+Dd1PWyoL1\/aHk6QDhLoX1jM7s3FyNVGZM9rx0G\/WZkziBfP18tUsNgwv7r5kzcrvqjSWNldf6iYP\/bWLhSVEsiBNNNDn3oPr9ByscZIF2djk5KD092\/F3zs40oFcad0awOvJWKGck9kbAIDk1aijHjgiCsg1VTzRtsIyDQTLXZ6mSgP9YofcZ1EYWYCtKqEGoB2p4ySAVCivEE0Lwxi55Lee6A4zzOpVGUOYYAYoEcaPqaQKL1vfwMBLlNvd654\/2JBSCA+wbk01QasdHDFZapIRNZ\/FIipG6kGdmIoK3IgxmKxNnX8tMN95YkopidBkk5ndgpMYAf2Q5LDoSQIB1NDdY9AX7McnFdlMc9+BVPv\/o67NfauPfh4MVT+AqkqqcjfWaZ6yRAi7ASCYjJuCVVNM0Ql85B0Nrykfrdj8kOTR1BBHS+9\/48qTsz+cLge5Pto2qFEzK9Gu9Q65fqyrSIuhWT6kG1Mmxv+H7RY\/XmH6kPIfqjRlbTtpQXrYIO4+\/2EcXiMt4gKmydtS2RMTFH\/dOVDm6PefMBA8hyuWIq\/po4b121NW3T9U9CbFgIa\/+3kX4wN10q"} 00422{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927997,"pkt_ts_usec":814298,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGrCfAqAGykjA6Esl5AbuZmi7GCYmcxoAQD9KSRgAAAQEICjQMlKc8IAdP"} 01382{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927997,"pkt_ts_usec":814713,"pkt_caplen":772,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":772,"pkt_l4_len":738,"pkt":"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"} 00424{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927997,"pkt_ts_usec":814753,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGrCfAqAGykjA6Esl5AbuZmi7GCYmfiIAQD7uPmwAAAQEICjQMlKc8IAdP"} 00535{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927998,"pkt_ts_usec":25730,"pkt_caplen":146,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":146,"pkt_l4_len":112,"pkt":"EBMx8Tl2KDc3AG3ICABFAACEAABAAEAGq9fAqAGykjA6Esl5AbuZmi7GCYmfiIAYEAB0fQAAAQEICjQMlXc8IAdPFAMDAAEBFwMDAEUTMGeuPTeb9XvxZvm+XndNsmj776lWHiXbLp\/a6z9tHxl4PtBeEQgf9YFwSs9N6KVAalQKS8nnlQGgdyxQgqkFQ+kCeJc="} 00950{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927998,"pkt_ts_usec":26043,"pkt_caplen":452,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":452,"pkt_l4_len":418,"pkt":"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"} 00423{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927998,"pkt_ts_usec":50715,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0i1RAADQGLNOSMDoSwKgBsgG7yXkJiZ+ImZovFoAQAfqbTwAAAQEICjwgCDw0DJV3"} 00423{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927998,"pkt_ts_usec":50744,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0i1VAADQGLNKSMDoSwKgBsgG7yXkJiZ+ImZowmIAQAfeZ0AAAAQEICjwgCDw0DJV3"} 00839{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927998,"pkt_ts_usec":52053,"pkt_caplen":369,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":369,"pkt_l4_len":335,"pkt":"KDc3AG3IEBMx8Tl2CABFAAFji1ZAADQGK6KSMDoSwKgBsgG7yXkJiZ+ImZowmIAYAfeLUQAAAQEICjwgCD00DJV3FwMDASoP9FuzT+77Tm5LhnbV9Sewvckun\/o2cHeV8a0PFUdl0epVn0JCwFYw2u\/995yNitv5yqlG3GEkdm7UQiE9Gi2Lm11MZMfOgzEgGE7tw4EPD8NZfoc6KvKG\/EKi6HaMMu3xTVD4KckhI5IBXrC17xJ4Uq4V3k6\/I6pJafhgUUqVWwtMNmFdARevRhzVgfwjOyXIBSlW9Ra85a6B\/grdRfOZaeMI6dFx1FiRZelQc\/jQwre+wP8hT6TMxQFaNGfY8VBcIXSI8jl69MJKva8P9fOnLuAZG\/Rwz8J9BdVkLkplzI3gR299zmDOn5UdfaLW8sI6B4r98nQKcfNz8mVq2oAjyRFuAPgXVurS5JVSEW\/klPnjhWTjh33GGXx5iwA96\/zoTwtThauP6NiC"} 00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":30,"source":"firefox.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1620927998782,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.178","dst_ip":"146.48.58.18","src_port":51583,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} 00443{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927998,"pkt_ts_usec":782772,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGrBvAqAGykjA6Esl\/AbveSGQcAAAAALAC\/\/\/OTgAAAgQFtAEDAwUBAQgKNAyYZQAAAAAEAgAA"} 00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":42,"source":"firefox.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1620927998806,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.178","dst_ip":"146.48.58.18","src_port":51588,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} 00442{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927998,"pkt_ts_usec":806443,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGrBvAqAGykjA6EsmEAbtCftk8AAAAALAC\/\/\/03wAAAgQFtAEDAwUBAQgKNAyYeQAAAAAEAgAA"} 00437{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927998,"pkt_ts_usec":817178,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADQGuB+SMDoSwKgBsgG7yX\/JSxfE3khkHaAS\/oi4VgAAAgQFrAQCCAo8IAs5NAyYZQEDAwc="} 00424{"flow_id":2,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927998,"pkt_ts_usec":817261,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGrCfAqAGykjA6Esl\/AbveSGQdyUsXxYAQECzVWgAAAQEICjQMmII8IAs5"} 01348{"flow_id":2,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927998,"pkt_ts_usec":820522,"pkt_caplen":746,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":746,"pkt_l4_len":712,"pkt":"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"} 00766{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":45,"source":"firefox.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":4,"flow_first_seen":1620927998782,"flow_last_seen":1620927998820,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":680,"flow_tot_l4_payload_len":680,"flow_avg_l4_payload_len":170,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.178","dst_ip":"146.48.58.18","src_port":51583,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.iit.cnr.it","ja3":"ab78a7ef7106e8144808f22ab4a26dc8","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}} 00436{"flow_id":3,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927998,"pkt_ts_usec":833815,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADQGuB+SMDoSwKgBsgG7yYRFBnlrQn7ZPaAS\/ogBdQAAAgQFrAQCCAo8IAtKNAyYeQEDAwc="} 00423{"flow_id":3,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927998,"pkt_ts_usec":833884,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGrCfAqAGykjA6EsmEAbtCftk9RQZ5bIAQECwefwAAAQEICjQMmJA8IAtK"} 00424{"flow_id":2,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":61,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927998,"pkt_ts_usec":849436,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA051pAADQG0MySMDoSwKgBsgG7yX\/JSxfF3khmxYAQAfjgwQAAAQEICjwgC1s0DJiF"} 01343{"flow_id":3,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927998,"pkt_ts_usec":850076,"pkt_caplen":746,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":746,"pkt_l4_len":712,"pkt":"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"} 00766{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":62,"source":"firefox.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":4,"flow_first_seen":1620927998806,"flow_last_seen":1620927998850,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":680,"flow_tot_l4_payload_len":680,"flow_avg_l4_payload_len":170,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.178","dst_ip":"146.48.58.18","src_port":51588,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.iit.cnr.it","ja3":"ab78a7ef7106e8144808f22ab4a26dc8","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}} 00780{"flow_id":2,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927998,"pkt_ts_usec":850942,"pkt_caplen":326,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":326,"pkt_l4_len":292,"pkt":"KDc3AG3IEBMx8Tl2CABFAAE451tAADQGz8eSMDoSwKgBsgG7yX\/JSxfF3khmxYAYAfhQtwAAAQEICjwgC1w0DJiFFgMDAIACAAB8AwPCN2vwEodka+LTPcQOQYDiEUHZ0u\/XcrOKUS9DH9yuqSARzVdUDjCom9ejIr9F9nHpr\/Ooxj6X4lFWVS4DuL59ohMCAAA0ACsAAgMEADMAJAAdACDmeNBaB8UW8yV\/zoPdiy1ahFWCdd6\/JoZYXM8fB4gkEAApAAIAABQDAwABARcDAwAqTkeYYvXCV0Xz5H5NRNMxqPiVrUaADG5OWPFKriD6a9CD\/cuKWMmw7APcFwMDAEUePV6QnMUKL4Pa+ZNLUCPh2Jq1MJLKXMd8HigYk3uFOO2Fq7AbmxEW5mQ4F3O99JPJ+WVSmBB33hwNS7ZNXbnYyRoMu0w="} 00805{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":63,"source":"firefox.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":6,"flow_first_seen":1620927998782,"flow_last_seen":1620927998850,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":680,"flow_tot_l4_payload_len":940,"flow_avg_l4_payload_len":156,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.178","dst_ip":"146.48.58.18","src_port":51583,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"www.iit.cnr.it","ja3":"ab78a7ef7106e8144808f22ab4a26dc8","ja3s":"2253c82f03b621c5144709b393fde2c9","unsafe_cipher":0,"cipher":"TLS_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}} 00424{"flow_id":2,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927998,"pkt_ts_usec":851001,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGrCfAqAGykjA6Esl\/AbveSGbFyUsYyYAQECPRdwAAAQEICjQMmJ88IAtc"} 00537{"flow_id":2,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":65,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927998,"pkt_ts_usec":855159,"pkt_caplen":146,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":146,"pkt_l4_len":112,"pkt":"EBMx8Tl2KDc3AG3ICABFAACEAABAAEAGq9fAqAGykjA6Esl\/AbveSGbFyUsYyYAYECP6cwAAAQEICjQMmKI8IAtcFAMDAAEBFwMDAEVX3ivdvTYtrbQcUUjZRly14I9CJKnN\/0UbUQmuCXgi7sTfk\/QGXacXAH4u0CnHjf030kV5mmLPXFGgtNWx8KKA2vgS6r0="} 00896{"flow_id":2,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927998,"pkt_ts_usec":873754,"pkt_caplen":416,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":416,"pkt_l4_len":382,"pkt":"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"} 00423{"flow_id":3,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927998,"pkt_ts_usec":875954,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0dCZAADQGRAGSMDoSwKgBsgG7yYRFBnlsQn7b5YAQAfgp0gAAAQEICjwgC3U0DJie"} 00778{"flow_id":3,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927998,"pkt_ts_usec":877179,"pkt_caplen":326,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":326,"pkt_l4_len":292,"pkt":"KDc3AG3IEBMx8Tl2CABFAAE4dCdAADQGQvySMDoSwKgBsgG7yYRFBnlsQn7b5YAYAfiyogAAAQEICjwgC3Y0DJieFgMDAIACAAB8AwMn3JmQZtyDm7XgOn7Biwm09omSkxtVuDEiqQZZzpXnLyCaZ4UhDzGNmamCWj7lh5yndtX+A5Qj\/Vo0pS14rgaccRMCAAA0ACsAAgMEADMAJAAdACAFrURae50a6nOhcq9+rEw6rf2oc\/OA+f1SufFt1LthFAApAAIAABQDAwABARcDAwAqK0vhjklLx0QOdwSDAwIoG9eHutwcYVNrgCo+HC\/AKldBOV1f6ZzBc4EpFwMDAEUAzs8WwNlILjQmeQv06V04EjJDeP2\/Wa79UNIkCu7iNdH0dS0u93E1AXIo5rwA17Jh7hbYACziGsey+EQRshgn1fdryB4="} 00805{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":68,"source":"firefox.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":6,"flow_first_seen":1620927998806,"flow_last_seen":1620927998877,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":680,"flow_tot_l4_payload_len":940,"flow_avg_l4_payload_len":156,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.178","dst_ip":"146.48.58.18","src_port":51588,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"www.iit.cnr.it","ja3":"ab78a7ef7106e8144808f22ab4a26dc8","ja3s":"2253c82f03b621c5144709b393fde2c9","unsafe_cipher":0,"cipher":"TLS_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}} 00423{"flow_id":3,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":69,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927998,"pkt_ts_usec":877228,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGrCfAqAGykjA6EsmEAbtCftvlRQZ6cIAQECMajQAAAQEICjQMmLM8IAt2"} 00425{"flow_id":2,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":70,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927998,"pkt_ts_usec":882580,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA051xAADQG0MqSMDoSwKgBsgG7yX\/JSxjJ3khnFYAQAfjfMAAAAQEICjwgC3s0DJii"} 00837{"flow_id":2,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":71,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927998,"pkt_ts_usec":882594,"pkt_caplen":369,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":369,"pkt_l4_len":335,"pkt":"KDc3AG3IEBMx8Tl2CABFAAFj511AADQGz5qSMDoSwKgBsgG7yX\/JSxjJ3khnFYAYAfj4zwAAAQEICjwgC3w0DJiiFwMDASrPJ4D\/QNPCDgScnwDvpk5C6exE0ybRDo8w5tMGfZR01sdDchCr1prd4MQb4lw+rEzk5lpJGsOV+AoZjl1xIp+eqrPinhT+yOMvgCP+aGVAd8f+piYdOOlIAYqUl3jmj6Bgj730XIE1W\/R2cXuNS3n0FtofvEQH1qFn7RoT5oV9RwMl5Rq7x+qbiSUqqo3m\/YfAw1gaBwZCJ6h1yx9cPiLX0BVnbcoKkjLwJQ0HwJM084EtZpvIJ3+L7JEtxk4xDbhMudEKD1tL6vMutJgjj1CbLvUOVt17b7IDKhljfEoUE9Q4h5QeTJfm0s4ypDY4SSQSRSv8ZtN2uhjO\/3WDz7+OMTQ6QjtEEEovTfZp\/H1K4InvDsSlh7+QiAWDziF4ivlCYNaqe7dZ2bWJ"} 00425{"flow_id":2,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":72,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927998,"pkt_ts_usec":882648,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGrCfAqAGykjA6Esl\/AbveSGhzyUsZ+IAQEBrOagAAAQEICjQMmLg8IAt8"} 00534{"flow_id":3,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":73,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927998,"pkt_ts_usec":887292,"pkt_caplen":146,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":146,"pkt_l4_len":112,"pkt":"EBMx8Tl2KDc3AG3ICABFAACEAABAAEAGq9fAqAGykjA6EsmEAbtCftvlRQZ6cIAYECMlogAAAQEICjQMmLs8IAt2FAMDAAEBFwMDAEXtXEmqudPykmzBo6E9v03HUDEtLQh3qoeobiHrcBlZVIn3X7i6PDhcFRqGit0Pi4IFOqPP0EbQzg0wK3LCMW6iKvqt8NM="} 00425{"flow_id":2,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":74,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927998,"pkt_ts_usec":901067,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0515AADQG0MiSMDoSwKgBsgG7yX\/JSxn43khoc4AQAfbchAAAAQEICjwgC440DJiw"} 02379{"flow_id":2,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":75,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927998,"pkt_ts_usec":904055,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"KDc3AG3IEBMx8Tl2CABFAAXU519AADQGyyeSMDoSwKgBsgG7yX\/JSxn43khoc4AQAfbMywAAAQEICjwgC5A0DJiwFwMDAXu6YAsMuzXaTk19dFQf+z7XUb19xMFIN6yYlr8fNDX9Shl8PuSnBzNGgiY3r7ahC5I4b5dvVWcnijxF\/J\/piRff2npBWAjo+V8GSUq57Wzg7U+Z6aN1WPsAj\/qoZNs691axgN\/ZcTiMntJAqSdi88KwsQ3nuOenmgUrY0pWyAb4uT\/OcMyLhdHilOm0nITNjiYBxUXmg5W2czOgf7Gyw\/zr6wgJRuHOwS2Oh\/LfFed0ZdqZ7gIftweOEVWdbTpLVe\/fqs1dc3ESeCQvJmqklkeOPLwk7FYpzC3x2PqkySB+ilCyrEHr+o1HvlczMVF4F8xJoHeRzAJTrW7LM+\/DrrGso1mIvePCnStSE88xfh61ZKDs+7wnMdE32elM0N2tzJNYuF6KBdUzbpB+KxinDG5Or\/ksTrILEKIsx8Z9h\/EUtgSUuMQNUzQ\/t\/pkJOr8aMe7qSyvbmB4VuBZgmWZMf\/aT51Rg2wCBpWrohwV8+AqzbO770E\/7AxSwoc1FwMDB81z+a4as79zvdyqGi9oCdZXBV0j6YzUKnIhhWpNHkHE30kRgy1LF0XhPlNJVBGTNG+5ub4KzHHCOGMZd+hL1kP0YlQQIHaJvnTklwElGLvX86fMYWLGUsm9QQH4KeWQfwxPRP4iS7ywjrXSYK+yWRbLAgW6WqTJigpDj2fWY2zmwIu+zhR\/6apIA2FxBWZxP9oni2a3Z6x47HRljVkfXOvA2i78k02pqXHv552OixHW3iITGoMdqgmc5bqLxbYhAhQe9xgntHtH21Tqq4vmCglhQbLC57hGNF2LJtCdeJhw4UonQlrLtWTJwXZMDQvi9+WSimTFjq5T0H5XF2mg8UWXY4S0rwObcJxYw6Rn3TyFrl\/yosoJbi43HE12I2msHy+P0PgWN6pXsR9ubJeYt5bMn35K0BMOUCLEx5QEtvzIOI1YHjqi0Z4cMhGBdRv7Tt7bydhprRE2pgvF\/AapwDg1k8twUZzo8eHsfI8gCeyVrsxGRgVl8J0wwavg32VlhsoaHRSQy7xxrJ8JXcPQGB9SmOa7ECFABVeBq7CJa5NgErSAmxcvP6\/YmPY6LOjbrxjBxq9ULktWLk0M8w4oJGYbFX9xQzPzcnTKqg4fYCg\/CnR9rum3B1QZGjwhZIrYgmQ+fpYxrDvBoCdlDVXhVjMDXDIyyDaXayN7gmQz2ieguaSHMtb6UwOqBFvTkpK5L97CjPPk8Xp5S\/wD+uPnLTmDkPcAiduh+kZNAF4PFmOa67NHGpc1MSs3Mx2cNy+dqy1JKpuvDhHSxbwXnQoqHce3deU93+j37IOIoktUeO0q+bGE3h22ArEupyw5qoZ8TJNFfyDjoiAKqf2MsVcFqJwxWkPzOHvhJJSEVJ5LUTmNb7L1p\/6RJDFqVgEGXXPsrgjoD9hmSVte8aYhS1kaV8q6Dis3DGIICqqFl\/rlLk2zeJuhy7n9JxKNGP21tZNJzdWkUoCiaCdc+cCXyE+q8FMvg7uZcpIHCAq1l5rYprSAvjuApTmBE5fPN0D0l+TNCBBZYutFOlr4xnxeTdsgmoVCaLvtKAPQATDx7OWB5LUDdkOrOHgmZpzH2rMEJSMqkiESIZmkFtQgcx1Kns\/zozzscjCDc1j2F6KOYN4islUkSyz6gH7Ffbzs7XCkovk4S4RBHTVTH22Y48LC+C1ATzi+mOtDnPDZQRLFqOgKou+IH0yR9q3VbOy7tZbL0Wz7HNxGyUD\/0wvvFjI3gbibnMLDIMChxhtXBzXPeA+ob3RyS9\/Lw+NP2igeNo3Var16cMM1W9BvkbErE4BraL7mUBW+axY6I2md7gSPMydjcuZ3lHMvfiOOWrHoshtPaR4HRpTDRM0iDU54\/wfuqN9jPSCUGIy0JBTrFHReMVmb1AKO\/f8wySr5phH8rDcq"} 01758{"flow_id":2,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":76,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927998,"pkt_ts_usec":904175,"pkt_caplen":1042,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1042,"pkt_l4_len":1008,"pkt":"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"} 00424{"flow_id":3,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":78,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927998,"pkt_ts_usec":911928,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0dChAADQGQ\/+SMDoSwKgBsgG7yYRFBnpwQn7cNYAQAfgoPQAAAQEICjwgC5k0DJi7"} 00836{"flow_id":3,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":79,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927998,"pkt_ts_usec":911947,"pkt_caplen":369,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":369,"pkt_l4_len":335,"pkt":"KDc3AG3IEBMx8Tl2CABFAAFjdClAADQGQs+SMDoSwKgBsgG7yYRFBnpwQn7cNYAYAfj9LQAAAQEICjwgC5o0DJi7FwMDASq1Z21pVej08oRQ33gsiycooX\/qwyUvev3W+EPfcGjvVO9JhzFuy2DBGRIO2MK9lSnS1UqRIlX3S4qebsjbG6GVGGb+eaULimNqL1uOpHpd7i7MboFQAi7T1ewXVIfToeO0ObI\/sRMmCFDJrtQ+kuQyavR7WfuM4SJxRBdul0W3wMHIgSgR9nosr8A70xlhXb6U9xuljJlEwj9HCd4i\/zpSkGNw52bdzbhTaO51+ikeuIBkKiuFPYRNJ6jBZ7ENOdwwZ76zFXMP5\/8RyXMnn0KWhWzaHPst0DDJAUtRPbqZOELHfpHyfzQ\/vXqZ+IXJLX++3wAScwC1USx00ZTzVDqAfNlaJ+WhaSzC+V0W+1pKmMPU8oBmWcXRzHxYI92eERGGNuDx6lMsQYHa"} 00424{"flow_id":3,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":80,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927998,"pkt_ts_usec":912007,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGrCfAqAGykjA6EsmEAbtCftw1RQZ7n4AQEBoY1gAAAQEICjQMmNA8IAua"} 00928{"flow_id":3,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927999,"pkt_ts_usec":107805,"pkt_caplen":433,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":433,"pkt_l4_len":399,"pkt":"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"} 00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":84,"source":"firefox.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1620927999109,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.178","dst_ip":"146.48.58.18","src_port":51599,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} 00441{"flow_id":4,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":84,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927999,"pkt_ts_usec":109976,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGrBvAqAGykjA6EsmPAbugsPXqAAAAALAC\/\/947AAAAgQFtAEDAwUBAQgKNAyZgQAAAAAEAgAA"} 00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":85,"source":"firefox.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1620927999111,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.178","dst_ip":"146.48.58.18","src_port":51600,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} 00441{"flow_id":5,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":85,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927999,"pkt_ts_usec":111334,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGrBvAqAGykjA6EsmQAbsCvXBwAAAAALAC\/\/+cWAAAAgQFtAEDAwUBAQgKNAyZggAAAAAEAgAA"} 00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":86,"source":"firefox.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1620927999112,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.178","dst_ip":"146.48.58.18","src_port":51601,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} 00441{"flow_id":6,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":86,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927999,"pkt_ts_usec":112216,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGrBvAqAGykjA6EsmRAbvLRPiuAAAAALAC\/\/9LkAAAAgQFtAEDAwUBAQgKNAyZgwAAAAAEAgAA"} 00426{"flow_id":3,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":87,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927999,"pkt_ts_usec":133337,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0dCpAADQGQ\/2SMDoSwKgBsgG7yYRFBnufQn7dpIAQAfYkAAAAAQEICjwgDHY0DJl\/"} 02251{"flow_id":3,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":96,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927999,"pkt_ts_usec":135180,"pkt_caplen":1406,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1406,"pkt_l4_len":1372,"pkt":"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"} 00425{"flow_id":3,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":98,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927999,"pkt_ts_usec":135237,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGrCfAqAGykjA6EsmEAbtCft2kRQaA24AQD\/AQrgAAAQEICjQMmZk8IAx4"} 00437{"flow_id":4,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":114,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927999,"pkt_ts_usec":138093,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADQGuB+SMDoSwKgBsgG7yY9yeaT2oLD166AS\/ogrVAAAAgQFrAQCCAo8IAx5NAyZgQEDAwc="} 00437{"flow_id":5,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":115,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927999,"pkt_ts_usec":138095,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADQGuB+SMDoSwKgBsgG7yZBJLtVRAr1wcaAS\/ohHrwAAAgQFrAQCCAo8IAx6NAyZggEDAwc="} 00424{"flow_id":4,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":118,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927999,"pkt_ts_usec":138163,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGrCfAqAGykjA6EsmPAbugsPXrcnmk94AQECxIWgAAAQEICjQMmZw8IAx5"} 00424{"flow_id":5,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":119,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927999,"pkt_ts_usec":138166,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGrCfAqAGykjA6EsmQAbsCvXBxSS7VUoAQECxktgAAAQEICjQMmZw8IAx6"} 00437{"flow_id":6,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":122,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927999,"pkt_ts_usec":140847,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADQGuB+SMDoSwKgBsgG7yZFyBGfZy0T4r6AS\/og7hgAAAgQFrAQCCAo8IAx9NAyZgwEDAwc="} 00424{"flow_id":6,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":123,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927999,"pkt_ts_usec":140932,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGrCfAqAGykjA6EsmRAbvLRPivcgRn2oAQECxYiwAAAQEICjQMmZ88IAx9"} 01349{"flow_id":5,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":124,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927999,"pkt_ts_usec":141444,"pkt_caplen":746,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":746,"pkt_l4_len":712,"pkt":"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"} 00767{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":124,"source":"firefox.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":4,"flow_first_seen":1620927999111,"flow_last_seen":1620927999141,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":680,"flow_tot_l4_payload_len":680,"flow_avg_l4_payload_len":170,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.178","dst_ip":"146.48.58.18","src_port":51600,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.iit.cnr.it","ja3":"ab78a7ef7106e8144808f22ab4a26dc8","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}} 01347{"flow_id":4,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":125,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927999,"pkt_ts_usec":143664,"pkt_caplen":746,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":746,"pkt_l4_len":712,"pkt":"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"} 00767{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":125,"source":"firefox.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":4,"flow_first_seen":1620927999109,"flow_last_seen":1620927999143,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":680,"flow_tot_l4_payload_len":680,"flow_avg_l4_payload_len":170,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.178","dst_ip":"146.48.58.18","src_port":51599,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.iit.cnr.it","ja3":"ab78a7ef7106e8144808f22ab4a26dc8","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}} 01345{"flow_id":6,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":126,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927999,"pkt_ts_usec":148674,"pkt_caplen":746,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":746,"pkt_l4_len":712,"pkt":"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"} 00767{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":126,"source":"firefox.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":4,"flow_first_seen":1620927999112,"flow_last_seen":1620927999148,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":680,"flow_tot_l4_payload_len":680,"flow_avg_l4_payload_len":170,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.178","dst_ip":"146.48.58.18","src_port":51601,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.iit.cnr.it","ja3":"ab78a7ef7106e8144808f22ab4a26dc8","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}} 00424{"flow_id":5,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":153,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927999,"pkt_ts_usec":167303,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0N2ZAADQGgMGSMDoSwKgBsgG7yZBJLtVSAr1zGYAQAfhwIAAAAQEICjwgDJk0DJmf"} 00779{"flow_id":5,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":156,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927999,"pkt_ts_usec":169718,"pkt_caplen":326,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":326,"pkt_l4_len":292,"pkt":"KDc3AG3IEBMx8Tl2CABFAAE4N2dAADQGf7ySMDoSwKgBsgG7yZBJLtVSAr1zGYAYAfjtoQAAAQEICjwgDJo0DJmfFgMDAIACAAB8AwOxJHcpqIpvC18FCWzUKHkoYGQs7wIUjZL\/LYUv\/aZbSCB866aqa7yFxIfhXZTYSAx6ddVCnWqOsCWmpuTunaX1mxMCAAA0ACsAAgMEADMAJAAdACBuvWJlHC99KIckWXlI8xZxlxI+vQFkSmIeIs20I+gEKAApAAIAABQDAwABARcDAwAqI73NNikoPcgSu4rHBtmtdze6EeDfOqUmIj5PGjl\/yCo3qX6BHyTNr0oJFwMDAEXhI2q8sSv+DeEdc7FfSNvNtaBRgCi7ICaTMi3PdjP6BozSBScPGy7PpI0U5upr12nSbBnGk\/OY8hh95ywJeGsRp5Dr8Y8="} 00806{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":156,"source":"firefox.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":6,"flow_first_seen":1620927999111,"flow_last_seen":1620927999169,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":680,"flow_tot_l4_payload_len":940,"flow_avg_l4_payload_len":156,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.178","dst_ip":"146.48.58.18","src_port":51600,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"www.iit.cnr.it","ja3":"ab78a7ef7106e8144808f22ab4a26dc8","ja3s":"2253c82f03b621c5144709b393fde2c9","unsafe_cipher":0,"cipher":"TLS_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}} 00424{"flow_id":4,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":157,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927999,"pkt_ts_usec":169750,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0GipAADQGnf2SMDoSwKgBsgG7yY9yeaT3oLD4k4AQAfhTvwAAAQEICjwgDJs0DJmh"} 00424{"flow_id":5,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":158,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927999,"pkt_ts_usec":169806,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGrCfAqAGykjA6EsmQAbsCvXMZSS7WVoAQECNg1wAAAQEICjQMmbg8IAya"} 00781{"flow_id":4,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":159,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927999,"pkt_ts_usec":170826,"pkt_caplen":326,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":326,"pkt_l4_len":292,"pkt":"KDc3AG3IEBMx8Tl2CABFAAE4GitAADQGnPiSMDoSwKgBsgG7yY9yeaT3oLD4k4AYAfhZ\/wAAAQEICjwgDJw0DJmhFgMDAIACAAB8AwPLFE14fAq9z4SO9x2K2GgtJOaV1nO5HKU7DZTimhNZNCAlkc8vad1pAkmv3DLXWEMycffSzBs5DNVF7m0FcRK\/nRMCAAA0ACsAAgMEADMAJAAdACCtYtSWY+\/FBnNvDcbFziQv9mDWOD1F0U7saoBSr9F\/cQApAAIAABQDAwABARcDAwAqIzklDPve64TQW1sRhQ9Ngvotc8R6P11yXBuykrPQ0UmmBnJrHeYe5rSVFwMDAEVATALq0r\/4n2zKs+zG1IHzW63jx+8O+3J3MWaf1uDZ2OpVF9mjIV\/A4PEIwWwGb2JPb2UXioVLNrILrx0ogc+z8WJOUzw="} 00806{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":159,"source":"firefox.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":6,"flow_first_seen":1620927999109,"flow_last_seen":1620927999170,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":680,"flow_tot_l4_payload_len":940,"flow_avg_l4_payload_len":156,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.178","dst_ip":"146.48.58.18","src_port":51599,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"www.iit.cnr.it","ja3":"ab78a7ef7106e8144808f22ab4a26dc8","ja3s":"2253c82f03b621c5144709b393fde2c9","unsafe_cipher":0,"cipher":"TLS_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}} 00424{"flow_id":4,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":160,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927999,"pkt_ts_usec":170903,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGrCfAqAGykjA6EsmPAbugsPiTcnml+4AQECNEdwAAAQEICjQMmbk8IAyc"} 00536{"flow_id":5,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":161,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927999,"pkt_ts_usec":172669,"pkt_caplen":146,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":146,"pkt_l4_len":112,"pkt":"EBMx8Tl2KDc3AG3ICABFAACEAABAAEAGq9fAqAGykjA6EsmQAbsCvXMZSS7WVoAYECMzIAAAAQEICjQMmbo8IAyaFAMDAAEBFwMDAEXSJ4tFk8tOTU0TdsqYIGUNc2Y8gonwbH9UtGFEzPUT\/vkVyz7muSY18bQwXOYr0Vd1exzUjZkkW8aKxtVfi0AeAU47ab8="} 00424{"flow_id":6,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":162,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927999,"pkt_ts_usec":178235,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0RutAADQGcTySMDoSwKgBsgG7yZFyBGfay0T7V4AQAfhj7AAAAQEICjwgDKI0DJml"} 00781{"flow_id":6,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":163,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927999,"pkt_ts_usec":179715,"pkt_caplen":326,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":326,"pkt_l4_len":292,"pkt":"KDc3AG3IEBMx8Tl2CABFAAE4RuxAADQGcDeSMDoSwKgBsgG7yZFyBGfay0T7V4AYAfi6TwAAAQEICjwgDKM0DJmlFgMDAIACAAB8AwNlgoQ2Pdpv5X4Rg9R+p+YiQIAQMiIt5js0EYdba8vb2yCf4hyAAf2e1Nqt4X\/d0hmTfioGtwn0kLEAuqj5y87exBMCAAA0ACsAAgMEADMAJAAdACAvcqWUlMdp0QSYolIvVNgW7+woCYu1M5HmREWdVwz3LAApAAIAABQDAwABARcDAwAq0DMa0J5ea5uC09Xn5tWWHKxomevqoxo9n46q6Yt7XJrb\/cKtxBpm8uOKFwMDAEUsrmzIHMcq98OCxjVDEPHkcar4UkPE91bjG9D+qLNgAdYwRyVA3\/QutS6SaTmodgNW977X\/NxVXTU850L6\/oce3j\/MeI0="} 00806{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":163,"source":"firefox.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":6,"flow_first_seen":1620927999112,"flow_last_seen":1620927999179,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":680,"flow_tot_l4_payload_len":940,"flow_avg_l4_payload_len":156,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.178","dst_ip":"146.48.58.18","src_port":51601,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"www.iit.cnr.it","ja3":"ab78a7ef7106e8144808f22ab4a26dc8","ja3s":"2253c82f03b621c5144709b393fde2c9","unsafe_cipher":0,"cipher":"TLS_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}} 00424{"flow_id":6,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":164,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927999,"pkt_ts_usec":179798,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGrCfAqAGykjA6EsmRAbvLRPtXcgRo3oAQECNUoAAAAQEICjQMmcE8IAyj"} 00537{"flow_id":6,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":165,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927999,"pkt_ts_usec":181982,"pkt_caplen":146,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":146,"pkt_l4_len":112,"pkt":"EBMx8Tl2KDc3AG3ICABFAACEAABAAEAGq9fAqAGykjA6EsmRAbvLRPtXcgRo3oAYECNz8QAAAQEICjQMmcM8IAyjFAMDAAEBFwMDAEUpWU+q6IIQ+vjgsO19mOPvUJe+zC6SBjdAkkeK98voA6qEgejaG8myE5XpdRhfSr4pNH\/XrVcLiXmV\/NXXGLlRQYLjzmU="} 00929{"flow_id":5,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":166,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927999,"pkt_ts_usec":185519,"pkt_caplen":436,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":436,"pkt_l4_len":402,"pkt":"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"} 00537{"flow_id":4,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":170,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927999,"pkt_ts_usec":191162,"pkt_caplen":146,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":146,"pkt_l4_len":112,"pkt":"EBMx8Tl2KDc3AG3ICABFAACEAABAAEAGq9fAqAGykjA6EsmPAbugsPiTcnml+4AYECNoqwAAAQEICjQMmcs8IAycFAMDAAEBFwMDAEWxL3YzswQsjepryozRyik2Y1glAEUibL\/h4iG46W3VAxeg0RSRMFvYaUCnkaQ0TqdFtgCL4+AN\/nkCSfbAMPM3WKytlBk="} 00932{"flow_id":6,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":195,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927999,"pkt_ts_usec":194963,"pkt_caplen":436,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":436,"pkt_l4_len":402,"pkt":"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"} 00935{"flow_id":4,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":196,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927999,"pkt_ts_usec":195119,"pkt_caplen":436,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":436,"pkt_l4_len":402,"pkt":"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"} 00425{"flow_id":5,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":230,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927999,"pkt_ts_usec":199315,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0N2hAADQGgL+SMDoSwKgBsgG7yZBJLtZWAr1zaYAQAfhukwAAAQEICjwgDLc0DJm6"} 00840{"flow_id":5,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":231,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927999,"pkt_ts_usec":199317,"pkt_caplen":369,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":369,"pkt_l4_len":335,"pkt":"KDc3AG3IEBMx8Tl2CABFAAFjN2lAADQGf4+SMDoSwKgBsgG7yZBJLtZWAr1zaYAYAfgmqAAAAQEICjwgDLc0DJm6FwMDASoG+IVoZspJWbAzjHMk+jGna\/EMW\/zVG6clqPZmvmtjGOhJZao5xqzCyt1OMIywvrhj\/H7NTcpOGhWvRBaNgY1oXiWyMaSsdmjHWjnaYpc8tQ9X9Vvei9pLKsA6avyw5HbKJdYJHxDzIzTnlGY8k+\/2Y\/yaVcmAKQ72\/jfIrHap+ZWYaJd+FlitVNgVllAnYZ5j6Ia6kYCuvoj6i\/MgdxqWNZP50y3dsAOc6WdV9y1DW2V3H1nEsLlKcDHeJ+iwEUCHNGCXa49HVRR5kcFYfoQKGkcbDrOH6BcMdyGcFR5HvOGcnT645fa4zifB8oI6cwyKt8gY7fb39GkHcKSgF6vK7QgC9WnYR6J+zy7zTIko\/o3EZpCsX0HNvWC5wTFguMDOdgMjjM80W21y"} 00425{"flow_id":5,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":233,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927999,"pkt_ts_usec":199378,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGrCfAqAGykjA6EsmQAbsCvXTbSS7XhYAQEBpduQAAAQEICjQMmdE8IAy3"} 00425{"flow_id":6,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":234,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927999,"pkt_ts_usec":210720,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0Ru1AADQGcTqSMDoSwKgBsgG7yZFyBGjey0T7p4AQAfhiWgAAAQEICjwgDMI0DJnD"} 00425{"flow_id":5,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":235,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927999,"pkt_ts_usec":210750,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0N2pAADQGgL2SMDoSwKgBsgG7yZBJLteFAr1024AQAfZr2wAAAQEICjwgDMQ0DJnG"} 00844{"flow_id":6,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":236,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927999,"pkt_ts_usec":210804,"pkt_caplen":369,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":369,"pkt_l4_len":335,"pkt":"KDc3AG3IEBMx8Tl2CABFAAFjRu5AADQGcAqSMDoSwKgBsgG7yZFyBGjey0T7p4AYAfh+0wAAAQEICjwgDMM0DJnDFwMDASprTsQKu9s6aaCEj+w7ZjrqMdxY1YwTls8\/pAgJZGFFKQVPKgDdKpYh3+K\/By9DOOTpcwgAOyavB9fKHp6uzhrHA2VS\/iWboLvDMORzJ3u7ns4KJiDX0ie8g9wGHpJuv77OEh+h8WcWltUNESMlkrFo\/ZLrSVbM1YlONLN50AkxLQVcfLcLLoHktq5OSc\/yCyeJt9PFH3yESRpYMhgkAwhHEvrxhoMA9j\/zLboyN2JX16IS7XWL2fGO\/KTb4xOpxU8niCpVj\/JoslZ\/oouZ3jesMFH8qCeqk6Hgj1+5EO6+mqH0YqKPot1QM7KNudqLR\/rmKD3\/onknThUaQ8CdX+VUkopodDy5\/dVg9XqDqoP2AP5TAimTy6lIQbY2F30x3pfOHQ+p9noSRaBp"} 00425{"flow_id":6,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":237,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927999,"pkt_ts_usec":210873,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGrCfAqAGykjA6EsmRAbvLRP0ZcgRqDYAQEBpRfQAAAQEICjQMmdw8IAzD"} 02379{"flow_id":5,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":238,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927999,"pkt_ts_usec":212445,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"KDc3AG3IEBMx8Tl2CABFAAXUN2tAADQGexySMDoSwKgBsgG7yZBJLteFAr1024AQAfYGaQAAAQEICjwgDMU0DJnGFwMDATF0RHAawjZ1xwJEpkOucPPB70wmdUpLM5FGhxZtPH01hVZA+W1MH0KFQ2ngnqDhR2gC5NtZ3qAH4foqNBGYlIzd6czfKVwMH0UNytJFOlGX960gb\/73I6scHWNSzZrVTjkEN5LWyFdJPZ80mFXmwcd9kldsNT8TMiJISLbE0jgKFBW6MVdOYy8lalV\/Tea36X0DqVQNOXDBFUT4bfOCE8nlYvlh7GHWrgn1q2j3E0y+Gnmr3JMyHzyeyL1oS1chX2UHYfzHB7h8VN9GAdClP0jydfowKrGvdRqXWGqVHrl8Thr0gdNCE2bs5t9XlDJXd+24FyoVLY8r1l5lvDQhDQFyaVCmvgM6yursou+DjlQ7qopGr\/SWBtSeRWCpQ5Nwklr\/ZrtmSz63y\/9FTxPwAQLqrxcDA0ARl0YUIyH632gTGpJ2rd\/KQnV3yZTVwSP9ZfFOmRfmhz0FkPaGmmzqjKZUl9NpenolIKr+b\/uzfZTGEnJP0yFzm3aNuvUfv8xemXY0zqrBx3mIZu6G9Rnh0+io1Gz\/5E7Ih6thABLy8uMsPT5F2E7+n2VhhRjmZ2LvV\/qqFxKQnurqwdKQVp5PUHV77C20XWufw1dWwoVMXQ2gilyg1mgGW+WeO42NC4hzxj0xY\/EiTBAm69Jcl\/d4a0TVV+mfdyDzSMu+\/PMSxOFlT55NEAKmXgq5BZ1vwotjBw39UqYDnUMZM2mlTcErTDHcus6LlhvkcKsWFLLYDs67P\/tI9EmaQplL2l6L3V3hEDozbgCQwZ7IPorLNAFw7OPt0dEG3IAFENzyzL5nz17DI9c7KlxI4y037ZHQEF2zkveQpoU+x\/7xr8byBZ3LU+iyxy3mO9bIyjPv3OKwKwP+exZDZnexXL6lxMT7m9oBbRtON45NogFu4ZfWEcjbFjIWVFUUBsYLwA5\/BLoi9z7bpoKIDFxSkblYC5T6MBs2W8rRnSF9E2TjXy3nOBYAKCvzT79o3eOiejVTJd3W5ziiyBgTwV8z9+qRJmwD2mIMl\/A3ED3nV\/Sm1c559\/OgUCW79HrUHuaB+BQKUM5BeIjew5QEKacGEOnV5qpdmNCAr4Nc3yLIealKSSzvMH8cduykEbHGL8Vi5MVTKKK1JEPSwkD7zqWftg8uRaESS8JK86n40vS5vJlQ\/HUu3ZXXKkpt+dS0fXLRyqrLIlr819R8ZiGEdFBsYQ0ST5BCZ2616WT6z2r\/yPkzpZpxVg7xX9chsjlnbJXPWpnjtfKtHX4KpTkXidK6p8P3NHGVjI8DP6mENQjWf1CMHSveoFMUUbdkSWWLovn\/IdQi3vqXA3w1GHxW6t0Mw8fDHhX1vp97B1j4TpPOM+mQhi+HEwTIUBdNgixwAAXmTr67LQ6urmmsQ98IalGtbpZmeOuU9t90DZDogBhtlBzR\/xu49EPxt\/11GpDHUHIqnlt5M+QalTTKmNpyf65nyrtZ8AaW0C5hX63hP7HRYOmfew\/7Y8UaOoINwJz02yGVfIZ8QiID4wNrWT2mWTYG6y9fYYPcHYgsarsCRtmNoP5DECEg3w1YA3zl5hYEYg0JV9w33+dp5TwzKi2\/HXskWNp5ZP5ng4bbQWNNfGwKfrHnSLK7PjGv5Br\/e3MbXY5nXCzLNJPPn3bVE\/Xg0DqvwaslmH7Lfb16dsRJwX1xpe6AHyN6jlIuJtMRYaIdD32X4acBjIKVQZX4Mi9Rk1jiJt2MheiNW5jV3xqLTNIAxhb6vBP9ciZyU72WrmwxOFivr7S\/qDupSUMMxjY6i1pIhbg0Zlzrt5XVcNeax1+NM2TGG08HaPX1+PiooNIVDZwSlCNvPvGwNLNu34lbxQBVhpQM7mPqvKDARvtZVZSIFirsxNPL2vU95lZA6oKDM5QvYfYP7cFFS7Xtv9DiRPGt9xTvuwuC"} 02398{"flow_id":5,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":239,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927999,"pkt_ts_usec":212559,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} 00425{"flow_id":4,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":259,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927999,"pkt_ts_usec":216429,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0GixAADQGnfuSMDoSwKgBsgG7yY9yeaX7oLD444AQAfhSEwAAAQEICjwgDMk0DJnL"} 00843{"flow_id":4,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":266,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927999,"pkt_ts_usec":217704,"pkt_caplen":369,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":369,"pkt_l4_len":335,"pkt":"KDc3AG3IEBMx8Tl2CABFAAFjGi1AADQGnMuSMDoSwKgBsgG7yY9yeaX7oLD444AYAfhr7wAAAQEICjwgDMo0DJnLFwMDASpeztZqzeNHxAj+4hz3yYAgrTP9my3S7cBBG6m4F\/mxytks0O6DDBAZB\/zghDomWEzU+dzEkY38eF7Qg5+0TYkOFypWiz+AAZtxlqgP3F4vmeTyW40\/R2CkKPcYORX8opIrnxtb5TqKRv6FlrgRD2UjngUVhKA6dcxK9XdDo5NvHLz8x\/imrPPT98VjwiZUichzVIUh\/l\/oEfxl96jEMb9ygqN2dcHwNpmtoZFbGADCh15TmmeUvYTzxHW9GH\/j0eJ8+BURPnRyuw\/Dsb7aNBl8s\/D+1oCtJE9n4iP6LU4m4TXtSgvM6o\/zD7qC3MR9adtaLRvIJ0eikWIqHNrHTk+lEd\/qTzpoJgPnfB1L1ygwiIZ7zeAsnXvn3TS6NZKRSVrDtfqUBvxojnpw"} 00425{"flow_id":4,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":267,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927999,"pkt_ts_usec":217740,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGrCfAqAGykjA6EsmPAbugsPpVcnmnKoAQEBpBOQAAAQEICjQMmeE8IAzK"} 00425{"flow_id":4,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":276,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927999,"pkt_ts_usec":220550,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0Gi5AADQGnfmSMDoSwKgBsgG7yY9yeacqoLD6VYAQAfZPbQAAAQEICjwgDM00DJnO"} 02385{"flow_id":4,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":291,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927999,"pkt_ts_usec":223683,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} 02382{"flow_id":4,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":292,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927999,"pkt_ts_usec":223830,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} 00425{"flow_id":6,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":316,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927999,"pkt_ts_usec":226198,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0Ru9AADQGcTiSMDoSwKgBsgG7yZFyBGoNy0T9GYAQAfZfogAAAQEICjwgDNA0DJnO"} 02377{"flow_id":6,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":324,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927999,"pkt_ts_usec":226686,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} 02380{"flow_id":6,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":325,"source":"firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1620927999,"pkt_ts_usec":226805,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} 00813{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1636,"source":"firefox.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":255,"flow_first_seen":1620927999109,"flow_last_seen":1620927999385,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1440,"flow_tot_l4_payload_len":200954,"flow_avg_l4_payload_len":788,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.178","dst_ip":"146.48.58.18","src_port":51599,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"www.iit.cnr.it","ja3":"ab78a7ef7106e8144808f22ab4a26dc8","ja3s":"2253c82f03b621c5144709b393fde2c9","unsafe_cipher":0,"cipher":"TLS_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}} 00509{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":5441,"source":"firefox.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1065,"flow_first_seen":1620927997754,"flow_last_seen":1620927999853,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1440,"flow_tot_l4_payload_len":891202,"flow_avg_l4_payload_len":836,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.178","dst_ip":"146.48.58.18","src_port":51577,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} 00509{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":5441,"source":"firefox.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1031,"flow_first_seen":1620927998782,"flow_last_seen":1620927999948,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1440,"flow_tot_l4_payload_len":869503,"flow_avg_l4_payload_len":843,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.178","dst_ip":"146.48.58.18","src_port":51583,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} 00510{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":5441,"source":"firefox.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1387,"flow_first_seen":1620927998806,"flow_last_seen":1620927999915,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1440,"flow_tot_l4_payload_len":1189641,"flow_avg_l4_payload_len":857,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.178","dst_ip":"146.48.58.18","src_port":51588,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} 00508{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":5441,"source":"firefox.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":255,"flow_first_seen":1620927999109,"flow_last_seen":1620927999830,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1440,"flow_tot_l4_payload_len":200954,"flow_avg_l4_payload_len":788,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.178","dst_ip":"146.48.58.18","src_port":51599,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} 00508{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":5441,"source":"firefox.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":646,"flow_first_seen":1620927999111,"flow_last_seen":1620927999879,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1440,"flow_tot_l4_payload_len":545091,"flow_avg_l4_payload_len":843,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.178","dst_ip":"146.48.58.18","src_port":51600,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} 00508{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":5441,"source":"firefox.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":878,"flow_first_seen":1620927999112,"flow_last_seen":1620927999897,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1440,"flow_tot_l4_payload_len":744373,"flow_avg_l4_payload_len":847,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.178","dst_ip":"146.48.58.18","src_port":51601,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} 00129{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":5441,"source":"firefox.pcap","alias":"nDPId-test"} ~~~~~~~~~~~~~~~~~~~~ SUMMARY ~~~~~~~~~~~~~~~~~~~~ ~~ packets captured/processed: 5441/5441 ~~ skipped flows.............: 0 ~~ total layer4 data length..: 4767738 bytes ~~ total detected protocols..: 6 ~~ total active/idle flows...: 6/6 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~ total memory allocated....: 5456529 bytes ~~ total memory freed........: 5456529 bytes ~~ total allocations/frees...: 63882/63882 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~