DAEMON-EVENT: init
     DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0]
     DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0]
              new: [.....1] [ip4][..tcp] [.131.114.168.27][59244] -> [.185.83.218.112][55655] 
              new: [.....2] [ip4][..tcp] [.131.114.168.27][49290] -> [.185.83.218.112][55656] 
         detected: [.....1] [ip4][..tcp] [.131.114.168.27][59244] -> [.185.83.218.112][55655] [TINC][VPN][Acceptable]
                   RISK: Known Proto on Non Std Port
         detected: [.....2] [ip4][..tcp] [.131.114.168.27][49290] -> [.185.83.218.112][55656] [TINC][VPN][Acceptable]
                   RISK: Known Proto on Non Std Port
              new: [.....3] [ip4][..udp] [.131.114.168.27][55655] -> [.185.83.218.112][55655] 
         detected: [.....3] [ip4][..udp] [.131.114.168.27][55655] -> [.185.83.218.112][55655] [TINC][VPN][Acceptable]
                   RISK: Known Proto on Non Std Port
              new: [.....4] [ip4][..udp] [.185.83.218.112][55656] -> [.131.114.168.27][55656] 
         detected: [.....4] [ip4][..udp] [.185.83.218.112][55656] -> [.131.114.168.27][55656] [TINC][VPN][Acceptable]
                   RISK: Known Proto on Non Std Port
          analyse: [.....3] [ip4][..udp] [.131.114.168.27][55655] -> [.185.83.218.112][55655] [TINC][VPN][Acceptable]
                   [min|max|avg|stddev]
                   [IAT(flow)...:    0.000|   1.070|   0.172|   0.377]
                   [IAT(c->s)...:    0.000|   1.070|   0.198|   0.406][IAT(s->c)...:    0.000|   1.024|   0.144|   0.342]
                   [PKTLEN(c->s):  190.000|1510.000|1168.400| 444.700][PKTLEN(s->c):  190.000|1502.000|1127.600| 455.700]
                   [BINS(c->s)..: 0,0,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0,2,0,0,2,6,0,0]
                   [BINS(s->c)..: 0,0,0,0,1,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0,2,0,0,0,6,0,0]
          analyse: [.....4] [ip4][..udp] [.185.83.218.112][55656] -> [.131.114.168.27][55656] [TINC][VPN][Acceptable]
                   [min|max|avg|stddev]
                   [IAT(flow)...:    0.000|   2.412|   0.291|   0.559]
                   [IAT(c->s)...:    0.000|   2.412|   0.412|   0.745][IAT(s->c)...:    0.000|   1.048|   0.224|   0.408]
                   [PKTLEN(c->s):  190.000|1486.000| 954.000| 431.400][PKTLEN(s->c):  118.000|1494.000|1067.600| 456.000]
                   [BINS(c->s)..: 0,0,0,0,1,0,0,0,0,1,0,0,0,0,0,1,0,0,0,1,0,0,1,0,0,0,0,0,1,0,0,0,1,0,0,0,0,0,0,1,0,2,1,0,0,1,0,0]
                   [BINS(s->c)..: 0,0,1,0,1,0,0,0,0,1,0,0,0,0,0,1,0,0,0,1,0,1,0,0,0,0,0,0,1,0,0,1,0,0,0,0,0,0,1,2,2,2,0,0,2,3,0,0]
              end: [.....2] [ip4][..tcp] [.131.114.168.27][49290] -> [.185.83.218.112][55656] [TINC][VPN][Acceptable]
                   RISK: Known Proto on Non Std Port
             idle: [.....3] [ip4][..udp] [.131.114.168.27][55655] -> [.185.83.218.112][55655] [TINC][VPN][Acceptable]
                   RISK: Known Proto on Non Std Port
             idle: [.....4] [ip4][..udp] [.185.83.218.112][55656] -> [.131.114.168.27][55656] [TINC][VPN][Acceptable]
                   RISK: Known Proto on Non Std Port
              end: [.....1] [ip4][..tcp] [.131.114.168.27][59244] -> [.185.83.218.112][55655] [TINC][VPN][Acceptable]
                   RISK: Known Proto on Non Std Port
     DAEMON-EVENT: shutdown