00499{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"tls_missing_ch_frag.pcap","alias":"nDPId-test","max-flows-per-thread":2048,"max-idle-flows-per-thread":64,"reader-thread-count":1,"flow-scan-interval":10000000,"generic-max-idle-time":600000000,"icmp-max-idle-time":120000000,"udp-max-idle-time":180000000,"tcp-max-idle-time":3265032704,"max-packets-per-flow-to-send":3,"max-packets-per-flow-to-process":32,"max-packets-per-flow-to-analyse":32,"global_ts_usec":0}
00562{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":1,"source":"tls_missing_ch_frag.pcap","alias":"nDPId-test","packets-captured":1,"packets-processed":0,"total-skipped-flows":0,"total-l4-payload-len":0,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":0,"total-detection-updates":0,"total-updates":0,"current-active-flows":0,"total-active-flows":0,"total-idle-flows":0,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":2,"global_ts_usec":1626252471399786}
00760{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"tls_missing_ch_frag.pcap","alias":"nDPId-test","flow_id":1,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1626252471399786,"flow_src_last_pkt_time":1626252471399786,"flow_dst_last_pkt_time":1626252471399786,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1626252471399786,"l3_proto":"ip4","src_ip":"10.10.10.1","dst_ip":"192.168.0.1","src_port":443,"dst_port":33063,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00550{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"tls_missing_ch_frag.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_src_last_pkt_time":1626252471399786,"flow_dst_last_pkt_time":1626252471399786,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1626252471399786,"pkt":"ZIeIEyz\/WPmHGpl1CABFAAA8hHQAAH0G5JMKCgoBwKgAAQG7gScvWJhthsBAKqAS\/\/9QwwAAAgQFtAQCCApDaqR2wYhnewEDAwg="}
01926{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"tls_missing_ch_frag.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":2,"flow_src_last_pkt_time":1626252471399786,"flow_dst_last_pkt_time":1626252471549953,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":1090,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1090,"pkt_l4_len":1056,"thread_ts_usec":1626252471549953,"pkt":"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"}
02424{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"tls_missing_ch_frag.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":3,"flow_src_last_pkt_time":1626252471561439,"flow_dst_last_pkt_time":1626252471549953,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":1454,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1454,"pkt_l4_len":1420,"thread_ts_usec":1626252471561439,"pkt":"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"}
01055{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":3,"source":"tls_missing_ch_frag.pcap","alias":"nDPId-test","flow_id":1,"flow_state":"info","flow_src_packets_processed":2,"flow_dst_packets_processed":1,"flow_first_seen":1626252471399786,"flow_src_last_pkt_time":1626252471561439,"flow_dst_last_pkt_time":1626252471549953,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1388,"flow_dst_max_l4_payload_len":1024,"flow_src_tot_l4_payload_len":1388,"flow_dst_tot_l4_payload_len":1024,"midstream":0,"thread_ts_usec":1626252471561439,"l3_proto":"ip4","src_ip":"10.10.10.1","dst_ip":"192.168.0.1","src_port":443,"dst_port":33063,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS","proto_id":"91","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Safe","category_id":5,"category":"Web","hostname":"","tls": {"version":"TLSv1.3","ja3":"","ja3s":"907bf3ecef1c987c889946b737b43de8","unsafe_cipher":0,"cipher":"TLS_AES_256_GCM_SHA384"}}}
00773{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":14,"source":"tls_missing_ch_frag.pcap","alias":"nDPId-test","flow_id":1,"flow_state":"info","flow_src_packets_processed":6,"flow_dst_packets_processed":8,"flow_first_seen":1626252471399786,"flow_src_last_pkt_time":1626252471614928,"flow_dst_last_pkt_time":1626252471774171,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1957,"flow_dst_max_l4_payload_len":1024,"flow_src_tot_l4_payload_len":6121,"flow_dst_tot_l4_payload_len":3029,"midstream":0,"thread_ts_usec":1626252471774171,"l3_proto":"ip4","src_ip":"10.10.10.1","dst_ip":"192.168.0.1","src_port":443,"dst_port":33063,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00570{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":14,"source":"tls_missing_ch_frag.pcap","alias":"nDPId-test","packets-captured":14,"packets-processed":14,"total-skipped-flows":0,"total-l4-payload-len":9150,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":1,"total-detection-updates":0,"total-updates":0,"current-active-flows":0,"total-active-flows":1,"total-idle-flows":1,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":9,"global_ts_usec":1626252471774171}
~~~~~~~~~~~~~~~~~~~~ SUMMARY ~~~~~~~~~~~~~~~~~~~~
~~ packets captured/processed: 14/14
~~ skipped flows.............: 0
~~ total layer4 data length..: 9150 bytes
~~ total detected protocols..: 1
~~ total active/idle flows...: 1/1
~~ total timeout flows.......: 0
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~ total memory allocated....: 6423993 bytes
~~ total memory freed........: 6423993 bytes
~~ total allocations/frees...: 122454/122454
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~ json string min len.......: 504 chars
~~ json string max len.......: 2429 chars
~~ json string avg len.......: 1430 chars