DAEMON-EVENT: init
     DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0]
     DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0]
              new: [.....1] [ip4][..tcp] [.....10.0.0.155][49242] -> [.....10.0.0.126][.6661]
         detected: [.....1] [ip4][..tcp] [.....10.0.0.155][49242] -> [.....10.0.0.126][.6661] [HL7][Unknown][Health][Acceptable]
                   RISK: Known Proto on Non Std Port
              new: [.....2] [ip4][..tcp] [.....10.0.0.155][49250] -> [.....10.0.0.126][.6661]
         detected: [.....2] [ip4][..tcp] [.....10.0.0.155][49250] -> [.....10.0.0.126][.6661] [HL7][Unknown][Health][Acceptable]
                   RISK: Known Proto on Non Std Port
              end: [.....1] [ip4][..tcp] [.....10.0.0.155][49242] -> [.....10.0.0.126][.6661] [HL7][Unknown][Health][Acceptable]
                   RISK: Known Proto on Non Std Port
              new: [.....3] [ip4][..tcp] [.....10.0.0.155][49252] -> [.....10.0.0.126][.6661]
         detected: [.....3] [ip4][..tcp] [.....10.0.0.155][49252] -> [.....10.0.0.126][.6661] [HL7][Unknown][Health][Acceptable]
                   RISK: Known Proto on Non Std Port
              end: [.....2] [ip4][..tcp] [.....10.0.0.155][49250] -> [.....10.0.0.126][.6661] [HL7][Unknown][Health][Acceptable]
                   RISK: Known Proto on Non Std Port
              end: [.....3] [ip4][..tcp] [.....10.0.0.155][49252] -> [.....10.0.0.126][.6661] [HL7][Unknown][Health][Acceptable]
                   RISK: Known Proto on Non Std Port
     DAEMON-EVENT: shutdown