DAEMON-EVENT: init
     DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0]
     DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0]
              new: [.....1] [ip4][..tcp] [..192.168.1.212][50694] -> [...90.130.70.73][...21] 
         detected: [.....1] [ip4][..tcp] [..192.168.1.212][50694] -> [...90.130.70.73][...21] [FTP_CONTROL][Download][Unsafe]
                   RISK: Unsafe Protocol
          analyse: [.....1] [ip4][..tcp] [..192.168.1.212][50694] -> [...90.130.70.73][...21] [FTP_CONTROL][Download][Unsafe]
                   [min|max|avg|stddev]
                   [IAT(flow)...:    0.000|   0.090|   0.019|   0.021]
                   [IAT(c->s)...:    0.000|   0.090|   0.017|   0.023][IAT(s->c)...:    0.000|   0.069|   0.022|   0.018]
                   [PKTLEN(c->s):   66.000|  96.000|  71.400|   8.000][PKTLEN(s->c):   66.000| 307.000| 104.600|  58.900]
                   [BINS(c->s)..: 18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
                   [BINS(s->c)..: 8,4,1,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
              new: [.....2] [ip4][..tcp] [..192.168.1.212][50695] -> [...90.130.70.73][25685] 
         detected: [.....2] [ip4][..tcp] [..192.168.1.212][50695] -> [...90.130.70.73][25685] [FTP_DATA][Download][Acceptable]
                   RISK: Known Proto on Non Std Port
              new: [.....3] [ip4][..tcp] [..192.168.1.212][50696] -> [...90.130.70.73][24523] 
          analyse: [.....3] [ip4][..tcp] [..192.168.1.212][50696] -> [...90.130.70.73][24523] 
                   [min|max|avg|stddev]
                   [IAT(flow)...:    0.000|   0.030|   0.006|   0.011]
                   [IAT(c->s)...:    0.000|   0.030|   0.008|   0.012][IAT(s->c)...:    0.000|   0.030|   0.005|   0.010]
                   [PKTLEN(c->s):   66.000|  78.000|  67.800|   4.300][PKTLEN(s->c):   66.000|1506.000|1354.800| 440.700]
                   [BINS(c->s)..: 13,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
                   [BINS(s->c)..: 2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,17,0,0]
     not-detected: [.....3] [ip4][..tcp] [..192.168.1.212][50696] -> [...90.130.70.73][24523] [Unknown][Unrated]
              end: [.....3] [ip4][..tcp] [..192.168.1.212][50696] -> [...90.130.70.73][24523] [Unknown][Unrated]
              end: [.....1] [ip4][..tcp] [..192.168.1.212][50694] -> [...90.130.70.73][...21] [FTP_CONTROL][Download][Unsafe]
                   RISK: Unsafe Protocol
              end: [.....2] [ip4][..tcp] [..192.168.1.212][50695] -> [...90.130.70.73][25685] [FTP_DATA][Download][Acceptable]
                   RISK: Known Proto on Non Std Port
     DAEMON-EVENT: shutdown