0373{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15} 0352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409796,"pkt_len":61,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAQAAAAAACQAAAAAAAAAAAAAAAAAAAAAATURKUjk4ICAgICAgICAgAw==","pkt_caplen":61,"pkt_type":47,"pkt_ipoffset":14} 0185{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":47} 0352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409796,"pkt_len":61,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAV09SS0dST1VQICAgICAgAA==","pkt_caplen":61,"pkt_type":47,"pkt_ipoffset":14} 0185{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":47} 0352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409796,"pkt_len":61,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAQAAAAAABwAAAAAAAAAAAAAAAAAAAAAATURKUjk4ICAgICAgICAgAA==","pkt_caplen":61,"pkt_type":47,"pkt_ipoffset":14} 0185{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":47} 0352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409796,"pkt_len":61,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAQAAAAAACgAAAAAAAAAAAAAAAAAAAAAATURKUjk4ICAgICAgICAgIA==","pkt_caplen":61,"pkt_type":47,"pkt_ipoffset":14} 0185{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":47} 0352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409797,"pkt_len":61,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAQAAAAAACQAAAAAAAAAAAAAAAAAAAAAATURKUjk4ICAgICAgICAgAw==","pkt_caplen":61,"pkt_type":47,"pkt_ipoffset":14} 0185{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":47} 0352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409797,"pkt_len":61,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAV09SS0dST1VQICAgICAgAA==","pkt_caplen":61,"pkt_type":47,"pkt_ipoffset":14} 0185{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":47} 0352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409797,"pkt_len":61,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAQAAAAAABwAAAAAAAAAAAAAAAAAAAAAATURKUjk4ICAgICAgICAgAA==","pkt_caplen":61,"pkt_type":47,"pkt_ipoffset":14} 0185{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":47} 0352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409797,"pkt_len":61,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAQAAAAAACgAAAAAAAAAAAAAAAAAAAAAATURKUjk4ICAgICAgICAgIA==","pkt_caplen":61,"pkt_type":47,"pkt_ipoffset":14} 0185{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":47} 0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1576409797553,"flow_last_seen":1576409797553,"flow_tot_l4_data_len":76,"flow_min_l4_data_len":76,"flow_max_l4_data_len":76,"flow_avg_l4_data_len":76,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.239.129","dst_ip":"192.168.239.2","src_port":137,"dst_port":137,"l4_proto":"udp"} 0471{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409797,"pkt_len":110,"pkt":"AFBW6YlWAFBWM3ieCABFAABgBwAAAIAR07fAqO+BwKjvAgCJAIkATAvHAAQpAAABAAAAAAABIEVORUVFS0ZDREpESUNBQ0FDQUNBQ0FDQUNBQ0FDQUFEAAAgAAHADAAgAAEABJPgAAYAAMCo74E=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14} 0529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1576409797553,"flow_last_seen":1576409797553,"flow_tot_l4_data_len":76,"flow_min_l4_data_len":76,"flow_max_l4_data_len":76,"flow_avg_l4_data_len":76,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.239.129","dst_ip":"192.168.239.2","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","category":"System"}} 0472{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409797,"pkt_len":110,"pkt":"AFBW6YlWAFBWM3ieCABFAABgCAAAAIAR0rfAqO+BwKjvAgCJAIkATHy8AAIpAAABAAAAAAABIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUFBAAAgAAHADAAgAAEABJPgAAaAAMCo74E=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14} 0472{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409797,"pkt_len":110,"pkt":"AFBW6YlWAFBWM3ieCABFAABgCQAAAIAR0bfAqO+BwKjvAgCJAIkATA7DAAgpAAABAAAAAAABIEVORUVFS0ZDREpESUNBQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAHADAAgAAEABJPgAAYAAMCo74E=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14} 0472{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409797,"pkt_len":110,"pkt":"AFBW6YlWAFBWM3ieCABFAABgCgAAAIAR0LfAqO+BwKjvAgCJAIkATA7DAAYpAAABAAAAAAABIEVORUVFS0ZDREpESUNBQ0FDQUNBQ0FDQUNBQ0FDQUNBAAAgAAHADAAgAAEABJPgAAYAAMCo74E=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14} 0440{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1576409798047,"flow_last_seen":1576409798047,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.239.129","dst_ip":"224.0.0.2","l4_proto":"icmp"} 0402{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409798,"pkt_len":60,"pkt":"AQBeAAACAFBWM3ieCABFAAAcCwAAAIABn7TAqO+B4AAAAgoA9f8AAAAAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14} 0491{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1576409798047,"flow_last_seen":1576409798047,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.239.129","dst_ip":"224.0.0.2","l4_proto":"icmp","ndpi": {"proto":"ICMP","category":"Network"}} 0353{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409798,"pkt_len":61,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAAAAAAAAFAAAAAAAAAAAAAAAAAAAAAAAV09SS0dST1VQICAgICAgHg==","pkt_caplen":61,"pkt_type":47,"pkt_ipoffset":14} 0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":47} 0472{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409799,"pkt_len":110,"pkt":"AFBW6YlWAFBWM3ieCABFAABgDAAAAIARzrfAqO+BwKjvAgCJAIkATA7DAAgpAAABAAAAAAABIEVORUVFS0ZDREpESUNBQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAHADAAgAAEABJPgAAYAAMCo74E=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14} 0472{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409799,"pkt_len":110,"pkt":"AFBW6YlWAFBWM3ieCABFAABgDQAAAIARzbfAqO+BwKjvAgCJAIkATHy8AAIpAAABAAAAAAABIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUFBAAAgAAHADAAgAAEABJPgAAaAAMCo74E=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14} 0472{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409799,"pkt_len":110,"pkt":"AFBW6YlWAFBWM3ieCABFAABgDgAAAIARzLfAqO+BwKjvAgCJAIkATAvHAAQpAAABAAAAAAABIEVORUVFS0ZDREpESUNBQ0FDQUNBQ0FDQUNBQ0FDQUFEAAAgAAHADAAgAAEABJPgAAYAAMCo74E=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14} 0472{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409799,"pkt_len":110,"pkt":"AFBW6YlWAFBWM3ieCABFAABgDwAAAIARy7fAqO+BwKjvAgCJAIkATA7DAAYpAAABAAAAAAABIEVORUVFS0ZDREpESUNBQ0FDQUNBQ0FDQUNBQ0FDQUNBAAAgAAHADAAgAAEABJPgAAYAAMCo74E=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14} 0353{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409799,"pkt_len":61,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAAAAAAAAFAAAAAAAAAAAAAAAAAAAAAAAV09SS0dST1VQICAgICAgHg==","pkt_caplen":61,"pkt_type":47,"pkt_ipoffset":14} 0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":47} 0353{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409800,"pkt_len":61,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAAAAAAAAFAAAAAAAAAAAAAAAAAAAAAAAV09SS0dST1VQICAgICAgHg==","pkt_caplen":61,"pkt_type":47,"pkt_ipoffset":14} 0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":47} 0479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1576409800543,"flow_last_seen":1576409800543,"flow_tot_l4_data_len":76,"flow_min_l4_data_len":76,"flow_max_l4_data_len":76,"flow_avg_l4_data_len":76,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.239.129","dst_ip":"192.168.239.255","src_port":137,"dst_port":137,"l4_proto":"udp"} 0481{"flow_id":2,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409800,"pkt_len":110,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAABgEAAAAIARybrAqO+BwKjv\/wCJAIkATAq6AAQpEAABAAAAAAABIEVORUVFS0ZDREpESUNBQ0FDQUNBQ0FDQUNBQ0FDQUFEAAAgAAHADAAgAAEABJPgAAYAAMCo74E=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14} 0532{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1576409800543,"flow_last_seen":1576409800543,"flow_tot_l4_data_len":76,"flow_min_l4_data_len":76,"flow_max_l4_data_len":76,"flow_avg_l4_data_len":76,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.239.129","dst_ip":"192.168.239.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","category":"System"}} 0481{"flow_id":2,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409800,"pkt_len":110,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAABgEQAAAIARyLrAqO+BwKjv\/wCJAIkATHuvAAIpEAABAAAAAAABIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUFBAAAgAAHADAAgAAEABJPgAAaAAMCo74E=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14} 0481{"flow_id":2,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409800,"pkt_len":110,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAABgEgAAAIARx7rAqO+BwKjv\/wCJAIkATA22AAgpEAABAAAAAAABIEVORUVFS0ZDREpESUNBQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAHADAAgAAEABJPgAAYAAMCo74E=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14} 0481{"flow_id":2,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409800,"pkt_len":110,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAABgEwAAAIARxrrAqO+BwKjv\/wCJAIkATA22AAYpEAABAAAAAAABIEVORUVFS0ZDREpESUNBQ0FDQUNBQ0FDQUNBQ0FDQUNBAAAgAAHADAAgAAEABJPgAAYAAMCo74E=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14} 0481{"flow_id":2,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409801,"pkt_len":110,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAABgFAAAAIARxbrAqO+BwKjv\/wCJAIkATA22AAgpEAABAAAAAAABIEVORUVFS0ZDREpESUNBQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAHADAAgAAEABJPgAAYAAMCo74E=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14} 0481{"flow_id":2,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409801,"pkt_len":110,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAABgFQAAAIARxLrAqO+BwKjv\/wCJAIkATHuvAAIpEAABAAAAAAABIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUFBAAAgAAHADAAgAAEABJPgAAaAAMCo74E=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14} 0481{"flow_id":2,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409801,"pkt_len":110,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAABgFgAAAIARw7rAqO+BwKjv\/wCJAIkATAq6AAQpEAABAAAAAAABIEVORUVFS0ZDREpESUNBQ0FDQUNBQ0FDQUNBQ0FDQUFEAAAgAAHADAAgAAEABJPgAAYAAMCo74E=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14} 0481{"flow_id":2,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409801,"pkt_len":110,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAABgFwAAAIARwrrAqO+BwKjv\/wCJAIkATA22AAYpEAABAAAAAAABIEVORUVFS0ZDREpESUNBQ0FDQUNBQ0FDQUNBQ0FDQUNBAAAgAAHADAAgAAEABJPgAAYAAMCo74E=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14} 0481{"flow_id":2,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409802,"pkt_len":110,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAABgGAAAAIARwbrAqO+BwKjv\/wCJAIkATAq6AAQpEAABAAAAAAABIEVORUVFS0ZDREpESUNBQ0FDQUNBQ0FDQUNBQ0FDQUFEAAAgAAHADAAgAAEABJPgAAYAAMCo74E=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14} 0482{"flow_id":2,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409802,"pkt_len":110,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAABgGQAAAIARwLrAqO+BwKjv\/wCJAIkATHuvAAIpEAABAAAAAAABIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUFBAAAgAAHADAAgAAEABJPgAAaAAMCo74E=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14} 0482{"flow_id":2,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409802,"pkt_len":110,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAABgGgAAAIARv7rAqO+BwKjv\/wCJAIkATA22AAgpEAABAAAAAAABIEVORUVFS0ZDREpESUNBQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAHADAAgAAEABJPgAAYAAMCo74E=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14} 0482{"flow_id":2,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409802,"pkt_len":110,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAABgGwAAAIARvrrAqO+BwKjv\/wCJAIkATA22AAYpEAABAAAAAAABIEVORUVFS0ZDREpESUNBQ0FDQUNBQ0FDQUNBQ0FDQUNBAAAgAAHADAAgAAEABJPgAAYAAMCo74E=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14} 0511{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409802,"pkt_len":180,"pkt":"AwAAAAABAFBWM3ieAKbw8AMsAP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAdTURKUjk4ICAgICAgICAgAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAIQAAAAAAAAAAAAAAAAAAAAAAAAAhAFYAAwABAAEAAgAyAFxNQUlMU0xPVFxCUk9XU0UAAQNg6gAATURKUjk4AAAAAAAAAAAAAAQAAyBAABUEVaoA","pkt_caplen":180,"pkt_type":166,"pkt_ipoffset":14} 0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":166} 0482{"flow_id":2,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409802,"pkt_len":110,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAABgHAAAAIARvbrAqO+BwKjv\/wCJAIkATA62AAgoEAABAAAAAAABIEVORUVFS0ZDREpESUNBQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAHADAAgAAEABJPgAAYAAMCo74E=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14} 0482{"flow_id":2,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409802,"pkt_len":110,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAABgHQAAAIARvLrAqO+BwKjv\/wCJAIkATHyvAAIoEAABAAAAAAABIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUFBAAAgAAHADAAgAAEABJPgAAaAAMCo74E=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14} 0482{"flow_id":2,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409802,"pkt_len":110,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAABgHgAAAIARu7rAqO+BwKjv\/wCJAIkATAu6AAQoEAABAAAAAAABIEVORUVFS0ZDREpESUNBQ0FDQUNBQ0FDQUNBQ0FDQUFEAAAgAAHADAAgAAEABJPgAAYAAMCo74E=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14} 0483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1576409807597,"flow_last_seen":1576409807597,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.239.129","dst_ip":"192.168.239.255","src_port":138,"dst_port":138,"l4_proto":"udp"} 0657{"flow_id":3,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409807,"pkt_len":243,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAADlJAAAAIARtTXAqO+BwKjv\/wCKAIoA0Qn+EQIADMCo74EAigC7AAAgRU5FRUVLRkNESkRJQ0FDQUNBQ0FDQUNBQ0FDQUNBQUEAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJOAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAIQAAAAAAAAAAAAAAAAAAAAAAAAAhAFYAAwABAAEAAgAyAFxNQUlMU0xPVFxCUk9XU0UAAQNg6gAATURKUjk4AAAAAAAAAAAAAAQAAyBAABUEVaoA","pkt_caplen":243,"pkt_type":2048,"pkt_ipoffset":14} 0580{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1576409807597,"flow_last_seen":1576409807597,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.239.129","dst_ip":"192.168.239.255","src_port":138,"dst_port":138,"l4_proto":"udp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"NetBIOS.SMBv1","category":"System"}} 0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409811,"pkt_len":91,"pkt":"AFBWM3ieAAwp1HmyAE3g4AP\/\/wBKAAQAAAAAAFBWM3ieBVAAAAAAAAwp1HmyBVL\/U01CKwAAAAAAAAAAAAAAAAACAQwAAAAA0AAyAADBAwEBAAcABEhlbGxvAA==","pkt_caplen":91,"pkt_type":77,"pkt_ipoffset":14} 0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":77} 0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409811,"pkt_len":91,"pkt":"AFBWM3ieAAwp1HmyAE3g4AP\/\/wBKAAQAAAAAAFBWM3ieBVAAAAAAAAwp1HmyBVL\/U01CKwAAAAAAAAAAAAAAAAACAQwAAAAA0AAyAADBAwEBAAcABEhlbGxvAA==","pkt_caplen":91,"pkt_type":77,"pkt_ipoffset":14} 0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":77} 0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409811,"pkt_len":91,"pkt":"AFBWM3ieAAwp1HmyAE3g4AP\/\/wBKAAQAAAAAAFBWM3ieBVAAAAAAAAwp1HmyBVL\/U01CKwAAAAAAAAAAAAAAAAACAQwAAAAA0AAyAADBAwEBAAcABEhlbGxvAA==","pkt_caplen":91,"pkt_type":77,"pkt_ipoffset":14} 0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":77} 0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409812,"pkt_len":91,"pkt":"AFBWM3ieAAwp1HmyAE3g4AP\/\/wBKAAQAAAAAAFBWM3ieBVAAAAAAAAwp1HmyBVL\/U01CKwAAAAAAAAAAAAAAAAACAQwAAAAA0AAyAADBAwEBAAcABEhlbGxvAA==","pkt_caplen":91,"pkt_type":77,"pkt_ipoffset":14} 0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":77} 0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":47,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409813,"pkt_len":91,"pkt":"AFBWM3ieAAwp1HmyAE3g4AP\/\/wBKAAQAAAAAAFBWM3ieBVAAAAAAAAwp1HmyBVL\/U01CKwAAAAAAAAAAAAAAAAACAQwAAAAA0AAyAADBAwEBAAcABEhlbGxvAA==","pkt_caplen":91,"pkt_type":77,"pkt_ipoffset":14} 0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":47,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":77} 0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":48,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409815,"pkt_len":91,"pkt":"AFBWM3ieAAwp1HmyAE3g4AP\/\/wBKAAQAAAAAAFBWM3ieBVAAAAAAAAwp1HmyBVL\/U01CKwAAAAAAAAAAAAAAAAACAQwAAAAA0AAyAADBAwEBAAcABEhlbGxvAA==","pkt_caplen":91,"pkt_type":77,"pkt_ipoffset":14} 0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":48,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":77} 0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":49,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409817,"pkt_len":91,"pkt":"AFBWM3ieAAwp1HmyAE3g4AP\/\/wBKAAQAAAAAAFBWM3ieBVAAAAAAAAwp1HmyBVL\/U01CKwAAAAAAAAAAAAAAAAACAQwAAAAA0AAyAADBAwEBAAcABEhlbGxvAA==","pkt_caplen":91,"pkt_type":77,"pkt_ipoffset":14} 0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":49,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":77} 0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409819,"pkt_len":91,"pkt":"AFBWM3ieAAwp1HmyAE3g4AP\/\/wBKAAQAAAAAAFBWM3ieBVAAAAAAAAwp1HmyBVL\/U01CKwAAAAAAAAAAAAAAAAACAQwAAAAA0AAyAADBAwEBAAcABEhlbGxvAA==","pkt_caplen":91,"pkt_type":77,"pkt_ipoffset":14} 0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":77} 0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":51,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409822,"pkt_len":91,"pkt":"AFBWM3ieAAwp1HmyAE3g4AP\/\/wBKAAQAAAAAAFBWM3ieBVAAAAAAAAwp1HmyBVL\/U01CKwAAAAAAAAAAAAAAAAACAQwAAAAA0AAyAADBAwEBAAcABEhlbGxvAA==","pkt_caplen":91,"pkt_type":77,"pkt_ipoffset":14} 0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":51,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":77} 0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":52,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409825,"pkt_len":91,"pkt":"AFBWM3ieAAwp1HmyAE3g4AP\/\/wBKAAQAAAAAAFBWM3ieBVAAAAAAAAwp1HmyBVL\/U01CKwAAAAAAAAAAAAAAAAACAQwAAAAA0AAyAADBAwEBAAcABEhlbGxvAA==","pkt_caplen":91,"pkt_type":77,"pkt_ipoffset":14} 0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":52,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":77} 0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409828,"pkt_len":91,"pkt":"AFBWM3ieAAwp1HmyAE3g4AP\/\/wBKAAQAAAAAAFBWM3ieBVAAAAAAAAwp1HmyBVL\/U01CKwAAAAAAAAAAAAAAAAACAQwAAAAA0AAyAADBAwEBAAcABEhlbGxvAA==","pkt_caplen":91,"pkt_type":77,"pkt_ipoffset":14} 0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":77} 0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":54,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409832,"pkt_len":91,"pkt":"AFBWM3ieAAwp1HmyAE3g4AP\/\/wBKAAQAAAAAAFBWM3ieBVAAAAAAAAwp1HmyBVL\/U01CKwAAAAAAAAAAAAAAAAACAQwAAAAA0AAyAADBAwEBAAcABEhlbGxvAA==","pkt_caplen":91,"pkt_type":77,"pkt_ipoffset":14} 0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":54,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":77} 0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":55,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409836,"pkt_len":91,"pkt":"AFBWM3ieAAwp1HmyAE3g4AP\/\/wBKAAQAAAAAAFBWM3ieBVAAAAAAAAwp1HmyBVL\/U01CKwAAAAAAAAAAAAAAAAACAQwAAAAA0AAyAADBAwEBAAcABEhlbGxvAA==","pkt_caplen":91,"pkt_type":77,"pkt_ipoffset":14} 0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":55,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":77} 0354{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409844,"pkt_len":61,"pkt":"AwAAAAABAAwp1HmyAC\/w8AMsAP\/vAQAAAAAAAQACo2haC8B0A+lo+\/82xHHoVEVTVDEgICAgICAgICAgAA==","pkt_caplen":61,"pkt_type":47,"pkt_ipoffset":14} 0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":47} 0354{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":57,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409844,"pkt_len":61,"pkt":"AwAAAAABAAwp1HmyAC\/w8AMsAP\/vAAAAAAAAAgAEuP7\/UOih91uNRuQWUOhaV09SS0dST1VQICAgICAgAA==","pkt_caplen":61,"pkt_type":47,"pkt_ipoffset":14} 0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":57,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":47} 0354{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":58,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409845,"pkt_len":61,"pkt":"AwAAAAABAAwp1HmyAC\/w8AMsAP\/vAAAAAAAAAgACo2haC8B0A+lo+\/82xHHoV09SS0dST1VQICAgICAgAA==","pkt_caplen":61,"pkt_type":47,"pkt_ipoffset":14} 0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":58,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":47} 0354{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":59,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409845,"pkt_len":61,"pkt":"AwAAAAABAAwp1HmyAC\/w8AMsAP\/vAQAAAAAAAQAEuP7\/UOih91uNRuQWUOhaVEVTVDEgICAgICAgICAgAA==","pkt_caplen":61,"pkt_type":47,"pkt_ipoffset":14} 0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":59,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":47} 0354{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409845,"pkt_len":61,"pkt":"AwAAAAABAAwp1HmyAC\/w8AMsAP\/vAQAAAAAAAQACo2haC8B0A+lo+\/82xHHoVEVTVDEgICAgICAgICAgAA==","pkt_caplen":61,"pkt_type":47,"pkt_ipoffset":14} 0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":47} 0354{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":61,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409845,"pkt_len":61,"pkt":"AwAAAAABAAwp1HmyAC\/w8AMsAP\/vAAAAAAAAAgAEuP7\/UOih91uNRuQWUOhaV09SS0dST1VQICAgICAgAA==","pkt_caplen":61,"pkt_type":47,"pkt_ipoffset":14} 0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":61,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":47} 0479{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":62,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409846,"pkt_len":156,"pkt":"AwAAAAABAFBWM3ieAI7w8AMsAP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAdTURKUjk4ICAgICAgICAgIP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAACQAAAAAAAAAAAAAAAAAAAAAAAAAJAFYAAwABAAEAAgAaAFxNQUlMU0xPVFxCUk9XU0UAAgBNREpSOTgA","pkt_caplen":156,"pkt_type":142,"pkt_ipoffset":14} 0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":62,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":142} 0625{"flow_id":3,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409851,"pkt_len":219,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAADNJQAAAIARtE3AqO+BwKjv\/wCKAIoAuRxGEQIADsCo74EAigCjAAAgRU5FRUVLRkNESkRJQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0EAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJOAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAACQAAAAAAAAAAAAAAAAAAAAAAAAAJAFYAAwABAAEAAgAaAFxNQUlMU0xPVFxCUk9XU0UAAgBNREpSOTgA","pkt_caplen":219,"pkt_type":2048,"pkt_ipoffset":14} 0479{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":64,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409856,"pkt_len":156,"pkt":"AwAAAAABAFBWM3ieAI7w8AMsAP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAdTURKUjk4ICAgICAgICAgIP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAACQAAAAAAAAAAAAAAAAAAAAAAAAAJAFYAAwABAAEAAgAaAFxNQUlMU0xPVFxCUk9XU0UAAgBNREpSOTgA","pkt_caplen":156,"pkt_type":142,"pkt_ipoffset":14} 0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":64,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":142} 0444{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":65,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409859,"pkt_len":115,"pkt":"\/\/\/\/\/\/\/\/AAwp1HmyAGXg4AP\/\/wBiAAQAAAAA\/\/\/\/\/\/\/\/BVEAAAAAAAwp1HmyBVIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPMBAYBNREpSOTggICAgICAgICAgVEVTVDEgICAgICAgICAgAA==","pkt_caplen":115,"pkt_type":101,"pkt_ipoffset":14} 0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":65,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":101} 0353{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":66,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409859,"pkt_len":61,"pkt":"AwAAAAABAAwp1HmyAC\/w8AMsAP\/vCgADAAAAAwBNREpSOTggICAgICAgICAgVEVTVDEgICAgICAgICAgAA==","pkt_caplen":61,"pkt_type":47,"pkt_ipoffset":14} 0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":66,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":47} 0353{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":67,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409859,"pkt_len":61,"pkt":"AAwp1HmyAFBWM3ieAC\/w8AMsAP\/vDhcVAAMAFQBURVNUMSAgICAgICAgICAATURKUjk4ICAgICAgICAgIA==","pkt_caplen":61,"pkt_type":47,"pkt_ipoffset":14} 0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":67,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":47} 0348{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":68,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409859,"pkt_len":60,"pkt":"AFBWM3ieAAwp1HmyAAPw8H8sAP\/vAQAAAAAAAQACo2haC8B0A+lo+\/82xHHoVEVTVDEgICAgICAgICAg","pkt_caplen":60,"pkt_type":3,"pkt_ipoffset":14} 0185{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":68,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":3} 0346{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":69,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409859,"pkt_len":60,"pkt":"AAwp1HmyAFBWM3ieAAPw8XNgDAAAAIARzrfAqO+BwKjvAgCJAIkATA7DAAgpAAABAAAAAAABIEVORUVF","pkt_caplen":60,"pkt_type":3,"pkt_ipoffset":14} 0185{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":69,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":3} 0348{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":70,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409859,"pkt_len":60,"pkt":"AFBWM3ieAAwp1HmyAATw8AEBAP\/vAAAAAAAAAgAEuP7\/UOih91uNRuQWUOhaV09SS0dST1VQICAgICAg","pkt_caplen":60,"pkt_type":4,"pkt_ipoffset":14} 0185{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":70,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":4} 0346{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":71,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409859,"pkt_len":60,"pkt":"AAwp1HmyAFBWM3ieAATw8QEBDQAAAIARzbfAqO+BwKjvAgCJAIkATHy8AAIpAAABAAAAAAABIEZIRVBG","pkt_caplen":60,"pkt_type":4,"pkt_ipoffset":14} 0185{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":71,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":4} 0349{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":72,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409859,"pkt_len":60,"pkt":"AFBWM3ieAAwp1HmyABLw8AAADgD\/7xmPygUVAAMAFQP\/BVEAAAAAAAwp1HmyBVIAAAAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":18,"pkt_ipoffset":14} 0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":72,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":18} 0348{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":73,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409859,"pkt_len":60,"pkt":"AAwp1HmyAFBWM3ieABLw8AADDgD\/7xeBvAUDABUAAxXvAgCJAIkATAvHAAQpAAABAAAAAAABIEVORUVF","pkt_caplen":60,"pkt_type":18,"pkt_ipoffset":14} 0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":73,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":18} 0347{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":74,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409859,"pkt_len":60,"pkt":"AFBWM3ieAAwp1HmyAATw8QEDAP\/vCgADAAAAAwBNREpSOTggICAgICAgICAgVEVTVDEgICAgICAgICAg","pkt_caplen":60,"pkt_type":4,"pkt_ipoffset":14} 0185{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":74,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":4} 0504{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":75,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409859,"pkt_len":174,"pkt":"AFBWM3ieAAwp1HmyAKDw8AICDgD\/7xYEAAAAAAEAFQP\/U01CcgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyAAAhAABrAAJQQyBORVRXT1JLIFBST0dSQU0gMS4wAAJNSUNST1NPRlQgTkVUV09SS1MgMy4wAAJET1MgTE0xLjJYMDAyAAJET1MgTEFOTUFOMi4xAAJXaW5kb3dzIGZvciBXb3JrZ3JvdXBzIDMuMWEA","pkt_caplen":174,"pkt_type":160,"pkt_ipoffset":14} 0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":75,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":160} 0346{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":76,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409859,"pkt_len":60,"pkt":"AAwp1HmyAFBWM3ieAATw8QEEDwAAAIARy7fAqO+BwKjvAgCJAIkATA7DAAYpAAABAAAAAAABIEVORUVF","pkt_caplen":60,"pkt_type":4,"pkt_ipoffset":14} 0185{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":76,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":4} 0408{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409859,"pkt_len":101,"pkt":"AAwp1HmyAFBWM3ieAFfw8AIEDgD\/7xYMAAABACgAAxX\/U01CcgAAAACAAAAAAAAAAAAAAAAAAAAAAAAyAAAhAA0EAAIAaAsCAAEAAwAVBQOAsmSPT8T\/AAAAAAgAFQUDgAEb9l0=","pkt_caplen":101,"pkt_type":87,"pkt_ipoffset":14} 0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":87} 0348{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":78,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409859,"pkt_len":60,"pkt":"AFBWM3ieAAwp1HmyAATw8QEEAP\/vAAAAAAAAAgAEuP7\/UOih91uNRuQWUOhaV09SS0dST1VQICAgICAg","pkt_caplen":60,"pkt_type":4,"pkt_ipoffset":14} 0185{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":78,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":4} 0482{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":79,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409859,"pkt_len":155,"pkt":"AFBWM3ieAAwp1HmyAI3w8AQEDgD\/7xYMAAAoAAIAFQP\/U01CcwAAAAAQAAAAAAAAAAAAAAAAAAAAAAAyAQAhAAp1AEcAPgYCAAAAFQUDgAEAAAAAABAAAE1BUlRJTiBST1NFTkFVAAT\/AAAAAAAYACkANLVcqnsYd8yVvD05\/JKBnmi3H4Zsvi3FXFxNREpSOThcVEVTVABBOgA=","pkt_caplen":155,"pkt_type":141,"pkt_ipoffset":14} 0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":79,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":141} 0347{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":80,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409859,"pkt_len":60,"pkt":"AAwp1HmyAFBWM3ieAATw8QEGAP\/vAAAAAAAAFAAAAAAAAAAAAAAAAAAAAAAAV09SS0dST1VQICAgICAg","pkt_caplen":60,"pkt_type":4,"pkt_ipoffset":14} 0185{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":80,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":4} 0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":81,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409859,"pkt_len":83,"pkt":"AAwp1HmyAFBWM3ieAEXw8AQGDgD\/7xYMAAACACgAAxX\/U01CcwAAAACQAAAAAAAAAAAAAAAAAAAAyAAyAAAhAAN1ACkAAAAAAAL\/AAAAAwBBOgA=","pkt_caplen":83,"pkt_type":69,"pkt_ipoffset":14} 0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":81,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":69} 0347{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":82,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409859,"pkt_len":60,"pkt":"AFBWM3ieAAwp1HmyAATw8QEGAP\/vCgADAAAAAwBNREpSOTggICAgICAgICAgVEVTVDEgICAgICAgICAg","pkt_caplen":60,"pkt_type":4,"pkt_ipoffset":14} 0185{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":82,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":4} 0373{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409859,"pkt_len":76,"pkt":"AFBWM3ieAAwp1HmyAD7w8AYGDgD\/7xYMAAAoAAMAFQP\/U01CKwAAAAAAAAAAAAAAAAAAAAAAAAAAyAAyAABhAAEBAAcABEhlbGxvAA==","pkt_caplen":76,"pkt_type":62,"pkt_ipoffset":14} 0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":62} 0347{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":84,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409859,"pkt_len":60,"pkt":"AAwp1HmyAFBWM3ieAATw8QEIEQAAAIARyLrAqO+BwKjv\/wCJAIkATHuvAAIpEAABAAAAAAABIEZIRVBG","pkt_caplen":60,"pkt_type":4,"pkt_ipoffset":14} 0185{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":84,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":4} 0373{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":85,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409859,"pkt_len":76,"pkt":"AAwp1HmyAFBWM3ieAD7w8AYIDgD\/7xYMAAADACgAAxX\/U01CKwAAAACAAAAAAAAAAAAAAAAAAAAAyAAyAABhAAEBAAcABEhlbGxvAA==","pkt_caplen":76,"pkt_type":62,"pkt_ipoffset":14} 0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":85,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":62} 0348{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":86,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409859,"pkt_len":60,"pkt":"AFBWM3ieAAwp1HmyAATw8QEIAP\/vAAAAAAAAAgAEuP7\/UOih91uNRuQWUOhaV09SS0dST1VQICAgICAg","pkt_caplen":60,"pkt_type":4,"pkt_ipoffset":14} 0185{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":86,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":4} 0349{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":87,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409859,"pkt_len":60,"pkt":"AFBWM3ieAAwp1HmyABLw8AgJDgD\/7xQAAAAoAAAAFQP\/U01CcwAAAAAQAAAAAAAAAAAAAAAAAAAAAAAy","pkt_caplen":60,"pkt_type":18,"pkt_ipoffset":14} 0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":87,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":18} 0347{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":88,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409859,"pkt_len":60,"pkt":"AAwp1HmyAFBWM3ieAATw8QELEwAAAIARxrrAqO+BwKjv\/wCJAIkATA22AAYpEAABAAAAAAABIEVORUVF","pkt_caplen":60,"pkt_type":4,"pkt_ipoffset":14} 0185{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":88,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":4} 0444{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":89,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409859,"pkt_len":115,"pkt":"\/\/\/\/\/\/\/\/AAwp1HmyAGXg4AP\/\/wBiABQAAAAA\/\/\/\/\/\/\/\/BVEAAAAAAAwp1HmyBVIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPMBAYBNREpSOTggICAgICAgICAgVEVTVDEgICAgICAgICAgAA==","pkt_caplen":115,"pkt_type":101,"pkt_ipoffset":14} 0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":89,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":101} 0444{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":90,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409860,"pkt_len":115,"pkt":"\/\/\/\/\/\/\/\/AAwp1HmyAGXg4AP\/\/wBiABQAAAAA\/\/\/\/\/\/\/\/BVEAAAAAAAwp1HmyBVIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPMBAYBNREpSOTggICAgICAgICAgVEVTVDEgICAgICAgICAgAA==","pkt_caplen":115,"pkt_type":101,"pkt_ipoffset":14} 0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":90,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":101} 0444{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":91,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409860,"pkt_len":115,"pkt":"\/\/\/\/\/\/\/\/AAwp1HmyAGXg4AP\/\/wBiABQAAAAA\/\/\/\/\/\/\/\/BVEAAAAAAAwp1HmyBVIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPMBAYBNREpSOTggICAgICAgICAgVEVTVDEgICAgICAgICAgAA==","pkt_caplen":115,"pkt_type":101,"pkt_ipoffset":14} 0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":91,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":101} 0444{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":92,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409861,"pkt_len":115,"pkt":"\/\/\/\/\/\/\/\/AAwp1HmyAGXg4AP\/\/wBiABQAAAAA\/\/\/\/\/\/\/\/BVEAAAAAAAwp1HmyBVIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPMBAYBNREpSOTggICAgICAgICAgVEVTVDEgICAgICAgICAgAA==","pkt_caplen":115,"pkt_type":101,"pkt_ipoffset":14} 0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":92,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":101} 0625{"flow_id":3,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":93,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409861,"pkt_len":219,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAADNJgAAAIARs03AqO+BwKjv\/wCKAIoAuRxEEQIAEMCo74EAigCjAAAgRU5FRUVLRkNESkRJQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0EAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJOAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAACQAAAAAAAAAAAAAAAAAAAAAAAAAJAFYAAwABAAEAAgAaAFxNQUlMU0xPVFxCUk9XU0UAAgBNREpSOTgA","pkt_caplen":219,"pkt_type":2048,"pkt_ipoffset":14} 0511{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":94,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409862,"pkt_len":180,"pkt":"AwAAAAABAFBWM3ieAKbw8AMsAP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAdTURKUjk4ICAgICAgICAgAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAIQAAAAAAAAAAAAAAAAAAAAAAAAAhAFYAAwABAAEAAgAyAFxNQUlMU0xPVFxCUk9XU0UAAQRg6gAATURKUjk4AAAAAAAAAAAAAAQAAyBBABUEVaoA","pkt_caplen":180,"pkt_type":166,"pkt_ipoffset":14} 0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":94,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":166} 0479{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":95,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409866,"pkt_len":156,"pkt":"AwAAAAABAFBWM3ieAI7w8AMsAP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAdTURKUjk4ICAgICAgICAgIP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAACQAAAAAAAAAAAAAAAAAAAAAAAAAJAFYAAwABAAEAAgAaAFxNQUlMU0xPVFxCUk9XU0UAAgBNREpSOTgA","pkt_caplen":156,"pkt_type":142,"pkt_ipoffset":14} 0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":95,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":142} 0657{"flow_id":3,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":96,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409867,"pkt_len":243,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAADlJwAAAIARsjXAqO+BwKjv\/wCKAIoA0Qj3EQIAEsCo74EAigC7AAAgRU5FRUVLRkNESkRJQ0FDQUNBQ0FDQUNBQ0FDQUNBQUEAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJOAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAIQAAAAAAAAAAAAAAAAAAAAAAAAAhAFYAAwABAAEAAgAyAFxNQUlMU0xPVFxCUk9XU0UAAQRg6gAATURKUjk4AAAAAAAAAAAAAAQAAyBBABUEVaoA","pkt_caplen":243,"pkt_type":2048,"pkt_ipoffset":14} 0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":97,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409868,"pkt_len":89,"pkt":"AFBWM3ieAAwp1HmyAEvw8AoIDgD\/7xYEAAAAAAQAFQP\/U01CgQAAAAAAAAAAAAAAAAAAAAAAAAAAyHUFAACBAAIUAAgAEgAEXD8\/Pz8\/Pz8\/Lj8\/PwAFAAA=","pkt_caplen":89,"pkt_type":75,"pkt_ipoffset":14} 0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":97,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":75} 0361{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":98,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409868,"pkt_len":67,"pkt":"AAwp1HmyAFBWM3ieADXw8AgMDgD\/7xYMAAAEACgAAxX\/U01CgQEAEgCAAAAAAAAAAAAAAAAAAAAAyHUFAACBAAAAAA==","pkt_caplen":67,"pkt_type":53,"pkt_ipoffset":14} 0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":98,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":53} 0373{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":99,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409868,"pkt_len":76,"pkt":"AFBWM3ieAAwp1HmyAD7w8AwKDgD\/7xYMAAAoAAUAFQP\/U01CgQAAAAAAAAAAAAAAAAAAAAAAAAAAyHUFAAChAAIUAAAABQAEAAUAAA==","pkt_caplen":76,"pkt_type":62,"pkt_ipoffset":14} 0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":99,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":62} 0362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409868,"pkt_len":67,"pkt":"AAwp1HmyAFBWM3ieADXw8AoODgD\/7xYMAAAFACgAAxX\/U01CgQEAEgCAAAAAAAAAAAAAAAAAAAAAyHUFAAChAAAAAA==","pkt_caplen":67,"pkt_type":53,"pkt_ipoffset":14} 0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":53} 0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":101,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409868,"pkt_len":89,"pkt":"AFBWM3ieAAwp1HmyAEvw8A4MDgD\/7xYMAAAoAAYAFQP\/U01CgQAAAAAAAAAAAAAAAAAAAAAAAAAAyHUFAADBAAIUABYAEgAEXD8\/Pz8\/Pz8\/Lj8\/PwAFAAA=","pkt_caplen":89,"pkt_type":75,"pkt_ipoffset":14} 0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":101,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":75} 0493{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409868,"pkt_len":158,"pkt":"AAwp1HmyAFBWM3ieAJDw8AwQDgD\/7xYMAAAGACgAAxX\/U01CgQAAAACAAAAAAAAAAAAAAAAAAAAAyHUFAADBAAECAFkABVYAgz8\/Pz8\/Pz8\/Pz8\/FgAAAQAAAAAAECpjj08AAAAALgAgICAgICAAAAAAAIM\/Pz8\/Pz8\/Pz8\/PxYBAAEAAAAAABAqY49PAAAAAC4uACAgICAgAAAAAAA=","pkt_caplen":158,"pkt_type":144,"pkt_ipoffset":14} 0188{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":144} 0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409868,"pkt_len":97,"pkt":"AFBWM3ieAAwp1HmyAFPw8BAODgD\/7xYMAAAoAAcAFQP\/U01CgQAAAAAAAAAAAAAAAAAAAAAAAAAAyHUFAADhAAIUAAAAGgAEAAUVAIM\/Pz8\/Pz8\/Pz8\/PxYBAAEAgwAAAQ==","pkt_caplen":97,"pkt_type":83,"pkt_ipoffset":14} 0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":83} 0362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409868,"pkt_len":67,"pkt":"AAwp1HmyAFBWM3ieADXw8A4SDgD\/7xYMAAAHACgAAxX\/U01CgQEAEgCAAAAAAAAAAAAAAAAAAAAAyHUFAADhAAAAAA==","pkt_caplen":67,"pkt_type":53,"pkt_ipoffset":14} 0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":53} 0362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409868,"pkt_len":67,"pkt":"AFBWM3ieAAwp1HmyADXw8BIQDgD\/7xYMAAAoAAgAFQP\/U01CgAAAAAAAAAAAAAAAAAAAAAAAAAAAyHUFAAABAQAAAA==","pkt_caplen":67,"pkt_type":53,"pkt_ipoffset":14} 0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":53} 0376{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409868,"pkt_len":77,"pkt":"AAwp1HmyAFBWM3ieAD\/w8BAUDgD\/7xYMAAAIACgAAxX\/U01CgAAAAACAAAAAAAAAAAAAAAAAAAAAyHUFAAABAQVq\/wABAAJ2+AAAAAA=","pkt_caplen":77,"pkt_type":63,"pkt_ipoffset":14} 0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":63} 0350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409868,"pkt_len":60,"pkt":"AFBWM3ieAAwp1HmyABLw8BQTDgD\/7xQAAAAoAAAAFQP\/U01CgQAAAAAAAAAAAAAAAAAAAAAAAAAAyHUF","pkt_caplen":60,"pkt_type":18,"pkt_ipoffset":14} 0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":18} 0348{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":108,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409868,"pkt_len":60,"pkt":"AAwp1HmyAFBWM3ieAATw8QEXHAAAAIARvbrAqO+BwKjv\/wCJAIkATA62AAgoEAABAAAAAAABIEVORUVF","pkt_caplen":60,"pkt_type":4,"pkt_ipoffset":14} 0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":108,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":4} 0626{"flow_id":3,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":109,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409871,"pkt_len":219,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAADNKAAAAIARsU3AqO+BwKjv\/wCKAIoAuRxAEQIAFMCo74EAigCjAAAgRU5FRUVLRkNESkRJQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0EAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJOAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAACQAAAAAAAAAAAAAAAAAAAAAAAAAJAFYAAwABAAEAAgAaAFxNQUlMU0xPVFxCUk9XU0UAAgBNREpSOTgA","pkt_caplen":219,"pkt_type":2048,"pkt_ipoffset":14} 0418{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":110,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409872,"pkt_len":107,"pkt":"AFBWM3ieAAwp1HmyAF3w8BYSDgD\/7xYEAAAAAAkAFQP\/U01CLQAAAAAAAAAAAAAAAAAAAAAAAAAAyHUFAAAhAQ\/\/AAAABwACABYAIAAeKfZdEgAAAAAAAAAAAAAAAAAKAFxURVNULlRYVAA=","pkt_caplen":107,"pkt_type":93,"pkt_ipoffset":14} 0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":110,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":93} 0404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":111,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409872,"pkt_len":97,"pkt":"AAwp1HmyAFBWM3ieAFPw8BIYDgD\/7xYMAAAJACgAAxX\/U01CLQAAAACAAAAAAAAAAAAAAAAAAAAAyHUFAAAhAQ\/\/AAAAAAAgAB4p9l0AAAAAAgAAAAAAAgAAAAAAAAAAAA==","pkt_caplen":97,"pkt_type":83,"pkt_ipoffset":14} 0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":111,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":83} 1884{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409872,"pkt_len":1204,"pkt":"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","pkt_caplen":1204,"pkt_type":1190,"pkt_ipoffset":14} 0189{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":1190} 0362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409872,"pkt_len":69,"pkt":"AAwp1HmyAFBWM3ieADfw8BQaDgD\/7xYMAAAKACgAAxX\/U01CCwAAAACAAAAAAAAAAAAAAAAAAAAAyHUFAABBAQFkBAAA","pkt_caplen":69,"pkt_type":55,"pkt_ipoffset":14} 0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":55} 0370{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409872,"pkt_len":73,"pkt":"AFBWM3ieAAwp1HmyADvw8BoWDgD\/7xYMAAAoAAsAFQP\/U01CBAAAAAAAAAAAAAAAAAAAAAAAAAAAyHUFAABhAQMAAB4p9l0AAA==","pkt_caplen":73,"pkt_type":59,"pkt_ipoffset":14} 0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":59} 0362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":115,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409872,"pkt_len":67,"pkt":"AAwp1HmyAFBWM3ieADXw8BYcDgD\/7xYMAAALACgAAxX\/U01CBAAAAACAAAAAAAAAAAAAAAAAAAAAyHUFAABhAQAAAA==","pkt_caplen":67,"pkt_type":53,"pkt_ipoffset":14} 0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":115,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":53} 0350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":116,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409872,"pkt_len":60,"pkt":"AFBWM3ieAAwp1HmyABLw8BwYDgD\/7xQAAAAoAAAAFQP\/U01CgQAAAAAAAAAAAAAAAAAAAAAAAAAAyHUF","pkt_caplen":60,"pkt_type":18,"pkt_ipoffset":14} 0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":116,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":18} 0348{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409873,"pkt_len":60,"pkt":"AAwp1HmyAFBWM3ieAATw8QEeIQAAAIARuLrAqO+BwKjv\/wCJAIkATG2mAAopEAABAAAAAAABIEZIRVBG","pkt_caplen":60,"pkt_type":4,"pkt_ipoffset":14} 0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":4} 0480{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":118,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409876,"pkt_len":156,"pkt":"AwAAAAABAFBWM3ieAI7w8AMsAP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAdTURKUjk4ICAgICAgICAgIP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAACQAAAAAAAAAAAAAAAAAAAAAAAAAJAFYAAwABAAEAAgAaAFxNQUlMU0xPVFxCUk9XU0UAAgBNREpSOTgA","pkt_caplen":156,"pkt_type":142,"pkt_ipoffset":14} 0188{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":118,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":142} 0418{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":119,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409876,"pkt_len":107,"pkt":"AFBWM3ieAAwp1HmyAF3w8B4YDgD\/7xYEAAAAAAwAFQP\/U01CLQAAAAAAAAAAAAAAAAAAAAAAAAAAyHUFAACBAQ\/\/AAAABwAAABYAAAAiKfZdAQAAAAAAAAAAAAAAAAAKAFxURVNULlRYVAA=","pkt_caplen":107,"pkt_type":93,"pkt_ipoffset":14} 0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":119,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":93} 0348{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":120,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409876,"pkt_len":60,"pkt":"AAwp1HmyAFBWM3ieAATw8QEgIwAAAIARtrrAqO+BwKjv\/wCJAIkATG6mAAooEAABAAAAAAABIEZIRVBG","pkt_caplen":60,"pkt_type":4,"pkt_ipoffset":14} 0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":120,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":4} 0404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":121,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409876,"pkt_len":97,"pkt":"AAwp1HmyAFBWM3ieAFPw8BggDgD\/7xYMAAAMACgAAxX\/U01CLQAAAACAAAAAAAAAAAAAAAAAAAAAyHUFAACBAQ\/\/AAAAAQAgAB4p9l1kBAAAAAAAAAAAAQAAAAAAAAAAAA==","pkt_caplen":97,"pkt_type":83,"pkt_ipoffset":14} 0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":121,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":83} 0374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":122,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409876,"pkt_len":73,"pkt":"AFBWM3ieAAwp1HmyADvw8CAaDgD\/7xYMAAAoAA0AFQP\/U01CBAAAAAAAAAAAAAAAAAAAAAAAAAAAyHUFAAChAQMBAP\/\/\/\/8AAA==","pkt_caplen":73,"pkt_type":59,"pkt_ipoffset":14} 0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":122,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":59} 0348{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":123,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409876,"pkt_len":60,"pkt":"AAwp1HmyAFBWM3ieAATw8QEiAP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAdTURKUjk4ICAgICAgICAg","pkt_caplen":60,"pkt_type":4,"pkt_ipoffset":14} 0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":123,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":4} 0362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409876,"pkt_len":67,"pkt":"AAwp1HmyAFBWM3ieADXw8BoiDgD\/7xYMAAANACgAAxX\/U01CBAAAAACAAAAAAAAAAAAAAAAAAAAAyHUFAAChAQAAAA==","pkt_caplen":67,"pkt_type":53,"pkt_ipoffset":14} 0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":53} 0350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409876,"pkt_len":60,"pkt":"AFBWM3ieAAwp1HmyABLw8CIcDgD\/7xQAAAAoAAAAFQP\/U01CBAAAAAAAAAAAAAAAAAAAAAAAAAAAyHUF","pkt_caplen":60,"pkt_type":18,"pkt_ipoffset":14} 0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":18} 0348{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":126,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409876,"pkt_len":60,"pkt":"AAwp1HmyAFBWM3ieAATw8QEkAP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAdTURKUjk4ICAgICAgICAg","pkt_caplen":60,"pkt_type":4,"pkt_ipoffset":14} 0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":126,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":4} 0626{"flow_id":3,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409881,"pkt_len":219,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAADNKQAAAIARsE3AqO+BwKjv\/wCKAIoAuRw+EQIAFsCo74EAigCjAAAgRU5FRUVLRkNESkRJQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0EAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJOAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAACQAAAAAAAAAAAAAAAAAAAAAAAAAJAFYAAwABAAEAAgAaAFxNQUlMU0xPVFxCUk9XU0UAAgBNREpSOTgA","pkt_caplen":219,"pkt_type":2048,"pkt_ipoffset":14} 0374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409882,"pkt_len":78,"pkt":"AFBWM3ieAAwp1HmyAEDw8CQcDgD\/7xYEAAAAAA4AFQP\/U01CEAAAAAAAAAAAAAAAAAAAAAAAAAAAyHUFAADBAQALAARcVEVTVC5UWFQA","pkt_caplen":78,"pkt_type":64,"pkt_ipoffset":14} 0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":64} 0362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409882,"pkt_len":67,"pkt":"AAwp1HmyAFBWM3ieADXw8BwmDgD\/7xYMAAAOACgAAxX\/U01CEAEAAwCAAAAAAAAAAAAAAAAAAAAAyHUFAADBAQAAAA==","pkt_caplen":67,"pkt_type":53,"pkt_ipoffset":14} 0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":53} 0378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":130,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409882,"pkt_len":80,"pkt":"AFBWM3ieAAwp1HmyAELw8CYeDgD\/7xYMAAAoAA8AFQP\/U01CBgAAAAAAAAAAAAAAAAAAAAAAAAAAyHUFAADhAQEAAAsABFxURVNULlRYVAA=","pkt_caplen":80,"pkt_type":66,"pkt_ipoffset":14} 0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":130,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":66} 0362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409882,"pkt_len":67,"pkt":"AAwp1HmyAFBWM3ieADXw8B4oDgD\/7xYMAAAPACgAAxX\/U01CBgAAAACAAAAAAAAAAAAAAAAAAAAAyHUFAADhAQAAAA==","pkt_caplen":67,"pkt_type":53,"pkt_ipoffset":14} 0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":53} 0350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":132,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409883,"pkt_len":60,"pkt":"AFBWM3ieAAwp1HmyABLw8CggDgD\/7xQAAAAoAAAAFQP\/U01CBAAAAAAAAAAAAAAAAAAAAAAAAAAAyHUF","pkt_caplen":60,"pkt_type":18,"pkt_ipoffset":14} 0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":132,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":18} 0348{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409883,"pkt_len":60,"pkt":"AAwp1HmyAFBWM3ieAATw8QEqDgD\/7xeBvAUDABUAAxXvAgCJAIkATAvHAAQpAAABAAAAAAABIEVORUVF","pkt_caplen":60,"pkt_type":4,"pkt_ipoffset":14} 0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":4} 0496{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":134,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409886,"pkt_len":168,"pkt":"AwAAAAABAFBWM3ieAJrw8AMsAP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAeTURKUjk4ICAgICAgICAgIP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAFQAAAAAAAAAAAAAAAAAAAAAAAAAVAFYAAwABAAEAAgAmAFxNQUlMU0xPVFxCUk9XU0UACAEAAAAAAAAAAAAAAABNREpSOTgA","pkt_caplen":168,"pkt_type":154,"pkt_ipoffset":14} 0188{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":134,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":154} 0496{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":135,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409888,"pkt_len":168,"pkt":"AwAAAAABAFBWM3ieAJrw8AMsAP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAeTURKUjk4ICAgICAgICAgIP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAFQAAAAAAAAAAAAAAAAAAAAAAAAAVAFYAAwABAAEAAgAmAFxNQUlMU0xPVFxCUk9XU0UACAEAFQQBfIgBAAAAAABNREpSOTgA","pkt_caplen":168,"pkt_type":154,"pkt_ipoffset":14} 0188{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":135,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":154} 0350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409888,"pkt_len":60,"pkt":"AFBWM3ieAAwp1HmyABLw8CogDgD\/7x8AAAAAAAAAFQP\/U01CBAAAAAAAAAAAAAAAAAAAAAAAAAAAyHUF","pkt_caplen":60,"pkt_type":18,"pkt_ipoffset":14} 0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":18} 0348{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409888,"pkt_len":60,"pkt":"AAwp1HmyAFBWM3ieAATw8QEsAP\/vAAAAAAAAFAAAAAAAAAAAAAAAAAAAAAAAV09SS0dST1VQICAgICAg","pkt_caplen":60,"pkt_type":4,"pkt_ipoffset":14} 0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":4} 0496{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":138,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409889,"pkt_len":168,"pkt":"AwAAAAABAFBWM3ieAJrw8AMsAP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAeTURKUjk4ICAgICAgICAgIP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAFQAAAAAAAAAAAAAAAAAAAAAAAAAVAFYAAwABAAEAAgAmAFxNQUlMU0xPVFxCUk9XU0UACAEAFQQBfIgBAAAAAABNREpSOTgA","pkt_caplen":168,"pkt_type":154,"pkt_ipoffset":14} 0188{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":138,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":154} 0496{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":139,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409890,"pkt_len":168,"pkt":"AwAAAAABAFBWM3ieAJrw8AMsAP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAeTURKUjk4ICAgICAgICAgIP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAFQAAAAAAAAAAAAAAAAAAAAAAAAAVAFYAAwABAAEAAgAmAFxNQUlMU0xPVFxCUk9XU0UACAEAFQQBfIgBAAAAAABNREpSOTgA","pkt_caplen":168,"pkt_type":154,"pkt_ipoffset":14} 0188{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":139,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":154} 0496{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":140,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409891,"pkt_len":168,"pkt":"AwAAAAABAFBWM3ieAJrw8AMsAP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAeTURKUjk4ICAgICAgICAgIP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAFQAAAAAAAAAAAAAAAAAAAAAAAAAVAFYAAwABAAEAAgAmAFxNQUlMU0xPVFxCUk9XU0UACAEAFQQBfIgBAAAAAABNREpSOTgA","pkt_caplen":168,"pkt_type":154,"pkt_ipoffset":14} 0188{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":140,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":154} 0642{"flow_id":3,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":141,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409891,"pkt_len":231,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAADZKgAAAIARr0HAqO+BwKjv\/wCKAIoAxRTzEQIAGMCo74EAigCvAAAgRU5FRUVLRkNESkRJQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0EAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJPAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAFQAAAAAAAAAAAAAAAAAAAAAAAAAVAFYAAwABAAEAAgAmAFxNQUlMU0xPVFxCUk9XU0UACAEAAAAAAAAAAAAAAABNREpSOTgA","pkt_caplen":231,"pkt_type":2048,"pkt_ipoffset":14} 0354{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":142,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409892,"pkt_len":61,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAQAAAAAAFwAAAAAAAAAAAAAAAAAAAAAAV09SS0dST1VQICAgICAgHQ==","pkt_caplen":61,"pkt_type":47,"pkt_ipoffset":14} 0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":142,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":47} 0354{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":143,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409893,"pkt_len":61,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAQAAAAAAFwAAAAAAAAAAAAAAAAAAAAAAV09SS0dST1VQICAgICAgHQ==","pkt_caplen":61,"pkt_type":47,"pkt_ipoffset":14} 0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":143,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":47} 0642{"flow_id":3,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":144,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409893,"pkt_len":231,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAADZKwAAAIARrkHAqO+BwKjv\/wCKAIoAxYA9EQIAGsCo74EAigCvAAAgRU5FRUVLRkNESkRJQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0EAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJPAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAFQAAAAAAAAAAAAAAAAAAAAAAAAAVAFYAAwABAAEAAgAmAFxNQUlMU0xPVFxCUk9XU0UACAEAFQQBj50BAAAAAABNREpSOTgA","pkt_caplen":231,"pkt_type":2048,"pkt_ipoffset":14} 0354{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409894,"pkt_len":61,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAQAAAAAAFwAAAAAAAAAAAAAAAAAAAAAAV09SS0dST1VQICAgICAgHQ==","pkt_caplen":61,"pkt_type":47,"pkt_ipoffset":14} 0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":47} 0642{"flow_id":3,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409894,"pkt_len":231,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAADZLAAAAIARrUHAqO+BwKjv\/wCKAIoAxYA7EQIAHMCo74EAigCvAAAgRU5FRUVLRkNESkRJQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0EAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJPAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAFQAAAAAAAAAAAAAAAAAAAAAAAAAVAFYAAwABAAEAAgAmAFxNQUlMU0xPVFxCUk9XU0UACAEAFQQBj50BAAAAAABNREpSOTgA","pkt_caplen":231,"pkt_type":2048,"pkt_ipoffset":14} 0354{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":147,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409895,"pkt_len":61,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAAAAAAAAGABXT1JLR1JPVVAgICAgICAdAQJfX01TQlJPV1NFX18CAQ==","pkt_caplen":61,"pkt_type":47,"pkt_ipoffset":14} 0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":147,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":47} 0643{"flow_id":3,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":148,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409895,"pkt_len":231,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAADZLQAAAIARrEHAqO+BwKjv\/wCKAIoAxYA5EQIAHsCo74EAigCvAAAgRU5FRUVLRkNESkRJQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0EAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJPAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAFQAAAAAAAAAAAAAAAAAAAAAAAAAVAFYAAwABAAEAAgAmAFxNQUlMU0xPVFxCUk9XU0UACAEAFQQBj50BAAAAAABNREpSOTgA","pkt_caplen":231,"pkt_type":2048,"pkt_ipoffset":14} 0354{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":149,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409895,"pkt_len":61,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAAAAAAAAGABXT1JLR1JPVVAgICAgICAdAQJfX01TQlJPV1NFX18CAQ==","pkt_caplen":61,"pkt_type":47,"pkt_ipoffset":14} 0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":149,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":47} 0643{"flow_id":3,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":150,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409896,"pkt_len":231,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAADZLgAAAIARq0HAqO+BwKjv\/wCKAIoAxYA3EQIAIMCo74EAigCvAAAgRU5FRUVLRkNESkRJQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0EAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJPAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAFQAAAAAAAAAAAAAAAAAAAAAAAAAVAFYAAwABAAEAAgAmAFxNQUlMU0xPVFxCUk9XU0UACAEAFQQBj50BAAAAAABNREpSOTgA","pkt_caplen":231,"pkt_type":2048,"pkt_ipoffset":14} 0354{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":151,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409896,"pkt_len":61,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAAAAAAAAGAAAAAAAAAAAAAAAAAAAAAAAAQJfX01TQlJPV1NFX18CAQ==","pkt_caplen":61,"pkt_type":47,"pkt_ipoffset":14} 0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":151,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":47} 0480{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":152,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409897,"pkt_len":156,"pkt":"AwAAAAABAFBWM3ieAI7w8AMsAP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAeTURKUjk4ICAgICAgICAgIP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAACQAAAAAAAAAAAAAAAAAAAAAAAAAJAFYAAwABAAEAAgAaAFxNQUlMU0xPVFxCUk9XU0UAAgBNREpSOTgA","pkt_caplen":156,"pkt_type":142,"pkt_ipoffset":14} 0188{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":152,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":142} 0480{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":153,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409897,"pkt_len":156,"pkt":"AwAAAAABAFBWM3ieAI7w8AMsAP\/vCAAAAAAAAAABAl9fTVNCUk9XU0VfXwIBTURKUjk4ICAgICAgICAgIP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAACQAAAAAAAAAAAAAAAAAAAAAAAAAJAFYAAwABAAEAAgAaAFxNQUlMU0xPVFxCUk9XU0UAAgBNREpSOTgA","pkt_caplen":156,"pkt_type":142,"pkt_ipoffset":14} 0188{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":153,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":142} 0473{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":154,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409897,"pkt_len":110,"pkt":"AFBW6YlWAFBWM3ieCABFAABgLwAAAIARq7fAqO+BwKjvAgCJAIkATO+bACIpAAABAAAAAAABIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJOAAAgAAHADAAgAAEABJPgAAYAAMCo74E=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14} 0512{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":155,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409897,"pkt_len":180,"pkt":"AwAAAAABAFBWM3ieAKbw8AMsAP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAeTURKUjk4ICAgICAgICAgAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAIQAAAAAAAAAAAAAAAAAAAAAAAAAhAFYAAwABAAEAAgAyAFxNQUlMU0xPVFxCUk9XU0UADwXA1AEATURKUjk4AAAAAAAAAAAAAAQAAyBFABUEVaoA","pkt_caplen":180,"pkt_type":166,"pkt_ipoffset":14} 0188{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":155,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":166} 0370{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":156,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409898,"pkt_len":74,"pkt":"AFBWM3ieAAwp1HmyADzw8CwgDgD\/7xYEAAAAABAAFQP\/U01CAAAAAAAAAAAAAAAAAAAAAAAAAAAAyHUFAAABAgAHAARcVEVTVAA=","pkt_caplen":74,"pkt_type":60,"pkt_ipoffset":14} 0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":156,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":60} 0362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":157,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409898,"pkt_len":67,"pkt":"AAwp1HmyAFBWM3ieADXw8CAuDgD\/7xYMAAAQACgAAxX\/U01CAAAAAACAAAAAAAAAAAAAAAAAAAAAyHUFAAABAgAAAA==","pkt_caplen":67,"pkt_type":53,"pkt_ipoffset":14} 0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":157,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":53} 0350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":158,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409898,"pkt_len":60,"pkt":"AFBWM3ieAAwp1HmyABLw8C4iDgD\/7xQAAAAoAAAAFQP\/U01CBgAAAAAAAAAAAAAAAAAAAAAAAAAAyHUF","pkt_caplen":60,"pkt_type":18,"pkt_ipoffset":14} 0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":158,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":18} 0474{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":159,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409899,"pkt_len":110,"pkt":"AFBW6YlWAFBWM3ieCABFAABgMAAAAIARqrfAqO+BwKjvAgCJAIkATO+bACIpAAABAAAAAAABIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJOAAAgAAHADAAgAAEABJPgAAYAAMCo74E=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14} 0348{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":160,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409899,"pkt_len":60,"pkt":"AAwp1HmyAFBWM3ieAATw8QEwIwAAAIARtrrAqO+BwKjv\/wCJAIkATG6mAAooEAABAAAAAAABIEZIRVBG","pkt_caplen":60,"pkt_type":4,"pkt_ipoffset":14} 0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":160,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":4} 0474{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":161,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409900,"pkt_len":110,"pkt":"AFBW6YlWAFBWM3ieCABFAABgMQAAAIARqbfAqO+BwKjvAgCJAIkATO+bACIpAAABAAAAAAABIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJOAAAgAAHADAAgAAEABJPgAAYAAMCo74E=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14} 0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":164,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409903,"pkt_len":89,"pkt":"AFBWM3ieAAwp1HmyAEvw8DAiDgD\/7xYEAAAAABEAFQP\/U01CgQAAAAAAAAAAAAAAAAAAAAAAAAAAyHUFAAAhAgIUAAgAEgAEXD8\/Pz8\/Pz8\/Lj8\/PwAFAAA=","pkt_caplen":89,"pkt_type":75,"pkt_ipoffset":14} 0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":164,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":75} 0348{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":165,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409903,"pkt_len":60,"pkt":"AAwp1HmyAFBWM3ieAATw8QEyAP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAdTURKUjk4ICAgICAgICAg","pkt_caplen":60,"pkt_type":4,"pkt_ipoffset":14} 0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":165,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":4} 0362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":166,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409903,"pkt_len":67,"pkt":"AAwp1HmyAFBWM3ieADXw8CIyDgD\/7xYMAAARACgAAxX\/U01CgQEAEgCAAAAAAAAAAAAAAAAAAAAAyHUFAAAhAgAAAA==","pkt_caplen":67,"pkt_type":53,"pkt_ipoffset":14} 0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":166,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":53} 0374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":167,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409903,"pkt_len":76,"pkt":"AFBWM3ieAAwp1HmyAD7w8DIkDgD\/7xYMAAAoABIAFQP\/U01CgQAAAAAAAAAAAAAAAAAAAAAAAAAAyHUFAABBAgIUAAAABQAEAAUAAA==","pkt_caplen":76,"pkt_type":62,"pkt_ipoffset":14} 0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":167,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":62} 0349{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":168,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409903,"pkt_len":60,"pkt":"AAwp1HmyAFBWM3ieAATw8QE0DgD\/7xYMAAAOACgAAxX\/U01CEAEAAwCAAAAAAAAAAAAAAAAAAAAAyHUF","pkt_caplen":60,"pkt_type":4,"pkt_ipoffset":14} 0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":168,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":4} 0362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":169,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409903,"pkt_len":67,"pkt":"AAwp1HmyAFBWM3ieADXw8CQ0DgD\/7xYMAAASACgAAxX\/U01CgQEAEgCAAAAAAAAAAAAAAAAAAAAAyHUFAABBAgAAAA==","pkt_caplen":67,"pkt_type":53,"pkt_ipoffset":14} 0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":169,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":53} 0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":170,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409903,"pkt_len":89,"pkt":"AFBWM3ieAAwp1HmyAEvw8DQmDgD\/7xYMAAAoABMAFQP\/U01CgQAAAAAAAAAAAAAAAAAAAAAAAAAAyHUFAABhAgIUABYAEgAEXD8\/Pz8\/Pz8\/Lj8\/PwAFAAA=","pkt_caplen":89,"pkt_type":75,"pkt_ipoffset":14} 0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":170,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":75} 0348{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409903,"pkt_len":60,"pkt":"AAwp1HmyAFBWM3ieAATw8QE2DgD\/7xeBvAUDABUAAxXvAgCJAIkATAvHAAQpAAABAAAAAAABIEVORUVF","pkt_caplen":60,"pkt_type":4,"pkt_ipoffset":14} 0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":4} 0552{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409903,"pkt_len":201,"pkt":"AAwp1HmyAFBWM3ieALvw8CY2DgD\/7xYMAAATACgAAxX\/U01CgQAAAACAAAAAAAAAAAAAAAAAAAAAyHUFAABhAgEDAIQABYEAgz8\/Pz8\/Pz8\/Pz8\/FgAAAQAAAAAAECpjj08AAAAALgAgICAgICAAAAAAAIM\/Pz8\/Pz8\/Pz8\/PxYBAAEAAAAAABAqY49PAAAAAC4uACAgICAgAAAAAACDPz8\/Pz8\/Pz8\/Pz8WAgABAAAAAAAQyWSPTwAAAABURVNUACAgIAAAAAAA","pkt_caplen":201,"pkt_type":187,"pkt_ipoffset":14} 0188{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":187} 0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":173,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409903,"pkt_len":97,"pkt":"AFBWM3ieAAwp1HmyAFPw8DYoDgD\/7xYMAAAoABQAFQP\/U01CgQAAAAAAAAAAAAAAAAAAAAAAAAAAyHUFAACBAgIUAAAAGgAEAAUVAIM\/Pz8\/Pz8\/Pz8\/PxYCAAEAgwAAAQ==","pkt_caplen":97,"pkt_type":83,"pkt_ipoffset":14} 0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":173,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":83} 0348{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":174,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409903,"pkt_len":60,"pkt":"AAwp1HmyAFBWM3ieAATw8QE4AP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAeTURKUjk4ICAgICAgICAg","pkt_caplen":60,"pkt_type":4,"pkt_ipoffset":14} 0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":174,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":4} 0362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":175,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409903,"pkt_len":67,"pkt":"AAwp1HmyAFBWM3ieADXw8Cg4DgD\/7xYMAAAUACgAAxX\/U01CgQEAEgCAAAAAAAAAAAAAAAAAAAAAyHUFAACBAgAAAA==","pkt_caplen":67,"pkt_type":53,"pkt_ipoffset":14} 0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":175,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":53} 0362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":176,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409903,"pkt_len":67,"pkt":"AFBWM3ieAAwp1HmyADXw8DgqDgD\/7xYMAAAoABUAFQP\/U01CgAAAAAAAAAAAAAAAAAAAAAAAAAAAyHUFAAChAgAAAA==","pkt_caplen":67,"pkt_type":53,"pkt_ipoffset":14} 0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":176,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":53} 0348{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":177,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409903,"pkt_len":60,"pkt":"AAwp1HmyAFBWM3ieAATw8QE6AP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAeTURKUjk4ICAgICAgICAg","pkt_caplen":60,"pkt_type":4,"pkt_ipoffset":14} 0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":177,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":4} 0376{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":178,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409903,"pkt_len":77,"pkt":"AAwp1HmyAFBWM3ieAD\/w8Co6DgD\/7xYMAAAVACgAAxX\/U01CgAAAAACAAAAAAAAAAAAAAAAAAAAAyHUFAAChAgVq\/wABAAJ2+AAAAAA=","pkt_caplen":77,"pkt_type":63,"pkt_ipoffset":14} 0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":178,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":63} 0350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":179,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409903,"pkt_len":60,"pkt":"AFBWM3ieAAwp1HmyABLw8DosDgD\/7xQAAAAoAAAAFQP\/U01CgQAAAAAAAAAAAAAAAAAAAAAAAAAAyHUF","pkt_caplen":60,"pkt_type":18,"pkt_ipoffset":14} 0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":179,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":18} 0348{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":180,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409903,"pkt_len":60,"pkt":"AAwp1HmyAFBWM3ieAATw8QE8AP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAeTURKUjk4ICAgICAgICAg","pkt_caplen":60,"pkt_type":4,"pkt_ipoffset":14} 0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":180,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":4} 0370{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":184,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409905,"pkt_len":74,"pkt":"AFBWM3ieAAwp1HmyADzw8DwsDgD\/7xYEAAAAABYAFQP\/U01CAQAAAAAAAAAAAAAAAAAAAAAAAAAAyHUFAADBAgAHAARcVEVTVAA=","pkt_caplen":74,"pkt_type":60,"pkt_ipoffset":14} 0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":184,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":60} 0362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409905,"pkt_len":67,"pkt":"AAwp1HmyAFBWM3ieADXw8Cw+DgD\/7xYMAAAWACgAAxX\/U01CAQAAAACAAAAAAAAAAAAAAAAAAAAAyHUFAADBAgAAAA==","pkt_caplen":67,"pkt_type":53,"pkt_ipoffset":14} 0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":53} 0350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":186,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409906,"pkt_len":60,"pkt":"AFBWM3ieAAwp1HmyABLw8D4uDgD\/7xQAAAAoAAAAFQP\/U01CgQAAAAAAAAAAAAAAAAAAAAAAAAAAyHUF","pkt_caplen":60,"pkt_type":18,"pkt_ipoffset":14} 0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":186,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":18} 0348{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":188,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409906,"pkt_len":60,"pkt":"AAwp1HmyAFBWM3ieAATw8QFALAAAAIARrUHAqO+BwKjv\/wCKAIoAxYA7EQIAHMCo74EAigCvAAAgRU5F","pkt_caplen":60,"pkt_type":4,"pkt_ipoffset":14} 0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":188,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":4} 0627{"flow_id":3,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":191,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409908,"pkt_len":219,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAADNOgAAAIARn03AqO+BwKjv\/wCKAIoAuRsuEQIAJsCo74EAigCjAAAgRU5FRUVLRkNESkRJQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0EAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJPAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAACQAAAAAAAAAAAAAAAAAAAAAAAAAJAFYAAwABAAEAAgAaAFxNQUlMU0xPVFxCUk9XU0UAAgBNREpSOTgA","pkt_caplen":219,"pkt_type":2048,"pkt_ipoffset":14} 0627{"flow_id":3,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":192,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409908,"pkt_len":219,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAADNOwAAAIARnk3AqO+BwKjv\/wCKAIoAufUpEQIAKMCo74EAigCjAAAgRU5FRUVLRkNESkRJQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0EAIEFCQUNGUEZQRU5GREVDRkNFUEZIRkRFRkZQRlBBQ0FCAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAACQAAAAAAAAAAAAAAAAAAAAAAAAAJAFYAAwABAAEAAgAaAFxNQUlMU0xPVFxCUk9XU0UAAgBNREpSOTgA","pkt_caplen":219,"pkt_type":2048,"pkt_ipoffset":14} 0659{"flow_id":3,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409908,"pkt_len":243,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAADlPAAAAIARnTXAqO+BwKjv\/wCKAIoA0ZTzEQIAKsCo74EAigC7AAAgRU5FRUVLRkNESkRJQ0FDQUNBQ0FDQUNBQ0FDQUNBQUEAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJPAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAIQAAAAAAAAAAAAAAAAAAAAAAAAAhAFYAAwABAAEAAgAyAFxNQUlMU0xPVFxCUk9XU0UADwXA1AEATURKUjk4AAAAAAAAAAAAAAQAAyBFABUEVaoA","pkt_caplen":243,"pkt_type":2048,"pkt_ipoffset":14} 0374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":194,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409908,"pkt_len":76,"pkt":"AFBWM3ieAAwp1HmyAD7w8EAuDgD\/7xYEAAAAABcAFQP\/U01CKwAAAAAAAAAAAAAAAAAAAAAAAAAAyAAyAADhAgEBAAcABEhlbGxvAA==","pkt_caplen":76,"pkt_type":62,"pkt_ipoffset":14} 0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":194,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":62} 0348{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":195,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409908,"pkt_len":60,"pkt":"AAwp1HmyAFBWM3ieAATw8QFCAP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAeTURKUjk4ICAgICAgICAg","pkt_caplen":60,"pkt_type":4,"pkt_ipoffset":14} 0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":195,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":4} 0374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":196,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409908,"pkt_len":76,"pkt":"AAwp1HmyAFBWM3ieAD7w8C5CDgD\/7xYMAAAXACgAAxX\/U01CKwAAAACAAAAAAAAAAAAAAAAAAAAAyAAyAADhAgEBAAcABEhlbGxvAA==","pkt_caplen":76,"pkt_type":62,"pkt_ipoffset":14} 0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":196,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":62} 0350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409908,"pkt_len":60,"pkt":"AFBWM3ieAAwp1HmyABLw8EIwDgD\/7xQAAAAoAAAAFQP\/U01CgQAAAAAAAAAAAAAAAAAAAAAAAAAAyHUF","pkt_caplen":60,"pkt_type":18,"pkt_ipoffset":14} 0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":18} 0347{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":198,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409908,"pkt_len":60,"pkt":"AAwp1HmyAFBWM3ieAATw8QFELwAAAIARq7fAqO+BwKjvAgCJAIkATO+bACIpAAABAAAAAAABIEZIRVBG","pkt_caplen":60,"pkt_type":4,"pkt_ipoffset":14} 0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":198,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":4} 0349{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":199,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409909,"pkt_len":60,"pkt":"AAwp1HmyAFBWM3ieABLw8DBEDgD\/7x8AAAAAAAAAAxVLR1JPVVAgICAgICAeTURKUjk4ICAgICAgICAg","pkt_caplen":60,"pkt_type":18,"pkt_ipoffset":14} 0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":199,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":18} 0349{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":200,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409909,"pkt_len":60,"pkt":"AFBWM3ieAAwp1HmyAATw8QEyDgD\/7xYEAAAAABYAFQP\/U01CAQAAAAAAAAAAAAAAAAAAAAAAAAAAyHUF","pkt_caplen":60,"pkt_type":4,"pkt_ipoffset":14} 0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":200,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":4} 0362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":201,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409911,"pkt_len":67,"pkt":"AFBWM3ieAAwp1HmyADXw8EQyDgD\/7xYEAAAAABgAFQP\/U01CcQAAAAAAAAAAAAAAAAAAAAAAAAAAyAAyAAABAwAAAA==","pkt_caplen":67,"pkt_type":53,"pkt_ipoffset":14} 0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":201,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":53} 0362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":202,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409911,"pkt_len":67,"pkt":"AAwp1HmyAFBWM3ieADXw8DJGDgD\/7xYMAAAYACgAAxX\/U01CcQAAAACAAAAAAAAAAAAAAAAAAAAAyAAyAAABAwAAAA==","pkt_caplen":67,"pkt_type":53,"pkt_ipoffset":14} 0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":202,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":53} 0349{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":203,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409911,"pkt_len":60,"pkt":"AFBWM3ieAAwp1HmyAATw8QE0DgD\/7xYEAAAAABcAFQP\/U01CKwAAAAAAAAAAAAAAAAAAAAAAAAAAyAAy","pkt_caplen":60,"pkt_type":4,"pkt_ipoffset":14} 0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":203,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":4} 0350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":204,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409911,"pkt_len":60,"pkt":"AFBWM3ieAAwp1HmyABLw8EY0DgD\/7xQAAAAoAAAAFQP\/U01CgQAAAAAAAAAAAAAAAAAAAAAAAAAAyHUF","pkt_caplen":60,"pkt_type":18,"pkt_ipoffset":14} 0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":204,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":18} 0350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":205,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409911,"pkt_len":60,"pkt":"AFBWM3ieAAwp1HmyABLw8Eg1DgD\/7xgAAAAAAAAAFQP\/U01CAQAAAAAAAAAAAAAAAAAAAAAAAAAAyHUF","pkt_caplen":60,"pkt_type":18,"pkt_ipoffset":14} 0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":205,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":18} 0347{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":206,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409911,"pkt_len":60,"pkt":"AAwp1HmyAFBWM3ieAATw8QFLMAAAAIARqrfAqO+BwKjvAgCJAIkATO+bACIpAAABAAAAAAABIEZIRVBG","pkt_caplen":60,"pkt_type":4,"pkt_ipoffset":14} 0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":206,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":4} 0349{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":207,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409911,"pkt_len":60,"pkt":"AFBWM3ieAAwp1HmyAAPw8FMyDgD\/7xYEAAAAABgAFQP\/U01CcQAAAAAAAAAAAAAAAAAAAAAAAAAAyAAy","pkt_caplen":60,"pkt_type":3,"pkt_ipoffset":14} 0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":207,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":3} 0348{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409911,"pkt_len":60,"pkt":"AAwp1HmyAFBWM3ieAAPw8XMwIwAAAIARtrrAqO+BwKjv\/wCJAIkATG6mAAooEAABAAAAAAABIEZIRVBG","pkt_caplen":60,"pkt_type":3,"pkt_ipoffset":14} 0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":3} 0520{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":209,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409912,"pkt_len":186,"pkt":"AwAAAAABAFBWM3ieAKzw8AMsAP\/vCAAAAAAAAAABAl9fTVNCUk9XU0VfXwIBTURKUjk4ICAgICAgICAgAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAJwAAAAAAAAAAAAAAAAAAAAAAAAAnAFYAAwABAAEAAgA4AFxNQUlMU0xPVFxCUk9XU0UADADA1AEAV09SS0dST1VQAAAAAAAAAAQAACBAgAAAAABNREpSOTgA","pkt_caplen":186,"pkt_type":172,"pkt_ipoffset":14} 0188{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":209,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":172} 0668{"flow_id":3,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":210,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409923,"pkt_len":249,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAADrPQAAAIARnC\/AqO+BwKjv\/wCKAIoA11O8EQIALMCo74EAigDBAAAgRU5FRUVLRkNESkRJQ0FDQUNBQ0FDQUNBQ0FDQUNBQUEAIEFCQUNGUEZQRU5GREVDRkNFUEZIRkRFRkZQRlBBQ0FCAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAJwAAAAAAAAAAAAAAAAAAAAAAAAAnAFYAAwABAAEAAgA4AFxNQUlMU0xPVFxCUk9XU0UADADA1AEAV09SS0dST1VQAAAAAAAAAAQAACBAgAAAAABNREpSOTgA","pkt_caplen":249,"pkt_type":2048,"pkt_ipoffset":14} 0474{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":211,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409925,"pkt_len":110,"pkt":"AFBW6YlWAFBWM3ieCABFAABgPgAAAIARnLfAqO+BwKjvAgCJAIkATOGIAC4pAAABAAAAAAABIEVORUJGQ0ZFRUpFT0NBRkNFUEZERUZFT0VCRkZDQUFEAAAgAAHADAAgAAEABJPgAAYAAMCo74E=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14} 0354{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":212,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409925,"pkt_len":61,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAQAAAAAAGQBXT1JLR1JPVVAgICAgICAdTUFSVElOIFJPU0VOQVUgAw==","pkt_caplen":61,"pkt_type":47,"pkt_ipoffset":14} 0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":212,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":47} 0354{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":213,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409925,"pkt_len":61,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAQAAAAAAGQBXT1JLR1JPVVAgICAgICAeTUFSVElOIFJPU0VOQVUgAw==","pkt_caplen":61,"pkt_type":47,"pkt_ipoffset":14} 0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":213,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":47} 0354{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":214,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409926,"pkt_len":61,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAQAAAAAAGQAAAAAAAAAAAAAAAAAAAAAATUFSVElOIFJPU0VOQVUgAw==","pkt_caplen":61,"pkt_type":47,"pkt_ipoffset":14} 0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":214,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":47} 0474{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":215,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409926,"pkt_len":110,"pkt":"AFBW6YlWAFBWM3ieCABFAABgPwAAAIARm7fAqO+BwKjvAgCJAIkATOGIAC4pAAABAAAAAAABIEVORUJGQ0ZFRUpFT0NBRkNFUEZERUZFT0VCRkZDQUFEAAAgAAHADAAgAAEABJPgAAYAAMCo74E=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14} 0474{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":216,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409928,"pkt_len":110,"pkt":"AFBW6YlWAFBWM3ieCABFAABgQAAAAIARmrfAqO+BwKjvAgCJAIkATOGIAC4pAAABAAAAAAABIEVORUJGQ0ZFRUpFT0NBRkNFUEZERUZFT0VCRkZDQUFEAAAgAAHADAAgAAEABJPgAAYAAMCo74E=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14} 0442{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":220,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1576409798047,"flow_last_seen":1576409798047,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.239.129","dst_ip":"224.0.0.2","l4_proto":"icmp"} 0484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":220,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","flow_id":2,"flow_packet_id":32,"flow_first_seen":1576409800543,"flow_last_seen":1576409931837,"flow_tot_l4_data_len":2432,"flow_min_l4_data_len":76,"flow_max_l4_data_len":76,"flow_avg_l4_data_len":76,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.239.129","dst_ip":"192.168.239.255","src_port":137,"dst_port":137,"l4_proto":"udp"} 0482{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":220,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","flow_id":0,"flow_packet_id":14,"flow_first_seen":1576409797553,"flow_last_seen":1576409928060,"flow_tot_l4_data_len":1064,"flow_min_l4_data_len":76,"flow_max_l4_data_len":76,"flow_avg_l4_data_len":76,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.239.129","dst_ip":"192.168.239.2","src_port":137,"dst_port":137,"l4_proto":"udp"} 0487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":220,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","flow_id":3,"flow_packet_id":15,"flow_first_seen":1576409807597,"flow_last_seen":1576409923353,"flow_tot_l4_data_len":2937,"flow_min_l4_data_len":185,"flow_max_l4_data_len":215,"flow_avg_l4_data_len":195,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.239.129","dst_ip":"192.168.239.255","src_port":138,"dst_port":138,"l4_proto":"udp"} 0159{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":220,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap"}