0372{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1120469540839,"flow_last_seen":1120469540839,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
0453{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469540,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOaYwAAIARTMHAqAECwKgB\/wCJAIkAOlu0hOcBEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPU0FDQUNBQ0FDQUJNAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
0524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1120469540839,"flow_last_seen":1120469540839,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","category":"System"}}
0453{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469541,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOaYkAAIARTMDAqAECwKgB\/wCJAIkAOlu0hOcBEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ0FDQUJNAAA2AAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1120469542336,"flow_last_seen":1120469542336,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"217.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
0454{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469542,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOaY4AAIARA7\/ZqAECwKgB\/wCJAIkAOlu0hOcBEAABaQAAAAAAIEVGRURFSkZQRUVFUEVORUIFSkVPQ0FDQUNBQ0FDQUJNAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1120469551656,"flow_last_seen":1120469551656,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2712,"dst_port":53,"l4_proto":"udp"}
0424{"flow_id":2,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469551,"pkt_len":76,"pkt":"ADBUMjQlcwDtAW69CABFAAA+aY8AAIARTczAqAECwKgBAQqYADUAKiNDstABAAABAAAAAADPA3NpcAljeWJlcmNpdHkCZGsAAAEAAQ==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
0651{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1120469551656,"flow_last_seen":1120469551656,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2712,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1120469552651,"flow_last_seen":1120469552651,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.37.115.0","src_port":2712,"dst_port":53,"l4_proto":"udp"}
0424{"flow_id":3,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469552,"pkt_len":76,"pkt":"ADBUADRWAODtAW69CABFAAA+aZAAAIARTcvAqAECwCVzAAqYADUCKiNDstABAAABAAAAAAAAA3NpcAljeWJlcmNydHkCZGsAAAEAAQ==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
0652{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1120469552651,"flow_last_seen":1120469552651,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.37.115.0","src_port":2712,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"sip.cybercrty.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1120469554654,"flow_last_seen":1120469554654,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2712,"dst_port":49973,"l4_proto":"udp"}
0424{"flow_id":4,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469554,"pkt_len":76,"pkt":"ADBUADRWAODtAW51CABFAAA+aZEAAIARlcrAqAECwKgBAQqYwzUAKiNDstABAAABAAAAAAAAA3NpcAljeWJlcmNpdHkCZGsAAAEAAQ==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1120469554824,"flow_last_seen":1120469554824,"flow_tot_l4_data_len":110,"flow_min_l4_data_len":110,"flow_max_l4_data_len":110,"flow_avg_l4_data_len":110,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"192.168.1.2","src_port":53,"dst_port":2712,"l4_proto":"udp"}
0514{"flow_id":5,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469554,"pkt_len":144,"pkt":"AODtAW69ADBUADRWCABFAACCAABAAEARtxfAqAEDwKgBAgA1CpgAbjxwstCBgAABAAEAAgABA3NpcAljeWJlcmNpdHkCZGsAAAEAAcAMAAEAAQBAASwABNTyISPAEAACAAEAAACJAAYDbnMywBDAEAACAAEAAACJAAYDbnMxwBDAUAABAAEAAACJAATU8in4","pkt_caplen":144,"pkt_type":2048,"pkt_ipoffset":14}
0661{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1120469554824,"flow_last_seen":1120469554824,"flow_tot_l4_data_len":110,"flow_min_l4_data_len":110,"flow_max_l4_data_len":110,"flow_avg_l4_data_len":110,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"192.168.1.2","src_port":53,"dst_port":2712,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"sip.cybercity.dk","num_queries":1,"num_answers":4,"reply_code":0,"query_type":0,"rsp_type":1,"rsp_addr":"212.242.33.35"}}
0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1120469555830,"flow_last_seen":1120469555830,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2713,"dst_port":53,"l4_proto":"udp"}
0438{"flow_id":6,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469555,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIaZIAAIARTb\/AqAECwKgBAQqZADUANN1ZTNIBAAABAAAAACWHAF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0629{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1120469555830,"flow_last_seen":1120469555830,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2713,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":24435,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1120469556827,"flow_last_seen":1120469556827,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.110","dst_ip":"192.168.1.1","src_port":2713,"dst_port":53,"l4_proto":"udp"}
0437{"flow_id":7,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469556,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIaZMAAIARTb7AqAFuwKgBAQqZADUANN1ZTNIBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5JXMAJXMAAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0669{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1120469556827,"flow_last_seen":1120469556827,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.110","dst_ip":"192.168.1.1","src_port":2713,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":9587,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469558,"pkt_len":86,"pkt":"ADBUADRWAODtAW69bQBFAABIaZQAAIARTb3QqAECwKgBAQqZADUANN1ZTNIBAAABAAAAAAAABF9zaXAMX3VkcINzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":27904,"pkt_ipoffset":14}
0188{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","type":27904}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1120469560833,"flow_last_seen":1120469560833,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2597,"dst_port":29440,"l4_proto":"udp"}
0437{"flow_id":8,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469560,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIaZUAAIARTbzAqAECwKgBAQolcwAANN9ZTE4BAAABACVzAAAABF9zaXAEX1VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0437{"flow_id":6,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469564,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIaZYAAIARTbvAqAECwKgBAQqZADUANN1ZTNIBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0672{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":6,"flow_packet_id":2,"flow_first_seen":1120469555830,"flow_last_seen":1120469564839,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2713,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1120469572841,"flow_last_seen":1120469572841,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2714,"dst_port":53,"l4_proto":"udp"}
0433{"flow_id":9,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469572,"pkt_len":82,"pkt":"ADBUADRWAODtAW69CABFAABEaZcAAIARTb7AqAECwKgBAQqaADUAMHlSV9IAAAABAAAAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
0659{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1120469572841,"flow_last_seen":1120469572841,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2714,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0463{"flow_id":9,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469572,"pkt_len":105,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1CpoAR1vOq9KAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3RP","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
0669{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":9,"flow_packet_id":2,"flow_first_seen":1120469572841,"flow_last_seen":1120469572842,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2714,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":12,"rsp_type":12,"rsp_addr":"0.0.0.0"}}
0480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1120469572844,"flow_last_seen":1120469572844,"flow_tot_l4_data_len":475,"flow_min_l4_data_len":475,"flow_max_l4_data_len":475,"flow_avg_l4_data_len":475,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.52","dst_ip":"212.242.33.35","src_port":5060,"dst_port":5060,"l4_proto":"udp"}
1004{"flow_id":10,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469572,"pkt_len":509,"pkt":"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","pkt_caplen":509,"pkt_type":2048,"pkt_ipoffset":14}
0527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1120469572844,"flow_last_seen":1120469572844,"flow_tot_l4_data_len":475,"flow_min_l4_data_len":475,"flow_max_l4_data_len":475,"flow_avg_l4_data_len":475,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.52","dst_ip":"212.242.33.35","src_port":5060,"dst_port":5060,"l4_proto":"udp","ndpi": {"proto":"SIP","category":"VoIP"}}
0479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1120469572981,"flow_last_seen":1120469572981,"flow_tot_l4_data_len":494,"flow_min_l4_data_len":494,"flow_max_l4_data_len":494,"flow_avg_l4_data_len":494,"midstream":0,"l3_proto":"ip4","src_ip":"212.242.33.35","dst_ip":"192.168.1.2","src_port":5060,"dst_port":5060,"l4_proto":"udp"}
1028{"flow_id":11,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469572,"pkt_len":528,"pkt":"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","pkt_caplen":528,"pkt_type":2048,"pkt_ipoffset":14}
0526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1120469572981,"flow_last_seen":1120469572981,"flow_tot_l4_data_len":494,"flow_min_l4_data_len":494,"flow_max_l4_data_len":494,"flow_avg_l4_data_len":494,"midstream":0,"l3_proto":"ip4","src_ip":"212.242.33.35","dst_ip":"192.168.1.2","src_port":5060,"dst_port":5060,"l4_proto":"udp","ndpi": {"proto":"SIP","category":"VoIP"}}
0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":12,"flow_packet_id":1,"flow_first_seen":1120469573246,"flow_last_seen":1120469573246,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2715,"dst_port":53,"l4_proto":"udp"}
0438{"flow_id":12,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469573,"pkt_len":86,"pkt":"ADBUAGNWAODtAW69CABFAABIaZkAAIIRTbjAqAECwKgBAQqbADVANPFWONMBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAgAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0664{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":12,"flow_packet_id":1,"flow_first_seen":1120469573246,"flow_last_seen":1120469573246,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2715,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":32,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0438{"flow_id":12,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469574,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIaZoAAIARTbfAqAECwKgBAQqbADUANPFWONMBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0673{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":12,"flow_packet_id":2,"flow_first_seen":1120469573246,"flow_last_seen":1120469574242,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2715,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469576,"pkt_len":86,"pkt":"ADCqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":86,"pkt_type":43690,"pkt_ipoffset":14}
0188{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","type":43690}
0438{"flow_id":12,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469578,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIaZwAAIARTbXAqAECwKgBAQqbADUANPFWONMBAAABAAAAAABJBF9zaXAEX3VkcANzaXAJY3liZXLyaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469582,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAAB2aZ0AAIARTbTAqAECwKgBAQqbADUANPFWONMBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5TWRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0202{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":52}
0455{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469589,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOaZ4AAIARTK\/AqAECwKgB\/wCJAIkAOluxhOoBEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ0FDQUJNAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
0454{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469589,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOaZ8AAIARTK7AqAECwKgB\/wCJAIkAOluxhOoBEAABAAAAAAAAIEVERURFSkZQRUVHUEVORUJFSkVPQ0FDQUNBQ1RDQUJNAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":13,"flow_packet_id":1,"flow_first_seen":1120469590256,"flow_last_seen":1120469590256,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2716,"dst_port":53,"l4_proto":"udp"}
0434{"flow_id":13,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469590,"pkt_len":82,"pkt":"ADBUADRWAODtAW69CABFAABEaaAAAIARTbXAqAECwKgBAQqcADUAMHpPqtMAAAABAAAAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
0660{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":13,"flow_packet_id":1,"flow_first_seen":1120469590256,"flow_last_seen":1120469590256,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2716,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":14,"flow_packet_id":1,"flow_first_seen":1120469590257,"flow_last_seen":1120469590257,"flow_tot_l4_data_len":65,"flow_min_l4_data_len":65,"flow_max_l4_data_len":65,"flow_avg_l4_data_len":65,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":9587,"dst_port":156,"l4_proto":"udp"}
0464{"flow_id":14,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469590,"pkt_len":105,"pkt":"AODtAW69ADBUADRWCABFAABVAABAAEARtz7AqAEBwKgBAiVzAJwAx1zLqtOAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
1235{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469590,"pkt_len":722,"pkt":"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","pkt_caplen":722,"pkt_type":10240,"pkt_ipoffset":14}
0188{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","type":10240}
0479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":15,"flow_packet_id":1,"flow_first_seen":1120469590405,"flow_last_seen":1120469590405,"flow_tot_l4_data_len":314,"flow_min_l4_data_len":314,"flow_max_l4_data_len":314,"flow_avg_l4_data_len":314,"midstream":0,"l3_proto":"ip4","src_ip":"208.242.33.35","dst_ip":"192.168.1.2","src_port":5060,"dst_port":5060,"l4_proto":"udp"}
0789{"flow_id":15,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469590,"pkt_len":348,"pkt":"AODtAW69ADBUADRWCABFAAFOAABAADcRit\/Q8iEjwKgBAhPEE8QBOln2U0lQLzIuMCAxMDAgVHJ5aW5nDQpDYWxsLUlEOiA1NzgyMjI3MjktNDY2NWQ3NzVANTc4MjIyNzMyLTQ2NjVkNzcyDQpDQ2VxOiA2OSBSRUdJU1RFUg0KRnJvbTogPHNpcEZ2b2kxODA2M0DzaXAuY3liZXJjaXR5LmRrPjt0YWc9OGU5NDhiMA0KVG86IDxzaXA6dm9pMTgwNjNAc2lwLmN5YmVyY2l0eS5kaz4NClacYTogU0lQLzIuMC9VRFAgMTkyLjE2OC4xLjI7cmVjZWl2ZWQ9ODAuMjMwLjIxOS43MDtycG9ydD01MDYwO2JyYW5jaD16OWhHNGJLbnAxNDk1MDUxNzhTNDM4YzUyOGIxOTIuMTY4LjEuMg0KQ29udGVudC1MZW5ndGg6IDANCg0K","pkt_caplen":348,"pkt_type":2048,"pkt_ipoffset":14}
0526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":15,"flow_packet_id":1,"flow_first_seen":1120469590405,"flow_last_seen":1120469590405,"flow_tot_l4_data_len":314,"flow_min_l4_data_len":314,"flow_max_l4_data_len":314,"flow_avg_l4_data_len":314,"midstream":0,"l3_proto":"ip4","src_ip":"208.242.33.35","dst_ip":"192.168.1.2","src_port":5060,"dst_port":5060,"l4_proto":"udp","ndpi": {"proto":"SIP","category":"VoIP"}}
0844{"flow_id":11,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469590,"pkt_len":388,"pkt":"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","pkt_caplen":388,"pkt_type":2048,"pkt_ipoffset":14}
0454{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469590,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/NODtAW69CABFAABOaaIAAIARTKvAqAECwKgB\/wCJAIkAOluxhOoBEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ0FDQUJNAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
0477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":16,"flow_packet_id":1,"flow_first_seen":1120469595096,"flow_last_seen":1120469595096,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.251","src_port":138,"dst_port":138,"l4_proto":"udp"}
0655{"flow_id":16,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469595,"pkt_len":243,"pkt":"3\/\/\/\/\/\/\/AODtAW69CABFAADlaaMAAIARTBPAqAECwKgB+wCKAIoA0VtoEQ6E7MCoAQIAigC7AACqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq","pkt_caplen":243,"pkt_type":2048,"pkt_ipoffset":14}
0574{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":16,"flow_packet_id":1,"flow_first_seen":1120469595096,"flow_last_seen":1120469595096,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.251","src_port":138,"dst_port":138,"l4_proto":"udp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"NetBIOS.SMBv1","category":"System"}}
0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":17,"flow_packet_id":1,"flow_first_seen":1120469611651,"flow_last_seen":1120469611651,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"147.137.21.94","src_port":2717,"dst_port":445,"l4_proto":"tcp"}
0407{"flow_id":17,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469611,"pkt_len":62,"pkt":"ADBUADRWAODtAW69CABFAAAwaaRAAIAGJpLAqAECk4kVXgqdAb3Y\/7fcAAAAAHACQAA7VwAAAgQFtAEBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":36,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":18,"flow_packet_id":1,"flow_first_seen":1120469611651,"flow_last_seen":1120469611651,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"147.137.21.94","src_port":2718,"dst_port":139,"l4_proto":"tcp"}
0406{"flow_id":18,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469611,"pkt_len":62,"pkt":"ADBUADRWAODtAW69CABFAAAwaaVAAIAGJpHAqAECk4kVXgqeAIstxX7gAAAAAHACQAAgvwAAAgQFtAEBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
0406{"flow_id":18,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469614,"pkt_len":62,"pkt":"ADBUADRWAODtAW69CABFAAAwaaZAADgGJpDAqAECk4kVXgqeAIstxX7gAAAAAHACQAAgvwAAAgQFtAEBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
0408{"flow_id":17,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469614,"pkt_len":62,"pkt":"ADBUADRWAODtAW69CABFAAAwaadAAIAGJo\/AqAECk4kVXgqdAb3Y\/7fcAAAAAHACQAA7VwAAAgQFtAEBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":39,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":19,"flow_packet_id":1,"flow_first_seen":1120469620579,"flow_last_seen":1120469620579,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.71","dst_ip":"147.137.21.122","src_port":2718,"dst_port":139,"l4_proto":"tcp"}
0406{"flow_id":19,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469620,"pkt_len":62,"pkt":"ADBUADRWAODtAW69CABFAAAwaahAAIAGJo7AqAFHk4kVegqeAIstxX7gAAAAAHACQAAgvwAAAgQFtAEBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
0407{"flow_id":17,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469620,"pkt_len":62,"pkt":"ADBUADRWAODtAW69CABFAAAwaalAAIAGJo3AqAECk4kVXgqdAb3Y\/7fcAAAAAHACQAA7VwAAAgQFtAEBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":41,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":20,"flow_packet_id":1,"flow_first_seen":1120469632829,"flow_last_seen":1120469632829,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.114.1.2","dst_ip":"192.168.1.1","src_port":2719,"dst_port":53,"l4_proto":"udp"}
0422{"flow_id":20,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469632,"pkt_len":75,"pkt":"ADBUADRWAODtAW69CABFAAA9aaoAAIARTbLAcgECwKgBAQqfADUAKUpe7dQBAAABgAAAUgAAA2Z0cAdlY2l0ZexlA2NvbQAAAQAB","pkt_caplen":75,"pkt_type":2048,"pkt_ipoffset":14}
0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":21,"flow_packet_id":1,"flow_first_seen":1120469633828,"flow_last_seen":1120469633828,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2719,"dst_port":53,"l4_proto":"udp"}
0422{"flow_id":21,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469633,"pkt_len":75,"pkt":"ADBUADRWEODtAW69CABFAAA9aasAAIARTbHAqAECwKgBAQqfADUAKUpe7dQBAAABAAAAAAAAA2Z0cAdlY2l0ZWxlA2NvbQAAAQAB","pkt_caplen":75,"pkt_type":2048,"pkt_ipoffset":14}
0652{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":21,"flow_packet_id":1,"flow_first_seen":1120469633828,"flow_last_seen":1120469633828,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2719,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"ftp.ecitele.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0550{"flow_id":21,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469634,"pkt_len":168,"pkt":"AODtAW69ADBUADRWCABFAACaAABAAEARtv\/AqAEBwKgBAgA1Cp8Ahtfh7dSBgAABAAKzAgABA2Z0cLxlY2l0ZexlA2NvbQAAAQABwAwABQABAAAC9QAGA2Ruc8AQwC0AAQABAAAAIQAEk+oB\/cAQAAIAAQAAA0MAEQJucwViYXJhawNuZXQCaWwAwBAAAgABAAADQwACwC3ATwABAGoAAAARAATUljCp","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
0681{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":21,"flow_packet_id":2,"flow_first_seen":1120469633828,"flow_last_seen":1120469634840,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":41,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":87,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2719,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":1,"num_answers":5,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"147.234.1.253"}}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":22,"flow_packet_id":1,"flow_first_seen":1120469634878,"flow_last_seen":1120469634878,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"147.234.1.253","src_port":2720,"dst_port":21,"l4_proto":"tcp"}
0407{"flow_id":22,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469634,"pkt_len":62,"pkt":"ADBUAHNWAODtAW69CABFAAAwaaxAAIAGOYrAqAECk+oB\/QqgABWvnVkPAABkAHACQABuKwAAAgQFtAEBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
0352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469634,"pkt_len":62,"pkt":"AODtAW69ADBUADRWCABVAAAweP9AADkGcTeT6gH9wKgBAgAVCqDlH5UEr53DEHASYzbQ8AAAAQEEAgIEBYM=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
0182{"basic_event_id":2,"basic_event_name":"Unknown L3 protocol","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","protocol":2048}
0341{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469634,"pkt_len":54,"pkt":"ADBUADRWAODtAW69CABFAAAoaa1eAIAGOZHAqAECk+oB\/QqgABWvncMQ5R+VBVAQQiQelgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
0202{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":20}
0468{"flow_id":22,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469634,"pkt_len":108,"pkt":"AODtAW4UADBUADRWCABFEABeeQBAADkGcPiT6gH9wKgBAgAVCqDlH5UFr53DEFAYYzaF6QAAMjIwIFByb0ZUUEQgU2VydmVyIEluIEVDSSBUZWxlY29tIChudHAsZWNpdGVsZS5jQ20pIA0K","pkt_caplen":108,"pkt_type":2048,"pkt_ipoffset":14}
0419{"flow_id":22,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469634,"pkt_len":70,"pkt":"ADBUADRWAODtAW69CABFAAA4aa5AAIAGOYDAqAECk+oB\/QqgABWvncNQ5R+VO1AYQe6WoQAAnlNFUiBhbm9ueW1vdXMNCg==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
0402{"flow_id":22,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469635,"pkt_len":60,"pkt":"AODtAW69ADBUADRWCABFEAAoeQFAADkGcS2T6gH9wKgBAgAVCqDlH5U7ryVzAFAQYzb9PQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":23,"flow_packet_id":1,"flow_first_seen":1120469635010,"flow_last_seen":1120469635010,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":96,"flow_max_l4_data_len":96,"flow_avg_l4_data_len":96,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"192.169.1.2","src_port":21,"dst_port":2720,"l4_proto":"tcp"}
0500{"flow_id":23,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469635,"pkt_len":130,"pkt":"AOBzAW69ADBUADRWCABFEAB0eQJAADkGcOCT6gH9wKkBAgAVCqDlH5U7r53DIFAYYzZecwAAMzMxIEFub255bW91cyBsb2dpbiBvaywgc2VuZCB5b3VyIGNvbXBsZXRlIGVtYWlsIGFkZHJlc3Mg4XMgeW91ciBwYXNzd29yZC4NCg==","pkt_caplen":130,"pkt_type":2048,"pkt_ipoffset":14}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":51,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":24,"flow_packet_id":1,"flow_first_seen":1120469635012,"flow_last_seen":1120469635012,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"147.234.1.253","src_port":2679,"dst_port":21,"l4_proto":"tcp"}
0411{"flow_id":24,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469635,"pkt_len":66,"pkt":"ADBUACRWAODtAW69CABFAAA0aa9AAIAGOYPAqAECk+oB\/Qp3ABWvncMg5R+Vb1AYQaK71QAAUEFTUyBkMHhhIQ0K","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
0402{"flow_id":22,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469635,"pkt_len":60,"pkt":"AODtAW69ADBUADRWCABFEAAoeQNAADkGcSuT6gH9wKgBAgAVCqDlH5WHr53DLFAQYzb85QAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
0438{"flow_id":22,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469635,"pkt_len":85,"pkt":"AODtAW69ADBUADRWCABFEABHeQRAADkGcQuT6gH9wKgBAgAVCqDlH5WHr53DLFAYYzZdOwAAMjMwLVdlY2NvbWUgVG8gRUNJIEZUUCBTZXJ2ZXINCg==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
0402{"flow_id":22,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":54,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469635,"pkt_len":60,"pkt":"AODtAW69ADBUADRWCABFEAAreQVAADkGcSaT6gH9wKgBAgAVCqDlH5Wmr53DLFAYYzbSrgAAoA0KAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
0341{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":55,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469635,"pkt_len":54,"pkt":"ADBUADRWAODtAW69CAAGAAAoabBAAIAGOY7AqAECk+oB\/QqgABWvncMs5R+VqVAQQYAeegAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
0182{"basic_event_id":2,"basic_event_name":"Unknown L3 protocol","thread_id":0,"packet_id":55,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","protocol":2048}
0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":25,"flow_packet_id":1,"flow_first_seen":1120469635042,"flow_last_seen":1120469635042,"flow_tot_l4_data_len":23,"flow_min_l4_data_len":23,"flow_max_l4_data_len":23,"flow_avg_l4_data_len":23,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"192.2.1.2","src_port":21,"dst_port":2720,"l4_proto":"tcp"}
0402{"flow_id":25,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469635,"pkt_len":60,"pkt":"AODtAW69ADBUBDRWCABFEAAreQZAADkGcSWT6gH9wAIBAgAVCqDlH5Wpr53DLFAYYzbSqwAAIA0KAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":57,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":26,"flow_packet_id":1,"flow_first_seen":1120469635043,"flow_last_seen":1120469635043,"flow_tot_l4_data_len":47,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"192.168.1.66","src_port":21,"dst_port":2720,"l4_proto":"tcp"}
0430{"flow_id":26,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":57,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469635,"pkt_len":81,"pkt":"AODtAW69ADBUADRWCABFEABDeQdAADkGcQyT6gH9wKgBQgAVCqDlH5Wsr53DLFAYYzYWCgAAIC9wdWIJCS0+IFB1YmxpYyBGb2xkZXIuIA0K","pkt_caplen":81,"pkt_type":2048,"pkt_ipoffset":14}
0395{"flow_id":22,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":58,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469635,"pkt_len":54,"pkt":"ADBUADRWAODtAW69CABFAAAoabFAAIAGOY3AqAECk+oB\/QqgABWvncMs5R+Vx1AQQWJUegAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
0442{"flow_id":22,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":59,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469635,"pkt_len":89,"pkt":"AODtAW69ADBUAOBWCABFEABLeQhAADkGcQOT6gH9wKgBAgAVCqDlH5XHr53DLFAYYzZIrgAAqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
0435{"flow_id":22,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469635,"pkt_len":82,"pkt":"AODvAW69ADBUADRWCABFEABEeQlAADkGcQmT6gH9wKgBAgAVCqDlH5Xqr53DLFAYYzYeJwAAIAkJICAgT3RoZXJzIGNhbqqqqqqqqqqqqqqqqg==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
0396{"flow_id":22,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":61,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469635,"pkt_len":54,"pkt":"ADBUADRWAODtAW69CABFAAAoabJAAIAGOYzAqAECk+oB\/QqgABWvncMs5R+WBlAQQSMeegAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
0384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":62,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469635,"pkt_len":87,"pkt":"AODtAW69ADBUADRWCABFJXMAeQpAADkGcQOT6gH9wKgBAgB4CqDlH5YGr53DLFAYY3bTEAAAIC9pbmNvbWluZwktJXMAbmNvbWluZyBGb2xkZXIuIA0K","pkt_caplen":87,"pkt_type":2048,"pkt_ipoffset":14}
0202{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":62,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":53}
0481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":63,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":27,"flow_packet_id":1,"flow_first_seen":1120469635045,"flow_last_seen":1120469635045,"flow_tot_l4_data_len":79,"flow_min_l4_data_len":79,"flow_max_l4_data_len":79,"flow_avg_l4_data_len":79,"midstream":0,"l3_proto":"ip4","src_ip":"147.234.1.170","dst_ip":"170.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"tcp"}
0476{"flow_id":27,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469635,"pkt_len":113,"pkt":"AODtAW69ADBUADRWCABFEABjeQtAADkGcOiT6gGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
0396{"flow_id":22,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469635,"pkt_len":54,"pkt":"ADBUADRWAODtAW69CABFAAAoabNAAIAGOYvAqAECk+oB\/QqgABWvncMs5R+WYlAQQMceegAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
0384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":65,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469635,"pkt_len":87,"pkt":"AODtAW69ADBUJXMACABFEBBJeQxAADkGcQGT6gH5wKgBAggVCqDlH5Zir53DLFAYYzaAtgAAIC9vdXRnb2luZwktPiBvdXRnb2luZyBGb2xkZXIuIA0K","pkt_caplen":87,"pkt_type":2048,"pkt_ipoffset":14}
0202{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":65,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":53}
0477{"flow_id":22,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469635,"pkt_len":113,"pkt":"AODtAW69ADBUADRWCABFEABjeQ1AADkGcOaT6gH9wKgBAgAVCqDlH5aDr53DKFAYYza68wAAIAkJICAgQW55b25lIGNhbiBhY2Nlc3MsIHdyaXRlICYgcmV0cmlldmUgYSBzcGVjaWZpYyBmaWxlDQo=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
0396{"flow_id":22,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469635,"pkt_len":54,"pkt":"ADBUADRWAODtAW69CABFAAAoabRAAIAGOYrAqAECk+oB\/QqgABWvncMs5R+WvlAQQGseegAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":68,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":28,"flow_packet_id":1,"flow_first_seen":1120469635046,"flow_last_seen":1120469635046,"flow_tot_l4_data_len":23,"flow_min_l4_data_len":23,"flow_max_l4_data_len":23,"flow_avg_l4_data_len":23,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"192.168.1.2","src_port":21,"dst_port":2208,"l4_proto":"tcp"}
0402{"flow_id":28,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469635,"pkt_len":60,"pkt":"AKrtAW69ADBUADRWCABFEAAreQ5AADkGcR2T6gH9wKgBAgAVCKDlH5a+r53DLFgYYzbRlgAAIFUKAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":69,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":29,"flow_packet_id":1,"flow_first_seen":1120469635048,"flow_last_seen":1120469635048,"flow_tot_l4_data_len":79,"flow_min_l4_data_len":79,"flow_max_l4_data_len":79,"flow_avg_l4_data_len":79,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"192.168.1.2","src_port":21,"dst_port":2732,"l4_proto":"tcp"}
0476{"flow_id":29,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":69,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469635,"pkt_len":113,"pkt":"AODtAW69ADBUADRWCABFEABjeQ9AADkGcOST6gH9wKgBAgAVCqzlH5bBr53DLFAYYzY9pwAAIEZpbGVzIGxhcmdlciB0aGVuIDI1ME1CIHdpbGwgYmUgZGVsZXRlZCBhZnRlciA1IGRheXMgISEhDQo=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
0397{"flow_id":22,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":70,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469635,"pkt_len":54,"pkt":"ADBUADRWAODtBW69CABFAAAoabVAAIAGOYnAqAECk+oB\/QqgABWvncMs5R+W\/FAQQC0eegAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":74,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":30,"flow_packet_id":1,"flow_first_seen":1120469635049,"flow_last_seen":1120469635049,"flow_tot_l4_data_len":23,"flow_min_l4_data_len":23,"flow_max_l4_data_len":23,"flow_avg_l4_data_len":23,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"192.168.1.2","src_port":1045,"dst_port":2720,"l4_proto":"tcp"}
0402{"flow_id":30,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":74,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469635,"pkt_len":60,"pkt":"AODtAW69ADBUADRWCABFEAAreRJAADkGcRmT6gH9wKgBAgQVCqDlH5cvr53DLFAYYzbRJQAAIA0KAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":31,"flow_packet_id":1,"flow_first_seen":1120469635052,"flow_last_seen":1120469635052,"flow_tot_l4_data_len":61,"flow_min_l4_data_len":61,"flow_max_l4_data_len":61,"flow_avg_l4_data_len":61,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"192.168.65.2","src_port":21,"dst_port":2720,"l4_proto":"tcp"}
0450{"flow_id":31,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469635,"pkt_len":95,"pkt":"AODtAW69ADBUADRWCABFEABReRRAADkGcPGT6gH9wKhBAgAVCqDlH5dFr53DLFAYYzYwqgAAMjMwIEd1ZXN0IGFjY2VzcyBncmFudGVkIGZvciBhbm9ueW1vdSVzAAo=","pkt_caplen":95,"pkt_type":2048,"pkt_ipoffset":14}
0353{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":78,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469635,"pkt_len":62,"pkt":"ADBUADRWAODtAW69CADFAAAwabhAAIAGOX7AqAECk+oB\/QqgABWvncMs5R+XblAYP7tMeAAAVFlQRSBJDQo=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
0182{"basic_event_id":2,"basic_event_name":"Unknown L3 protocol","thread_id":0,"packet_id":78,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","protocol":2048}
0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":79,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":32,"flow_packet_id":1,"flow_first_seen":1120469635105,"flow_last_seen":1120469635105,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"84.168.1.2","src_port":21,"dst_port":2720,"l4_proto":"tcp"}
0422{"flow_id":32,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":79,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469635,"pkt_len":73,"pkt":"AODtAW69ADBUADRWCABFEAA7eRVAADkGcQaT6gH9VKgBAgAVCqDlH5dur53DNFAYYzYlcwAAMjAwIFR5cGUgc2V0IHRvIEkNCg==","pkt_caplen":73,"pkt_type":2048,"pkt_ipoffset":14}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":80,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":33,"flow_packet_id":1,"flow_first_seen":1120469635106,"flow_last_seen":1120469635106,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":1,"l3_proto":"ip4","src_ip":"192.112.1.2","dst_ip":"147.234.1.253","src_port":2720,"dst_port":21,"l4_proto":"tcp"}
0404{"flow_id":33,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":80,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469635,"pkt_len":60,"pkt":"ADBUADRWAODtAW69CABFAAAuablAAIAGOX\/AcAECk+oB\/QqgABWvncM05R+XgVAYP6htwgAAUEFTVg0K","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
0414{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":81,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469635,"pkt_len":106,"pkt":"AODtAW69ADBUADRWCABFqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqg==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
0202{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":81,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":72}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":82,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":34,"flow_packet_id":1,"flow_first_seen":1120469635128,"flow_last_seen":1120469635128,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"147.117.1.253","src_port":2720,"dst_port":21,"l4_proto":"tcp"}
0423{"flow_id":34,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":82,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469635,"pkt_len":73,"pkt":"ADBUADRWAODtAW6zCABFAAA7aU1AAIAGOXHAqAECk3UB\/QqgABWvHcM65R+X+lAYP3SxkwAAUkVUUiBTaXRlJXMAdC54bWwNCg==","pkt_caplen":73,"pkt_type":2048,"pkt_ipoffset":14}
0353{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469635,"pkt_len":62,"pkt":"ADBUADRWAODtAW69CABFAAB6abtAAIAGOXvAqAEGk+oB\/Qqh5ncb6piKAAAAAHACQABGAAAAAgQFtAkBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
0202{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":28}
0401{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":84,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469635,"pkt_len":99,"pkt":"qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq","pkt_caplen":99,"pkt_type":43690,"pkt_ipoffset":14}
0188{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":84,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","type":43690}
0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":85,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":35,"flow_packet_id":1,"flow_first_seen":1120469635152,"flow_last_seen":1120469635152,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"37.115.0.253","dst_ip":"192.168.1.2","src_port":58999,"dst_port":2721,"l4_proto":"tcp"}
0406{"flow_id":35,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":85,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469635,"pkt_len":62,"pkt":"AODtAW69ADBUADRWCABFAAAweRhAADkGcR4lcwD9wKgBAuZ3CqHlIbocG+qYi3ASYzaDqwAAAQEEAgIEBYM=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
0341{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":86,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469635,"pkt_len":54,"pkt":"ADBUADRWAODtAW69CABHAAAoabxAAIAGOYLAqAECk+oB\/Qqh5ncb6piL5SG6HVAQQiTRUAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
0210{"basic_event_id":12,"basic_event_name":"TCP packet smaller than expected","thread_id":0,"packet_id":86,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","header_len":54,"expected":62}
0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":87,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":36,"flow_packet_id":1,"flow_first_seen":1120469635153,"flow_last_seen":1120469635153,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"147.234.1.253","src_port":2721,"dst_port":58999,"l4_proto":"tcp"}
0395{"flow_id":36,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":87,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469635,"pkt_len":54,"pkt":"ADBUADRWAODtAW69CABFAAAoab1AAIAGOYHAqAECk+oB\/Qqh5ncb6piL5SG6HVARQiTRTwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":89,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":37,"flow_packet_id":1,"flow_first_seen":1120469635173,"flow_last_seen":1120469635173,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"192.232.1.2","src_port":58999,"dst_port":2721,"l4_proto":"tcp"}
0402{"flow_id":37,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":89,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469635,"pkt_len":60,"pkt":"AODtAW69ADBUADRWCABFAAAoeRlAADkGcSWT6gH9wOgBAuZ3CqHlIbodG+qYjFAQYzawPQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":93,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":38,"flow_packet_id":1,"flow_first_seen":1120469635179,"flow_last_seen":1120469635179,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"37.115.0.2","dst_ip":"147.234.1.253","src_port":2639,"dst_port":21,"l4_proto":"tcp"}
0395{"flow_id":38,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":93,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469635,"pkt_len":54,"pkt":"ADBUADRWAODtAW69CABFAAAoacBAAIAGOX4lcwACk+oB\/QpPABWvncNU5R+X8VAQPzkeUQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
0454{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":95,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469637,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOacEAAIARTIzAqAECwKgB\/wCJAIkAGluqhPEBEAABAAAAAAAAIEVGRURFSkZQRUVFUEVKRUJFSkVPQ0FDQUNBQ0FDQXZNAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
0454{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":96,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469637,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOacIAAIARTIvAqAECwKgB\/wCJAIkAOluqhPEBEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ0FDQUJNAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
0400{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":97,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469638,"pkt_len":92,"pkt":"\/\/\/\/\/7\/\/AODtAW69CABFAABeacMAAIARTIrAqAECwKgB\/wCJAIkAOluqhPEBEAABAAAAAAB0IEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ0FDQUJNAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
0202{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":97,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":58}
0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":39,"flow_packet_id":1,"flow_first_seen":1120469663172,"flow_last_seen":1120469663172,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.136.1.1","src_port":2722,"dst_port":53,"l4_proto":"udp"}
0439{"flow_id":39,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469663,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIacgAAIARTYnAqAECwIgBAQqiADUANGxNvdUBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0665{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":39,"flow_packet_id":1,"flow_first_seen":1120469663172,"flow_last_seen":1120469663172,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.136.1.1","src_port":2722,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":101,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":40,"flow_packet_id":1,"flow_first_seen":1120469664171,"flow_last_seen":1120469664171,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2722,"dst_port":53,"l4_proto":"udp"}
0439{"flow_id":40,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":101,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469664,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIackAAIARTYjAqAECwKgBAQqiADUANGxNvdUBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0665{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":101,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":40,"flow_packet_id":1,"flow_first_seen":1120469664171,"flow_last_seen":1120469664171,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2722,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0439{"flow_id":40,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469666,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIacoAAIARpYfAqAECwKgBAQqiADUANFpNvdUBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0439{"flow_id":40,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469668,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIacsAAIARTYbAqAECwKgBAQqiADUANGxNvdUBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhADA=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469672,"pkt_len":86,"pkt":"ADBUADRWAODtAW7bCABFABFIacwAAIARTYXAqAECwKgBAQqiADUANGxNvdUBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0203{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":52}
0435{"flow_id":40,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469680,"pkt_len":82,"pkt":"ADBUADRWAODtAW69CABFAABEac0AAIARTYjAqAECwKgBAQqiADUAMONFQdYAAAABywAAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
0713{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":40,"flow_packet_id":4,"flow_first_seen":1120469664171,"flow_last_seen":1120469680185,"flow_tot_l4_data_len":204,"flow_min_l4_data_len":48,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":51,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2722,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":41,"flow_packet_id":1,"flow_first_seen":1120469680186,"flow_last_seen":1120469680186,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2723,"l4_proto":"udp"}
0465{"flow_id":41,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469680,"pkt_len":105,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1CqMAR8XBQdaAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRzBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
0661{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":41,"flow_packet_id":1,"flow_first_seen":1120469680186,"flow_last_seen":1120469680186,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2723,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-adds.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":0,"rsp_type":12,"rsp_addr":"0.0.0.0"}}
1005{"flow_id":11,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469680,"pkt_len":509,"pkt":"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","pkt_caplen":509,"pkt_type":2048,"pkt_ipoffset":14}
1029{"flow_id":11,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":108,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469680,"pkt_len":528,"pkt":"AODtAW69ADBUADRWCABFAAICAABAADcRiivU8iEjwKgBAhPEE8QB7uWqU0lQLzIuMCA0MDEgVW5hdXRob3JpJXMADQpDYWxsLUlEOiA1NzgyMjI3MjktNDY2NWQ3NzVANTc4MjIyNzMyLTQ2NjVkNzcyDQpDU2VxOiA3MCBSRUdJU1RFUg0KRnJvbTogPHNpcDp2b2kxODA2M0BzaXAuY3liZXJjaXR5LmRrPjt0YWc9ODYwMmIxNA0KVG86IDxzaXA6dm9pMTgwNjNAc2lwLmN5YmVyY2l0eS5kaz47dGFnPTAwLTA0MDg5LTE3MDFiMDUwLTYxYWM0Yzk0Mw0KVmlhOiBTSVAvMi4wL1UlcwAxOTIuMTY4LjEuMjtyZWNlaXZlZD04MC4yMzAuMjE5LjcwO3Jwb3J0PTUwNjA7YnJhbiVzAHo5aEc0YktucDE0MDUyMDE5OS00ODlkNTMwZjE5Mi4xNjguMS4yDQpXV1ctQXV0aGVudGljYXRlOiBEaWdlc3QgcmVhbG09InNpcC5jeWJlcmdpdHkuZGsiLG5vbmNlPSIxNzAxYjA0MjA3M2U0MGRjM2FjN2FkYjA1MmFkNDFkIixvU2FxdWU9IjE3MDFhMTM1MWY3MDc5NSIsc3RhbGU9ZmFsc2UsYWxnb3JpdGhtPU1ENQ0KQ29udGVudC1MZW5ndGg6IDANCg0K","pkt_caplen":528,"pkt_type":2048,"pkt_ipoffset":14}
0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":109,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":42,"flow_packet_id":1,"flow_first_seen":1120469680447,"flow_last_seen":1120469680447,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2724,"dst_port":9587,"l4_proto":"udp"}
0439{"flow_id":42,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":109,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469680,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIRc8AAIARTYLAqAECwKgBAQqkJXMANFNK1tYBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":110,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":43,"flow_packet_id":1,"flow_first_seen":1120469681446,"flow_last_seen":1120469681446,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2724,"dst_port":53,"l4_proto":"udp"}
0439{"flow_id":43,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":110,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469681,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIadAAAIARTYHAqAECwKgBAQqkADUANFNK1tYBAAABAAB2AAAABF9zaXAEX3VkcAMlcwAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0439{"flow_id":43,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":111,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469683,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIYdEAAIARTYDAqAECwKgBAQqkADUANFNK1tYBAAABAAAAAAAABF9zaXAGX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAQE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0455{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469684,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOadIAAIERTHvAqAECwKgB\/wCJAIkAOlunhPQBEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ0FDQUJNAAAgADg=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":44,"flow_packet_id":1,"flow_first_seen":1120469685131,"flow_last_seen":1120469685131,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":25481,"l4_proto":"udp"}
0456{"flow_id":44,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469685,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AOB2AW69CABFAABOadMAAIARTHrAqAECwKgB\/wCJY4kAOls4hPQBEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUN1NEFDQUJNAHEgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":45,"flow_packet_id":1,"flow_first_seen":1120469685452,"flow_last_seen":1120469685452,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.17.1","src_port":2724,"dst_port":53,"l4_proto":"udp"}
0439{"flow_id":45,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469685,"pkt_len":86,"pkt":"ADBUPzRWAODtAW69CABFAABIadQAAIARTX3AqAECwKgRAQqkADUANFNK1tYBAAABAAAAAAAABF96aXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0666{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":45,"flow_packet_id":1,"flow_first_seen":1120469685452,"flow_last_seen":1120469685452,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.17.1","src_port":2724,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_zip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0455{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":115,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469685,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOadUAAIARTHjAqAECwKgB\/wCJAIkAOlunhPQBEFYBAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ0FDQUJNAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
0439{"flow_id":43,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":116,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469689,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIadYAAIARXXvAqAECwKgBAQqkADUANFNK1tYBAAABAAAAqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0514{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":36,"flow_packet_id":1,"flow_first_seen":1120469635153,"flow_last_seen":1120469635153,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"147.234.1.253","src_port":2721,"dst_port":58999,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
0477{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":36,"flow_packet_id":1,"flow_first_seen":1120469635153,"flow_last_seen":1120469635153,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"147.234.1.253","src_port":2721,"dst_port":58999,"l4_proto":"tcp"}
0608{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":22,"flow_packet_id":25,"flow_first_seen":1120469634878,"flow_last_seen":1120469635196,"flow_tot_l4_data_len":824,"flow_min_l4_data_len":20,"flow_max_l4_data_len":79,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"147.234.1.253","src_port":2720,"dst_port":21,"l4_proto":"tcp","ndpi": {"proto":"FTP_CONTROL","category":"Download-FileTransfer-FileSharing"},"ftp": {"user":"","password":"","auth_failed":0}}
0476{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":22,"flow_packet_id":25,"flow_first_seen":1120469634878,"flow_last_seen":1120469635196,"flow_tot_l4_data_len":824,"flow_min_l4_data_len":20,"flow_max_l4_data_len":79,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"147.234.1.253","src_port":2720,"dst_port":21,"l4_proto":"tcp"}
0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":46,"flow_packet_id":1,"flow_first_seen":1120469697460,"flow_last_seen":1120469697460,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2725,"dst_port":53,"l4_proto":"udp"}
0435{"flow_id":46,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469697,"pkt_len":82,"pkt":"ADBUADRWAODtAW69CABFAABEadcAAIARTX7AqAECwKgBAQqlADUAMORCQNcAAAABAAAAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
0661{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":46,"flow_packet_id":1,"flow_first_seen":1120469697460,"flow_last_seen":1120469697460,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2725,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0465{"flow_id":46,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":118,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469697,"pkt_len":105,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1CqUAR8a+QNeAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAxWAQAAJxAACwlsb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
0671{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":118,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":46,"flow_packet_id":2,"flow_first_seen":1120469697460,"flow_last_seen":1120469697462,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2725,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":12,"rsp_type":12,"rsp_addr":"0.0.0.0"}}
0373{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":119,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469697,"pkt_len":76,"pkt":"ADBUADRWAODtAW69CABFAAA+adiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqg==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
0203{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":119,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":42}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":120,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":47,"flow_packet_id":1,"flow_first_seen":1120469697468,"flow_last_seen":1120469697468,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.46","dst_ip":"192.168.1.2","src_port":53,"dst_port":2726,"l4_proto":"udp"}
0447{"flow_id":47,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":120,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469697,"pkt_len":92,"pkt":"AODtAW69ADBUADRWCABFAABOAABAAEARt0vAqAEuwKgBAgA1CqYAOqrT7deBAAABAAEAAAAAA3NpcAljeWJlcmNpdHkCZGsAAAEAAcAMAAEAAQAAJxAABNTyISM=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
0661{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":120,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":47,"flow_packet_id":1,"flow_first_seen":1120469697468,"flow_last_seen":1120469697468,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.46","dst_ip":"192.168.1.2","src_port":53,"dst_port":2726,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"sip.cybercity.dk","num_queries":1,"num_answers":1,"reply_code":0,"query_type":0,"rsp_type":1,"rsp_addr":"212.242.33.35"}}
1289{"flow_id":11,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":121,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469697,"pkt_len":722,"pkt":"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","pkt_caplen":722,"pkt_type":2048,"pkt_ipoffset":14}
0983{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":122,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469697,"pkt_len":533,"pkt":"AODtAW69ADBUADRWCABFAAIHAAD6ADcRiibU8iEjwKgBAhPEE8QB877qU0lQLzIuMCA0MDEgbm9uY2UgaGFzIGNoYW5nZWQNCkNhbGwtSUQ6IDU3ODIyMjcyOS00NjY1ZDc3NUA1NzgyMjI3MzItNDY2NWQ3NzINCkNTZXE6IDcxIFJFR0lTVEVSDQpGcm9tOiA8c2lwNXZvaTE4MDYzQHNpcC5jeWJlcmNpdHkuZGs+O3RhZz04fTVhMDBkDQpUbzIgPHNpcDp2b2kxODA2M0BzaXAuY3liZXJjaXR5LmRrPjt0YWc9MDAtMDQwODktMTcwMWIwNjctMzIwYWQyZGEzDQpWaWE6IFNJUC8yLjAvVURQIDE5Mi4xNjguMS4yO3JlY2VpdmVkPTgwLjIzMC4yMTluNzA7cnBvZnQ9NTA2MDticmFuY2g9ejloRzRiS25wMTM4qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":533,"pkt_type":2048,"pkt_ipoffset":14}
0204{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":122,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":499}
0456{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469731,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOadoAAIARTHPAqAECwKgB\/wCJAIkAOlukhHcJEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ0FDQUJNAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
0456{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":126,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469732,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOadsAAIARTHLAqAECwKgB\/wCJAIkAm1ukhPcBEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDJXMAQ0FDQUJNAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
0456{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469733,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOadwAAIARTHHAqAECwKgB\/wCJAIkAelukhPcBEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ0FDU0JNAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
0456{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469779,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOaeUAAIARTGjAqAECwKgB\/wCJAIkAOlufhPwBEIABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPQyVzAENBQ0FDQUJNAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
0456{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469780,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOaeYAAIARTGfAqAECwKgB\/wCJAIkAOlufhPwBEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ0FDQUJNAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
0456{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":130,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469781,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOaecAAIARTGbAqAECwKgB\/wCJAIkAOlufhPwBEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ0FDQUJNAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":48,"flow_packet_id":1,"flow_first_seen":1120469828958,"flow_last_seen":1120469828958,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.202","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
0456{"flow_id":48,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469828,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOah8AAIARTC7AqAHKwKgB\/wCJAIkAOluchP8BEAABAAAAAAAAIEVGRURFSkZQRUVFUEVOa0JFSkVPQ0FDQUNBQ0FDQUJNAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
0529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":48,"flow_packet_id":1,"flow_first_seen":1120469828958,"flow_last_seen":1120469828958,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.202","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","category":"System"}}
0385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469830,"pkt_len":86,"pkt":"ADBPADRWAODtAW69CABFAI1IaiAAAIARTTHAqAECwKgBAQqsADUANM1AXNgBAAABAAABgAAABF9zaXAEX3VkcANzMnAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0203{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":52}
0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":49,"flow_packet_id":1,"flow_first_seen":1120469831652,"flow_last_seen":1120469831652,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2732,"dst_port":53,"l4_proto":"udp"}
0439{"flow_id":49,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469831,"pkt_len":86,"pkt":"ADBUADRWAODtAXq9CABFAABISiEAAIARTTDAqAECwKgBAQqsADUANM1AXNgBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0665{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":49,"flow_packet_id":1,"flow_first_seen":1120469831652,"flow_last_seen":1120469831652,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2732,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0386{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":138,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469833,"pkt_len":86,"pkt":"MDBUADRWAODtAW69CABFAABIaiIAE4ARTS\/AqAECwKgBAQqsADUANM1AXNgBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0203{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":138,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":52}
0439{"flow_id":49,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":139,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469835,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIaiMAAIARTS7AqAECwKgBAQqsADUANM1AXNgBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":140,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":50,"flow_packet_id":1,"flow_first_seen":1120469839664,"flow_last_seen":1120469839664,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"udp"}
0439{"flow_id":50,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":140,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469839,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIaiQAAIARTS3AqAECwKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":141,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":51,"flow_packet_id":1,"flow_first_seen":1120469847666,"flow_last_seen":1120469847666,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.115.1","src_port":2733,"dst_port":53,"l4_proto":"udp"}
0435{"flow_id":51,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":141,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469847,"pkt_len":82,"pkt":"9jBUADRWAODtAW69CABFAABEaiUAAIARTTDAqAECwKhzAQqtADUAMFw5yNgAAAABAAAAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycWEAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
0663{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":141,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":51,"flow_packet_id":1,"flow_first_seen":1120469847666,"flow_last_seen":1120469847666,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.115.1","src_port":2733,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arqa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":142,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":52,"flow_packet_id":1,"flow_first_seen":1120469847667,"flow_last_seen":1120469847667,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2733,"l4_proto":"udp"}
0465{"flow_id":52,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":142,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469847,"pkt_len":105,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1Cq0ARz61yNiAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwmEb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
0661{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":142,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":52,"flow_packet_id":1,"flow_first_seen":1120469847667,"flow_last_seen":1120469847667,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2733,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":0,"rsp_type":12,"rsp_addr":"0.0.0.0"}}
0951{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":143,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469847,"pkt_len":509,"pkt":"ADBUADRWAODtAVK9CABFAAHvaiZJAIB4FxjAqAEC1PIhIxPEE8QB25tyUkVmSVNURVIgc2lZOnNpcC5jeWJlckdpdHkyZGsgU0lQLzIuMA0KVmlhOiBTSVAvMi4wL1VEUCAxOTIuMTZxJXMAMjticmFuY2g9ejloRzRiS25wMTIzNzU5MDYzLTQ2NGJjMWJiMTkyLjE2OC4xLjI7cpdvcnQNaUZyb206IDxzaXA6dm9pMTgwNjJAc2lwLmN5YmVyY2l0eS5kaz47dGFnPTc2MDY5ZTQNClRvOiA8c2lwOnZvaTE4MDYyQHNpcC5jeWJlcmNpdHkuZGs+QwpDYWxsLUlEOiA1NzgyMjI3MjktNDY2NWQ3NzVANTc4MjIyNzMyLTQ2NjVkNzcyDQpDb250YWOqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":509,"pkt_type":2048,"pkt_ipoffset":14}
0204{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":143,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":475}
1029{"flow_id":11,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":144,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469847,"pkt_len":528,"pkt":"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","pkt_caplen":528,"pkt_type":2048,"pkt_ipoffset":14}
0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":53,"flow_packet_id":1,"flow_first_seen":1120469847979,"flow_last_seen":1120469847979,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2734,"dst_port":53,"l4_proto":"udp"}
0439{"flow_id":53,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469847,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIaicAAIARTSrAqAECwKgBAQquADUANKw8fdoBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0665{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":53,"flow_packet_id":1,"flow_first_seen":1120469847979,"flow_last_seen":1120469847979,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2734,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":54,"flow_packet_id":1,"flow_first_seen":1120469848977,"flow_last_seen":1120469848977,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"172.168.1.2","dst_ip":"192.168.1.1","src_port":2734,"dst_port":53,"l4_proto":"udp"}
0439{"flow_id":54,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469848,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIaigAAIARTSmsqAECwKgBAQquADUANKw8fdoBAAABAAAA4wAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0439{"flow_id":53,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":147,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469850,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIaikAAFIRTSjAqAECwKgBAQquADUANKw8fdoBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJYaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0439{"flow_id":53,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":150,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469852,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIaioAAIARTSfAqAECwKgBAQquADUANKw8Q9oBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0439{"flow_id":53,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":151,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469856,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIaisAAIARTSbAqAECwKgBAQquADUANKw8fdoBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":152,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":55,"flow_packet_id":1,"flow_first_seen":1120469864991,"flow_last_seen":1120469864991,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"200.168.1.2","dst_ip":"192.168.1.1","src_port":2735,"dst_port":53,"l4_proto":"udp"}
0435{"flow_id":55,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":152,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469864,"pkt_len":82,"pkt":"ADBUADRWAODtAW69CABFAABEakEAAIARTSnIqAECwKgBAQqvADUAMDE089sAAAABAAAAAAAAATEBMAEwAzEyNwdpbi1hZGRzBGFycGEAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
0661{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":152,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":55,"flow_packet_id":1,"flow_first_seen":1120469864991,"flow_last_seen":1120469864991,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"200.168.1.2","dst_ip":"192.168.1.1","src_port":2735,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-adds.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":153,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":56,"flow_packet_id":1,"flow_first_seen":1120469864992,"flow_last_seen":1120469864992,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"253.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2735,"l4_proto":"udp"}
0465{"flow_id":56,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":153,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469864,"pkt_len":105,"pkt":"AODzAW69ADBUADRWCABFAABbAABAAEARtz79qAEBwKgBAgA1Cq8ARxOw89uAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
0661{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":153,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":56,"flow_packet_id":1,"flow_first_seen":1120469864992,"flow_last_seen":1120469864992,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"253.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2735,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":0,"rsp_type":12,"rsp_addr":"0.0.0.0"}}
1289{"flow_id":11,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":154,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469864,"pkt_len":722,"pkt":"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","pkt_caplen":722,"pkt_type":2048,"pkt_ipoffset":14}
1037{"flow_id":11,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":155,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469865,"pkt_len":533,"pkt":"AODtAW69ADBUADRWCABFAAIHAABAADcRiibU8iEjwKgBAhPEE8QB83zWU0lQLzIuMCA0MDEgbm9uY2UgaGFzIGNoYW5nZWQNCkNhbGwtSUQ6IDU3ODIyMjcyOS00NjY1ZDc3NUA1NzgyMjI3MzItNDY2NWQ3NzINCkNTZXE6JXMAIFJFR0lTVEVSDQpGcm9tOiA8c2lwOnZvaTE4MDYyQHNpcC5jeWJlcmNpdHkuZGs+O3RhZz03NDYwMjg4DQpUbz4gqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":533,"pkt_type":2048,"pkt_ipoffset":14}
0402{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":157,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469876,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABPai8AAIARTB7AqAECwKgB\/wCJAIkAOluZhQIBEAABWQAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ0FDQWNNAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
0203{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":157,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":58}
0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":158,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":57,"flow_packet_id":1,"flow_first_seen":1120469877188,"flow_last_seen":1120469877188,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":169,"l4_proto":"udp"}
0456{"flow_id":57,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":158,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469877,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOajAAAIARTB3AqAECwKgB\/wCJAKkAOluZhQIBEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNB10FDQUJNAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":159,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":58,"flow_packet_id":1,"flow_first_seen":1120469921898,"flow_last_seen":1120469921898,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2736,"dst_port":53,"l4_proto":"udp"}
0439{"flow_id":58,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":159,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469921,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIajUAAIARTRzAqAECwKgBAQqwADUANK04fNwBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0665{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":159,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":58,"flow_packet_id":1,"flow_first_seen":1120469921898,"flow_last_seen":1120469921898,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2736,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":160,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":59,"flow_packet_id":1,"flow_first_seen":1120469922894,"flow_last_seen":1120469922894,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2684,"dst_port":53,"l4_proto":"udp"}
0439{"flow_id":59,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":160,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469922,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIJXMAAIARTRvAqAECwKgBAQp8ADUANK14fNwBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJRHliZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0665{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":160,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":59,"flow_packet_id":1,"flow_first_seen":1120469922894,"flow_last_seen":1120469922894,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2684,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.dybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0402{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":163,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469924,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AODtAW69qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":92,"pkt_type":43690,"pkt_ipoffset":14}
0189{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":163,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","type":43690}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":164,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":60,"flow_packet_id":1,"flow_first_seen":1120469924897,"flow_last_seen":1120469924897,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.17","src_port":2736,"dst_port":53,"l4_proto":"udp"}
0439{"flow_id":60,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":164,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469924,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIajoAAIARTRfAqAECwKgBEQqwADUANK04fNwBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0666{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":164,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":60,"flow_packet_id":1,"flow_first_seen":1120469924897,"flow_last_seen":1120469924897,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.17","src_port":2736,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0439{"flow_id":58,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":165,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469926,"pkt_len":86,"pkt":"QDBUADRWAODtAW69CABFAABIaj0AAIARTRTAqAECwKgBAQqwADUANK04fNwBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0439{"flow_id":58,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":166,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469930,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIaj4AAIARTRPAqAECwKgBAQqwADUANK04fNwBAACBAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0713{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":166,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":58,"flow_packet_id":3,"flow_first_seen":1120469921898,"flow_last_seen":1120469930905,"flow_tot_l4_data_len":156,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2736,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":167,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":61,"flow_packet_id":1,"flow_first_seen":1120469938907,"flow_last_seen":1120469938907,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2737,"dst_port":53,"l4_proto":"udp"}
0435{"flow_id":61,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":167,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469938,"pkt_len":82,"pkt":"ADBUADRWAODtAW69CABFAABEaj8AAIARTRbAqAECwKgBAQqxADUAMAoxGt0AAAABAAAAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
0661{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":167,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":61,"flow_packet_id":1,"flow_first_seen":1120469938907,"flow_last_seen":1120469938907,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2737,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0465{"flow_id":61,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":168,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469938,"pkt_len":105,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAF8Rtz7AqAEBwKgBAgA1CrEAR+ysGt2AAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAVgwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
0671{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":168,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":61,"flow_packet_id":2,"flow_first_seen":1120469938907,"flow_last_seen":1120469938908,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2737,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":12,"rsp_type":12,"rsp_addr":"0.0.0.0"}}
0481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":169,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":62,"flow_packet_id":1,"flow_first_seen":1120469938910,"flow_last_seen":1120469938910,"flow_tot_l4_data_len":475,"flow_min_l4_data_len":475,"flow_max_l4_data_len":475,"flow_avg_l4_data_len":475,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"212.242.33.35","src_port":20932,"dst_port":5060,"l4_proto":"udp"}
1005{"flow_id":62,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":169,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469938,"pkt_len":509,"pkt":"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","pkt_caplen":509,"pkt_type":2048,"pkt_ipoffset":14}
0528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":169,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":62,"flow_packet_id":1,"flow_first_seen":1120469938910,"flow_last_seen":1120469938910,"flow_tot_l4_data_len":475,"flow_min_l4_data_len":475,"flow_max_l4_data_len":475,"flow_avg_l4_data_len":475,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"212.242.33.35","src_port":20932,"dst_port":5060,"l4_proto":"udp","ndpi": {"proto":"SIP","category":"VoIP"}}
1029{"flow_id":11,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":170,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469939,"pkt_len":528,"pkt":"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","pkt_caplen":528,"pkt_type":2048,"pkt_ipoffset":14}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":63,"flow_packet_id":1,"flow_first_seen":1120469939223,"flow_last_seen":1120469939223,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.84.1","src_port":2738,"dst_port":53,"l4_proto":"udp"}
0439{"flow_id":63,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469939,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIakEAAIARTRDAqAECwKhUAQqyADUANKY1g90BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR1AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0666{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":63,"flow_packet_id":1,"flow_first_seen":1120469939223,"flow_last_seen":1120469939223,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.84.1","src_port":2738,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercitu.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":64,"flow_packet_id":1,"flow_first_seen":1120469940218,"flow_last_seen":1120469940218,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2738,"dst_port":53,"l4_proto":"udp"}
0440{"flow_id":64,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469940,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIakIAAIARTQ\/AqAECwKgBAQqyADUANKY1g90BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0665{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":64,"flow_packet_id":1,"flow_first_seen":1120469940218,"flow_last_seen":1120469940218,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2738,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0439{"flow_id":64,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":173,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469942,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIakMAAIARTQ7AqAECwKgBAQqyADUANKY1g90BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0439{"flow_id":13,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":176,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469944,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIakQAAIARTQ3AqAECwKgBAQqcADUANKY1g90BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0674{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":176,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":13,"flow_packet_id":2,"flow_first_seen":1120469590256,"flow_last_seen":1120469944224,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":48,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2716,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0439{"flow_id":64,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":177,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469948,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIakUAAIARTQzAqAECwKgBAQqyADUANKY1g90BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":178,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":65,"flow_packet_id":1,"flow_first_seen":1120469956232,"flow_last_seen":1120469956232,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2739,"dst_port":53,"l4_proto":"udp"}
0436{"flow_id":65,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":178,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469956,"pkt_len":82,"pkt":"ADBUADRWAODtAW69CABFAABEakYAAIARTQ\/AqAECwKgBAQqzADUAMLotat4AAAABAAAAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
0661{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":178,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":65,"flow_packet_id":1,"flow_first_seen":1120469956232,"flow_last_seen":1120469956232,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2739,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0465{"flow_id":65,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":179,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469956,"pkt_len":105,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1CrMAR5ypat6AAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
0671{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":179,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":65,"flow_packet_id":2,"flow_first_seen":1120469956232,"flow_last_seen":1120469956233,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2739,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":12,"rsp_type":12,"rsp_addr":"0.0.0.0"}}
1290{"flow_id":11,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":180,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469956,"pkt_len":722,"pkt":"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","pkt_caplen":722,"pkt_type":2048,"pkt_ipoffset":14}
0791{"flow_id":11,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":181,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469956,"pkt_len":348,"pkt":"AODtAW69ADBUADRWCABFAAFOAABAADcRit\/U8iEjwKgBAhPEE8QBOjsKU0lQLzIuMCCFMDAgVHJ5aW5nDQpDYWxsJ0lEOiA1NzgyMjI3MjktNDY2NWQ3NzVANTc4MjIyNzMyLTQ2NjVkNzcyDQpDU2VxOiA3NSBSRXRJU1RFUg0KRnJvbTogPCVzADp2b2kxODA2MkBzaXAuY3liZXJjaXR5LmRrPjt0YWc9NmJhYzU1Yw0KVG86IDxzaXA6dm9pMTgwNjJAc2lwemN5YmVyY2lteS5kaz4NClZpaDogU0lQLzIuMC9VRFAgMTkyLjE2OC4xLjI7cmVjZWl2ZWQ9ODAuMiVzADIxOS43MDtycG9ydD01MDYwO2JyYW5jaD16OWhHNGJLbnAxMTI5MDM1MDMtNDNhNjQ0ODAxOTIuMTY4LjEuMg0KQ29udGVudC1MZW5ndGg6IDANCg0K","pkt_caplen":348,"pkt_type":2048,"pkt_ipoffset":14}
1010{"flow_id":11,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":182,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469956,"pkt_len":512,"pkt":"AODtAU69ADBUADRWCABFAAHyAABAADcRijvU8iEjwKgBAhPEE8QB2ijZU0lQLzIuMCAyMDAgT0sNCkNhbGwtSUQ6IDU3ODIyMiVzAC00NjY1ZDc3NUA1NzgyMjI3MzItNDY2NWQ3NzINCntvpXRhY3Q6IDxzaXA6dm9pMTgwNjJAMTklcwA2OC4xLjI6NTA2MDtsaW5lPWFjYTZiOTdjYTNmNWU1MWE+O3E9MC41MDA7ZXhwaXJlcz0xMjAwDQpDU2VxOiA3NSBSRUdJU1RFUg0Kqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":512,"pkt_type":2048,"pkt_ipoffset":14}
0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":183,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":66,"flow_packet_id":1,"flow_first_seen":1120469956945,"flow_last_seen":1120469956945,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2740,"dst_port":53,"l4_proto":"udp"}
0439{"flow_id":66,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":183,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469956,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIakgAAIARTQnAqAECwKgBAQq0ADUANP0xLN8BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaSVzAGRrAAAhLwE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0665{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":183,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":66,"flow_packet_id":1,"flow_first_seen":1120469956945,"flow_last_seen":1120469956945,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2740,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cyberci_s","num_queries":0,"num_answers":0,"reply_code":0,"query_type":25707,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0439{"flow_id":66,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":184,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469957,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIakkAAIARTQjAqAECwKgBAQq0ADUANP0xLN82AAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0674{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":184,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":66,"flow_packet_id":2,"flow_first_seen":1120469956945,"flow_last_seen":1120469957944,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2740,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0439{"flow_id":66,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469959,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIakoAAIARTQfAqAECwKgBAQq0ADUANP0xLN8BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":186,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469961,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CGdFAABIaksAAIARTQbAqAECwKgBAQq0ADUAPP0xLN8BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2151,"pkt_ipoffset":14}
0188{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":186,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","type":2151}
0439{"flow_id":66,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":187,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469965,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIakwAAIARTQXAqAECwKgBAQq0ADUANP0xLN8BJXMAAAAAAAAABF9zaXAEX3VkcANzaXAJc3liZXJUaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0713{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":187,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":66,"flow_packet_id":4,"flow_first_seen":1120469956945,"flow_last_seen":1120469965955,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2740,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":188,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":67,"flow_packet_id":1,"flow_first_seen":1120469970215,"flow_last_seen":1120469970215,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":8329,"l4_proto":"udp"}
0456{"flow_id":67,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":188,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469970,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOak0AAIARTADAqAECwKgB\/wCJIIkAOluRhQoBEAABAAAAAAAAIEVGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":191,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":68,"flow_packet_id":1,"flow_first_seen":1120469973957,"flow_last_seen":1120469973957,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2741,"dst_port":53,"l4_proto":"udp"}
0435{"flow_id":68,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":191,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469973,"pkt_len":82,"pkt":"ADBUADRWAODtAW69CABFAABEalEAAIARTQTAqAECwKgBAQq1ADUAMPFJM8AAAAABAAAAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
0661{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":191,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":68,"flow_packet_id":1,"flow_first_seen":1120469973957,"flow_last_seen":1120469973957,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2741,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":192,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":69,"flow_packet_id":1,"flow_first_seen":1120469973959,"flow_last_seen":1120469973959,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.130.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2741,"l4_proto":"udp"}
0465{"flow_id":69,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":192,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469973,"pkt_len":105,"pkt":"YuDtAW69ADBUADRWCABFAABbAABAAEARtz7AqIIBwKgBAgA1CrUAR9PFM8CAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
0663{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":192,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":69,"flow_packet_id":1,"flow_first_seen":1120469973959,"flow_last_seen":1120469973959,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.130.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2741,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":0,"rsp_type":12,"rsp_addr":"0.0.0.0"}}
0388{"flow_id":11,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469973,"pkt_len":47,"pkt":"ADBUADRWAODtAW69CABFAAAhalIAAIARGLrAqAEC1PIhIxPEE8QADcBLICAgICA=","pkt_caplen":47,"pkt_type":2048,"pkt_ipoffset":14}
0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":194,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":70,"flow_packet_id":1,"flow_first_seen":1120469985981,"flow_last_seen":1120469985981,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2742,"dst_port":53,"l4_proto":"udp"}
0439{"flow_id":70,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":194,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469985,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIalMAAIARTP7AqAECwKgBAQq2ADUANHZOs8ABAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0665{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":194,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":70,"flow_packet_id":1,"flow_first_seen":1120469985981,"flow_last_seen":1120469985981,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2742,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":195,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":71,"flow_packet_id":1,"flow_first_seen":1120469986976,"flow_last_seen":1120469986976,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2730,"dst_port":43690,"l4_proto":"udp"}
0439{"flow_id":71,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":195,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469986,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIalQAAIARTP3AqAECwKgBAQqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0439{"flow_id":70,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":196,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469988,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIalUAAIARTPzAqAECwKgBAQq2ADUANHZOs8ABAAABAAAAAAB1BF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAjAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0674{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":196,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":70,"flow_packet_id":2,"flow_first_seen":1120469985981,"flow_last_seen":1120469988978,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2742,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":35,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0439{"flow_id":70,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469990,"pkt_len":86,"pkt":"ADBUADRWAOLtAW69CABFAABIalYAAIARTPvAqAECwKgBAQq2ADUANHZOs8ABAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0674{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":70,"flow_packet_id":3,"flow_first_seen":1120469985981,"flow_last_seen":1120469990981,"flow_tot_l4_data_len":156,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2742,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0439{"flow_id":70,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":198,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469994,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIalcAAIARTPrAqAECwKgBAQq2ADUANHZOs8ABAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0605{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":199,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470000,"pkt_len":243,"pkt":"\/\/\/\/\/\/\/\/AGCXD+5yCENFAADlXL4AAIARWNHAqAEpwKgB\/wCKAIoA0SAWEQKRS8CoASkAigC7AAAgRU1FQkVDREJEQkRCQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0EAIEbuRVBGQ0VMRUhGQ0VQRkZGQUNBQyVzAENBQ0FDQUJOAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAIQAAAAAAAAAAAOgDAAAAAAAAAAAhAFYAAwABAAAAAgAyAFxNQUlxU0xPVFxCUk9XU0UAAQCA\/AoATEFCMTExAAAAAA+y781oIgUBAxAAAA8BVaoA","pkt_caplen":243,"pkt_type":2115,"pkt_ipoffset":14}
0188{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":199,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","type":2115}
0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":200,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":72,"flow_packet_id":1,"flow_first_seen":1120470002989,"flow_last_seen":1120470002989,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2743,"dst_port":53,"l4_proto":"udp"}
0435{"flow_id":72,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":200,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470002,"pkt_len":82,"pkt":"ADBUADRWAODtAW69CABFAABEalgAAIARTP3AqAECwKgBAQq3ADUAMKhFfMIAAAABAAAAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
0661{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":200,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":72,"flow_packet_id":1,"flow_first_seen":1120470002989,"flow_last_seen":1120470002989,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2743,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0465{"flow_id":72,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":201,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470002,"pkt_len":105,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1CrcAR4rBfMKAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbChvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
0671{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":201,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":72,"flow_packet_id":2,"flow_first_seen":1120470002989,"flow_last_seen":1120470002991,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2743,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":12,"rsp_type":12,"rsp_addr":"0.0.0.0"}}
0388{"flow_id":11,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":202,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470002,"pkt_len":47,"pkt":"ADBUADRWAODtAW69CABFAAAhalkAAIARGLPAqAEC1PIhIxPEE8QADcBLICAgICA=","pkt_caplen":47,"pkt_type":2048,"pkt_ipoffset":14}
0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":205,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":73,"flow_packet_id":1,"flow_first_seen":1120470015072,"flow_last_seen":1120470015072,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2744,"dst_port":53,"l4_proto":"udp"}
0439{"flow_id":73,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":205,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470015,"pkt_len":86,"pkt":"ADBUADRWAODtQW69CABFAABIaloAAIARTPfAqAECwKgBAQq4ADUANOBJScMBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0665{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":205,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":73,"flow_packet_id":1,"flow_first_seen":1120470015072,"flow_last_seen":1120470015072,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2744,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0439{"flow_id":73,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":206,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470016,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIalsAAIARTPbAqAECwKgBAQq4ADUANOBJScMBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0439{"flow_id":73,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470018,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIamEAAIARTPDAqAECwKgBAQq4ADUAGOBJScMBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":210,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":74,"flow_packet_id":1,"flow_first_seen":1120470019512,"flow_last_seen":1120470019512,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":88,"dst_port":137,"l4_proto":"udp"}
0456{"flow_id":74,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":210,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470019,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOamMAAIARS+rAqAECwKgB\/wBYAIkAOluMhQ8BEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ0FDQUJNAAEgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
0526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":210,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":74,"flow_packet_id":1,"flow_first_seen":1120470019512,"flow_last_seen":1120470019512,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":88,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","category":"System"}}
0439{"flow_id":73,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":211,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470020,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIamQAAIARTO3AqAECwKgBAQq4ADUANOBJScMBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0439{"flow_id":73,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":212,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470024,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIamUAAIARTOzAqAECwKgBAQq4ADUANOBJScMBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":213,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":75,"flow_packet_id":1,"flow_first_seen":1120470032081,"flow_last_seen":1120470032081,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.170","dst_ip":"170.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"udp"}
0436{"flow_id":75,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":213,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470032,"pkt_len":82,"pkt":"ADBUADRWAODtAW69CABFAABEamYAAIARTO\/AqAGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqg==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":214,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":76,"flow_packet_id":1,"flow_first_seen":1120470032083,"flow_last_seen":1120470032083,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2745,"l4_proto":"udp"}
0465{"flow_id":76,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":214,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470032,"pkt_len":105,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1CrkARxK+9MOAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAfRAACwlsb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
0661{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":214,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":76,"flow_packet_id":1,"flow_first_seen":1120470032083,"flow_last_seen":1120470032083,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2745,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":0,"rsp_type":12,"rsp_addr":"0.0.0.0"}}
0388{"flow_id":11,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":215,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470032,"pkt_len":47,"pkt":"ADBUADRWAODtAW69CABFAAAhamcAAIARGKXAqAEC1PIhIxPEE8QADcBLICAgICA=","pkt_caplen":47,"pkt_type":2048,"pkt_ipoffset":14}
0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":216,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":77,"flow_packet_id":1,"flow_first_seen":1120470032178,"flow_last_seen":1120470032178,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2746,"dst_port":53,"l4_proto":"udp"}
0439{"flow_id":77,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":216,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470032,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIO2gAAIARTOnAqAECwKgBAQq6ADUANMsPhMQBAAABAAAAAAAABF9zaXAEX3VkcAR2b2lwB2JydWp1bGEDbmV0AAAhIAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0665{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":216,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":77,"flow_packet_id":1,"flow_first_seen":1120470032178,"flow_last_seen":1120470032178,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2746,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.voip.brujula.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0440{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":78,"flow_packet_id":1,"flow_first_seen":1120470033172,"flow_last_seen":1120470033172,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","l4_proto":240}
0439{"flow_id":78,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470033,"pkt_len":86,"pkt":"ADBUADRWAODtAXO9CABFAABIamkAAIDwTOjAqAECwKgBAQq6ADUANMsPhMQBAAABAAAAAAAABF9zaXAEX3VkcAR2b2lwB2JydWp18mEDbmV0AAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":218,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":79,"flow_packet_id":1,"flow_first_seen":1120470035175,"flow_last_seen":1120470035175,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":2746,"dst_port":53,"l4_proto":"udp"}
0439{"flow_id":79,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":218,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470035,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIamoAAIARTOfAqAEiwKgBAQq6ADUANMsPhMQBAAABAAAAiwAABF9zaXAEX3VkcAQlcwBwB2JyVmp1bGEDbmV0AAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0439{"flow_id":77,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":219,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470037,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIamsAAIARTObAqAECwKgBAQq6ADUANMsPhMQBAAABAAAAAAAABF9zaXAEX3VkcAR2b2lwB2JydWp1bGEDbmV0AAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0439{"flow_id":77,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":220,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470041,"pkt_len":86,"pkt":"ADBUADRWAKDtAW69CABFAABIamwAAIARTOXAqAECwKgBAQq6ADUANMsPhMQBAAABAAAAAAAABF9zaXAEX3VkcAR2b2lwB2JydWp1bGEDbmV0AAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":221,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":80,"flow_packet_id":1,"flow_first_seen":1120470049185,"flow_last_seen":1120470049185,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"67.168.1.1","src_port":2747,"dst_port":53,"l4_proto":"udp"}
0435{"flow_id":80,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":221,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470049,"pkt_len":82,"pkt":"ADBUAEFWAODtAW69CABFAABEam0AAIARTOjAqAECQ6gBAQq7ADUAMDM+8cUAAAABAAAAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
0660{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":221,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":80,"flow_packet_id":1,"flow_first_seen":1120470049185,"flow_last_seen":1120470049185,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"67.168.1.1","src_port":2747,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":222,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":81,"flow_packet_id":1,"flow_first_seen":1120470049187,"flow_last_seen":1120470049187,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2747,"l4_proto":"udp"}
0465{"flow_id":81,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":222,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470049,"pkt_len":105,"pkt":"AODtJXMAADBUAG9WCABFAABbAABAAEARnD7AqAEBwKgBAgA1CrsARxW68cWAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
0661{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":222,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":81,"flow_packet_id":1,"flow_first_seen":1120470049187,"flow_last_seen":1120470049187,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2747,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":0,"rsp_type":12,"rsp_addr":"0.0.0.0"}}
0480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":223,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":82,"flow_packet_id":1,"flow_first_seen":1120470049188,"flow_last_seen":1120470049188,"flow_tot_l4_data_len":830,"flow_min_l4_data_len":830,"flow_max_l4_data_len":830,"flow_avg_l4_data_len":830,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"200.68.120.81","src_port":5060,"dst_port":4932,"l4_proto":"udp"}
1477{"flow_id":82,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":223,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470049,"pkt_len":864,"pkt":"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","pkt_caplen":864,"pkt_type":2048,"pkt_ipoffset":14}
0527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":223,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":82,"flow_packet_id":1,"flow_first_seen":1120470049188,"flow_last_seen":1120470049188,"flow_tot_l4_data_len":830,"flow_min_l4_data_len":830,"flow_max_l4_data_len":830,"flow_avg_l4_data_len":830,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"200.68.120.81","src_port":5060,"dst_port":4932,"l4_proto":"udp","ndpi": {"proto":"SIP","category":"VoIP"}}
0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":83,"flow_packet_id":1,"flow_first_seen":1120470049190,"flow_last_seen":1120470049190,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2748,"dst_port":53,"l4_proto":"udp"}
0440{"flow_id":83,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470049,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIam8AAIARTOLAqAECwKgBAQq8ADUANCxC\/cYBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0665{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":83,"flow_packet_id":1,"flow_first_seen":1120470049190,"flow_last_seen":1120470049190,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2748,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":225,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":84,"flow_packet_id":1,"flow_first_seen":1120470049696,"flow_last_seen":1120470049696,"flow_tot_l4_data_len":830,"flow_min_l4_data_len":830,"flow_max_l4_data_len":830,"flow_avg_l4_data_len":830,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"200.68.120.81","src_port":5060,"dst_port":5060,"l4_proto":"udp"}
1477{"flow_id":84,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":225,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470049,"pkt_len":864,"pkt":"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","pkt_caplen":864,"pkt_type":2048,"pkt_ipoffset":14}
0440{"flow_id":83,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":226,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470050,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIanEAAFgRTODAqAECwKgBAQq8ADUANCxC\/cYBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAB0AAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0675{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":226,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":83,"flow_packet_id":2,"flow_first_seen":1120470049190,"flow_last_seen":1120470050187,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2748,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":116,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
1477{"flow_id":84,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":227,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470050,"pkt_len":864,"pkt":"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","pkt_caplen":864,"pkt_type":2048,"pkt_ipoffset":14}
0528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":227,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":84,"flow_packet_id":2,"flow_first_seen":1120470049696,"flow_last_seen":1120470050699,"flow_tot_l4_data_len":1660,"flow_min_l4_data_len":830,"flow_max_l4_data_len":830,"flow_avg_l4_data_len":830,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"200.68.120.81","src_port":5060,"dst_port":5060,"l4_proto":"udp","ndpi": {"proto":"SIP","category":"VoIP"}}
1177{"flow_id":84,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":228,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470051,"pkt_len":637,"pkt":"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","pkt_caplen":637,"pkt_type":2048,"pkt_ipoffset":14}
0440{"flow_id":83,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":229,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470052,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIanMAAIARTN7AqAECwKgBAQq8ADUANCxC\/cYBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0674{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":229,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":83,"flow_packet_id":3,"flow_first_seen":1120470049190,"flow_last_seen":1120470052189,"flow_tot_l4_data_len":156,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2748,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0440{"flow_id":83,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":232,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470054,"pkt_len":86,"pkt":"ADBUADRWADbtAW69CABFAABIanQAAIARRzjAqAECwKgBAQq8ADUANCzl\/cYBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0440{"flow_id":83,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":233,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470058,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIanUAAIARTNzAqAECwKgBAQq8ADUANAxC\/cYBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5Aqqqqqqqqqo=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0676{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":233,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":83,"flow_packet_id":5,"flow_first_seen":1120470049190,"flow_last_seen":1120470058198,"flow_tot_l4_data_len":260,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2748,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":236,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":85,"flow_packet_id":1,"flow_first_seen":1120470066200,"flow_last_seen":1120470066200,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2749,"dst_port":53,"l4_proto":"udp"}
0435{"flow_id":85,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":236,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470066,"pkt_len":82,"pkt":"ADBUADRWAODtMm69CABFAABEangAAIARTN3AqAECwKgBAQq9ADUAMAo6GsgAAAABAFmqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqg==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
0465{"flow_id":52,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":237,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470066,"pkt_len":105,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1Cq0AR+y1GsiAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
0334{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":238,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470066,"pkt_len":47,"pkt":"ADBUADRWAODtAW69KABFAAAhankAAIARGJPAqAEC1PIhIxPEE8QADcBLICAgICA=","pkt_caplen":47,"pkt_type":10240,"pkt_ipoffset":14}
0189{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":238,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","type":10240}
0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":239,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":86,"flow_packet_id":1,"flow_first_seen":1120470066293,"flow_last_seen":1120470066293,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2750,"dst_port":53,"l4_proto":"udp"}
0439{"flow_id":86,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":239,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470066,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIanoAAIARTNfAqAECwKgBAQq+ADUANBAIP8gBAAABAAAAAAAABF9zaXAEX3VkcAR2b2lwB2JydWp1bGEDbmV0AAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0665{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":239,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":86,"flow_packet_id":1,"flow_first_seen":1120470066293,"flow_last_seen":1120470066293,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2750,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.voip.brujula.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0439{"flow_id":86,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":241,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470067,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIanwAAIARTNXAqAECwKgBAQq+ADUANBAIP8gBAAABAAAAAAAABF9zaXAEX3VkcAR2b2lwB2JydWp1bGEDbmV0AAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":242,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":87,"flow_packet_id":1,"flow_first_seen":1120470069294,"flow_last_seen":1120470069294,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":10942,"dst_port":53,"l4_proto":"udp"}
0439{"flow_id":87,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":242,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470069,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIan0AAIARTNTAqAECwKgBASq+ADUANBAIP8gBAAABAAAAAAAABF9zaXAEX3VkcAR2b2lwB2JydWp1bGEDbmV0AAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0666{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":242,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":87,"flow_packet_id":1,"flow_first_seen":1120470069294,"flow_last_seen":1120470069294,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":10942,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.voip.brujula.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0439{"flow_id":86,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":243,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470071,"pkt_len":86,"pkt":"ADBUADREAODtAW69CABFAABIan4AAIAR7NPAqAECwKgBAQq+ADUANBBXP8gBqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0713{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":243,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":86,"flow_packet_id":3,"flow_first_seen":1120470066293,"flow_last_seen":1120470071297,"flow_tot_l4_data_len":156,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2750,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.voip.brujula.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0439{"flow_id":86,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":244,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470075,"pkt_len":86,"pkt":"ADBUADZWAFjtAW69CABFAABIan8AAIARTNLAqAECwKgBAQq+ADUANBAIP8gBBAABAAAAAAAABF9zaXAEX3VkcAR2byVzAGJydWp1bGEDbmV0AAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0704{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":244,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":86,"flow_packet_id":4,"flow_first_seen":1120470066293,"flow_last_seen":1120470075303,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2750,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.vo_s","num_queries":0,"num_answers":0,"reply_code":0,"query_type":25202,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":245,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":88,"flow_packet_id":1,"flow_first_seen":1120470083305,"flow_last_seen":1120470083305,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.18","dst_ip":"192.168.1.1","src_port":2751,"dst_port":53,"l4_proto":"udp"}
0436{"flow_id":88,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":245,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470083,"pkt_len":82,"pkt":"ADBUADRWAODtAW69CABFAABEaoAAAIARTNXAqAESwKgBAQq\/ADUAMAo2GsoAAAABAKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqg==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":89,"flow_packet_id":1,"flow_first_seen":1120470083306,"flow_last_seen":1120470083306,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2751,"l4_proto":"udp"}
0465{"flow_id":89,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470083,"pkt_len":105,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARt8vAqAEBwKgBAgA1Cr8AR+yxGsqAAAABAAEAAAAAATEBMCVzADEyNwdpbi1hZGRyBGFycGEAAAwAARoMAAwAAQAAJxAACwlsb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
0666{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":89,"flow_packet_id":1,"flow_first_seen":1120470083306,"flow_last_seen":1120470083306,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2751,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":1,"num_answers":1,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0881{"flow_id":84,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":247,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470083,"pkt_len":417,"pkt":"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","pkt_caplen":417,"pkt_type":2048,"pkt_ipoffset":14}
0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":248,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":90,"flow_packet_id":1,"flow_first_seen":1120470083310,"flow_last_seen":1120470083310,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2752,"dst_port":53,"l4_proto":"udp"}
0440{"flow_id":90,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":248,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470083,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIaoIAAIARTM\/AqAECwKgBAQrAADUANLk4cMwBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0665{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":248,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":90,"flow_packet_id":1,"flow_first_seen":1120470083310,"flow_last_seen":1120470083310,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2752,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0881{"flow_id":84,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":249,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470083,"pkt_len":417,"pkt":"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","pkt_caplen":417,"pkt_type":2048,"pkt_ipoffset":14}
0439{"flow_id":90,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":250,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470084,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIaoQAAIARTM3AqAECwKgBAQrAADUANLk4cMwBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":251,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":91,"flow_packet_id":1,"flow_first_seen":1120470084827,"flow_last_seen":1120470084827,"flow_tot_l4_data_len":383,"flow_min_l4_data_len":383,"flow_max_l4_data_len":383,"flow_avg_l4_data_len":383,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"200.68.37.115","src_port":4292,"dst_port":5060,"l4_proto":"udp"}
0881{"flow_id":91,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":251,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470084,"pkt_len":417,"pkt":"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","pkt_caplen":417,"pkt_type":2048,"pkt_ipoffset":14}
0527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":251,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":91,"flow_packet_id":1,"flow_first_seen":1120470084827,"flow_last_seen":1120470084827,"flow_tot_l4_data_len":383,"flow_min_l4_data_len":383,"flow_max_l4_data_len":383,"flow_avg_l4_data_len":383,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"200.68.37.115","src_port":4292,"dst_port":5060,"l4_proto":"udp","ndpi": {"proto":"SIP","category":"VoIP"}}
1201{"flow_id":84,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":252,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470085,"pkt_len":656,"pkt":"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","pkt_caplen":656,"pkt_type":2048,"pkt_ipoffset":14}
0481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":92,"flow_packet_id":1,"flow_first_seen":1120470085969,"flow_last_seen":1120470085969,"flow_tot_l4_data_len":273,"flow_min_l4_data_len":273,"flow_max_l4_data_len":273,"flow_avg_l4_data_len":273,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"200.68.120.81","src_port":4901,"dst_port":29440,"l4_proto":"udp"}
0846{"flow_id":92,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470085,"pkt_len":389,"pkt":"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","pkt_caplen":389,"pkt_type":2048,"pkt_ipoffset":14}
0528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":92,"flow_packet_id":1,"flow_first_seen":1120470085969,"flow_last_seen":1120470085969,"flow_tot_l4_data_len":273,"flow_min_l4_data_len":273,"flow_max_l4_data_len":273,"flow_avg_l4_data_len":273,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"200.68.120.81","src_port":4901,"dst_port":29440,"l4_proto":"udp","ndpi": {"proto":"SIP","category":"VoIP"}}
0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":254,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":93,"flow_packet_id":1,"flow_first_seen":1120470086308,"flow_last_seen":1120470086308,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"102.168.1.1","src_port":2752,"dst_port":53,"l4_proto":"udp"}
0439{"flow_id":93,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":254,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470086,"pkt_len":86,"pkt":"ADBUADRmAODtAW69CABFAABIaocAAIARTMrAqAECZqgBAQrAADUANLk4cMwBAAABAACqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0881{"flow_id":84,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":255,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470086,"pkt_len":417,"pkt":"ADBUADRWAODtAW69CABFAAGTaogAAIARzJHAqAECyER4URPEE8QBf5mcQ0FOQ0VMIHNpqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq","pkt_caplen":417,"pkt_type":2048,"pkt_ipoffset":14}
0439{"flow_id":90,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":256,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470088,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIaokAAIARTMjAqAECwKgBAQrAADUANLk4cMwhAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0882{"flow_id":84,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":257,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470090,"pkt_len":417,"pkt":"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","pkt_caplen":417,"pkt_type":2048,"pkt_ipoffset":14}
0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":258,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":94,"flow_packet_id":1,"flow_first_seen":1120470092317,"flow_last_seen":1120470092317,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.98.1.2","dst_ip":"25.168.1.1","src_port":2752,"dst_port":53,"l4_proto":"udp"}
0439{"flow_id":94,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":258,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470092,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIaosAAIARTMbAYgECGagBAQrAADUANLk4cMwBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0663{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":258,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":94,"flow_packet_id":1,"flow_first_seen":1120470092317,"flow_last_seen":1120470092317,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.98.1.2","dst_ip":"25.168.1.1","src_port":2752,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0881{"flow_id":84,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":259,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470094,"pkt_len":417,"pkt":"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","pkt_caplen":417,"pkt_type":2048,"pkt_ipoffset":14}
0480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":260,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":95,"flow_packet_id":1,"flow_first_seen":1120470098867,"flow_last_seen":1120470098867,"flow_tot_l4_data_len":383,"flow_min_l4_data_len":383,"flow_max_l4_data_len":383,"flow_avg_l4_data_len":383,"midstream":0,"l3_proto":"ip4","src_ip":"192.169.1.2","dst_ip":"200.68.120.81","src_port":5060,"dst_port":5060,"l4_proto":"udp"}
0881{"flow_id":95,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":260,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470098,"pkt_len":417,"pkt":"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","pkt_caplen":417,"pkt_type":2048,"pkt_ipoffset":14}
0527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":260,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":95,"flow_packet_id":1,"flow_first_seen":1120470098867,"flow_last_seen":1120470098867,"flow_tot_l4_data_len":383,"flow_min_l4_data_len":383,"flow_max_l4_data_len":383,"flow_avg_l4_data_len":383,"midstream":0,"l3_proto":"ip4","src_ip":"192.169.1.2","dst_ip":"200.68.120.81","src_port":5060,"dst_port":5060,"l4_proto":"udp","ndpi": {"proto":"SIP","category":"VoIP"}}
0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":96,"flow_packet_id":1,"flow_first_seen":1120470100319,"flow_last_seen":1120470100319,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2753,"dst_port":53,"l4_proto":"udp"}
0435{"flow_id":96,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470100,"pkt_len":82,"pkt":"ADBUADRWAODtAW69CABFAABEao4AAIARTMfAqAECwKgBAQrBADUAMNwvSM4AAAABAAAAAAAAATEBMAEwAzEyNwdUbi1hZGRyBGFycGEAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
0661{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":96,"flow_packet_id":1,"flow_first_seen":1120470100319,"flow_last_seen":1120470100319,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2753,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.tn-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0465{"flow_id":96,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":262,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470100,"pkt_len":105,"pkt":"AODt9W69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1CsEAR76rSM6AAAABAAEAAAAAATEBMAEwAzUyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhdGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
0671{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":262,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":96,"flow_packet_id":2,"flow_first_seen":1120470100319,"flow_last_seen":1120470100321,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2753,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.527.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":12,"rsp_type":12,"rsp_addr":"0.0.0.0"}}
0479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":264,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":97,"flow_packet_id":1,"flow_first_seen":1120470102883,"flow_last_seen":1120470102883,"flow_tot_l4_data_len":383,"flow_min_l4_data_len":383,"flow_max_l4_data_len":383,"flow_avg_l4_data_len":383,"midstream":0,"l3_proto":"ip4","src_ip":"192.86.1.2","dst_ip":"200.68.120.99","src_port":5060,"dst_port":5060,"l4_proto":"udp"}
0881{"flow_id":97,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":264,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470102,"pkt_len":417,"pkt":"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","pkt_caplen":417,"pkt_type":2048,"pkt_ipoffset":14}
0882{"flow_id":84,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":265,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470106,"pkt_len":417,"pkt":"ADBUADRWAODtAW69CABFAAGTapEAAIARzIjAqAECyER4URPEE8QBf5mcQ0FOQ0VMIHMmcDo5NzIxOXA4NzA0NEB2qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq","pkt_caplen":417,"pkt_type":2048,"pkt_ipoffset":14}
0882{"flow_id":84,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":266,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470110,"pkt_len":417,"pkt":"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","pkt_caplen":417,"pkt_type":2048,"pkt_ipoffset":14}
0386{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":267,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470112,"pkt_len":86,"pkt":"ADBUAKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":86,"pkt_type":43690,"pkt_ipoffset":14}
0189{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":267,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","type":43690}
0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":269,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":98,"flow_packet_id":1,"flow_first_seen":1120470113337,"flow_last_seen":1120470113337,"flow_tot_l4_data_len":17,"flow_min_l4_data_len":17,"flow_max_l4_data_len":17,"flow_avg_l4_data_len":17,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2754,"dst_port":53,"l4_proto":"udp"}
0439{"flow_id":98,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":269,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470113,"pkt_len":86,"pkt":"ADBUADRWAODtA269CABFAAAlcwAAAIARTLzAqAECwKgBAQrCADUAPKwzfc8BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0446{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":272,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":99,"flow_packet_id":1,"flow_first_seen":1120470114910,"flow_last_seen":1120470114910,"flow_tot_l4_data_len":383,"flow_min_l4_data_len":383,"flow_max_l4_data_len":383,"flow_avg_l4_data_len":383,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"200.68.120.81","l4_proto":118}
0881{"flow_id":99,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":272,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470114,"pkt_len":417,"pkt":"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","pkt_caplen":417,"pkt_type":2048,"pkt_ipoffset":14}
0439{"flow_id":98,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":273,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470115,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIapkAAIARTLjAqAECwKgBAQrCADUANKwzfc8BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaVd5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0665{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":273,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":98,"flow_packet_id":2,"flow_first_seen":1120470113337,"flow_last_seen":1120470115340,"flow_tot_l4_data_len":69,"flow_min_l4_data_len":17,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2754,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cyberciwy.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
1194{"flow_id":84,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":274,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470116,"pkt_len":651,"pkt":"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","pkt_caplen":651,"pkt_type":2048,"pkt_ipoffset":14}
0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":275,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":100,"flow_packet_id":1,"flow_first_seen":1120470117343,"flow_last_seen":1120470117343,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"14.168.1.2","dst_ip":"192.168.1.1","src_port":2754,"dst_port":53,"l4_proto":"udp"}
0440{"flow_id":100,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":275,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470117,"pkt_len":86,"pkt":"ADBUADRWAOBJAW69CABFAABIapoAAIARTLcOqAECwKgBAQrCADUANKwzfc8BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0665{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":275,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":100,"flow_packet_id":1,"flow_first_seen":1120470117343,"flow_last_seen":1120470117343,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"14.168.1.2","dst_ip":"192.168.1.1","src_port":2754,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0439{"flow_id":98,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":278,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470121,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIapsAAIARTLbAqAECwKgBAQrCADUANKwzfc8BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":279,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":101,"flow_packet_id":1,"flow_first_seen":1120470129591,"flow_last_seen":1120470129591,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2755,"dst_port":53,"l4_proto":"udp"}
0436{"flow_id":101,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":279,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470129,"pkt_len":82,"pkt":"ADBUADRWAODtAW69CABFAABEapwAAIARTLnAqAECwKgBAQrDADUAMM8LVfAAAAABAAAAAAAAATEBMN0wAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
0668{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":279,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":101,"flow_packet_id":1,"flow_first_seen":1120470129591,"flow_last_seen":1120470129591,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2755,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0466{"flow_id":101,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":280,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470129,"pkt_len":105,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1CsMAR7GHVfCAAAABACVzAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
0711{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":280,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":101,"flow_packet_id":2,"flow_first_seen":1120470129591,"flow_last_seen":1120470129593,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2755,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":1,"num_answers":37,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":282,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":102,"flow_packet_id":1,"flow_first_seen":1120470141614,"flow_last_seen":1120470141614,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2756,"dst_port":53,"l4_proto":"udp"}
0441{"flow_id":102,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":282,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470141,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIaqIAAIARTK\/AqAECwKgBAQrEADUANAAlcwABAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrACVzAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0668{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":282,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":102,"flow_packet_id":1,"flow_first_seen":1120470141614,"flow_last_seen":1120470141614,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2756,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":9587,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0441{"flow_id":102,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":283,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470142,"pkt_len":86,"pkt":"ADBVADRWAODtAW69CABFAABIaqMAAIARTK7AqAECwKgBAQrEADUANAARKfABVwABAAAAAAAABF\/zaXAEX3VkcANzaXAJY3liZXJjaXSSAmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0675{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":283,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":102,"flow_packet_id":2,"flow_first_seen":1120470141614,"flow_last_seen":1120470142609,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2756,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"__ip._udp.sip.cybercit_.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0440{"flow_id":102,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470144,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIaqQAAIARTK3AqAECwKgBAQrEADUANAARKfABAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0440{"flow_id":102,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":285,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470146,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIaqUAAIARTKzAqAECwKgBAQrEADUANAARKfABAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0440{"flow_id":102,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":286,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470150,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIaqYAAIARTKvAqAECwKgBAQrEADUANAARKfABAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":287,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1120469552651,"flow_last_seen":1120469552651,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.37.115.0","src_port":2712,"dst_port":53,"l4_proto":"udp"}
0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":287,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1120469542336,"flow_last_seen":1120469542336,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"217.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","category":"System"}}
0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":287,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1120469542336,"flow_last_seen":1120469542336,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"217.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":287,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1120469554824,"flow_last_seen":1120469554824,"flow_tot_l4_data_len":110,"flow_min_l4_data_len":110,"flow_max_l4_data_len":110,"flow_avg_l4_data_len":110,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"192.168.1.2","src_port":53,"dst_port":2712,"l4_proto":"udp"}
0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":287,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1120469551656,"flow_last_seen":1120469551656,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2712,"dst_port":53,"l4_proto":"udp"}
0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":287,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1120469556827,"flow_last_seen":1120469556827,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.110","dst_ip":"192.168.1.1","src_port":2713,"dst_port":53,"l4_proto":"udp"}
0511{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":287,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1120469554654,"flow_last_seen":1120469554654,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2712,"dst_port":49973,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":287,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1120469554654,"flow_last_seen":1120469554654,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2712,"dst_port":49973,"l4_proto":"udp"}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":287,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":103,"flow_packet_id":1,"flow_first_seen":1120470158623,"flow_last_seen":1120470158623,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2757,"dst_port":53,"l4_proto":"udp"}
0437{"flow_id":103,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":287,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470158,"pkt_len":82,"pkt":"ADBUADRWAODtAW69CABFAABEaqcAAIARTK7AqAECwKgBAQrFADUAMEUJ3\/AAAAABAAAAAAAAATEBdgEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
0662{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":287,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":103,"flow_packet_id":1,"flow_first_seen":1120470158623,"flow_last_seen":1120470158623,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2757,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.v.0.127.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0467{"flow_id":103,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":288,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470158,"pkt_len":105,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1CsUARyeF3\/CAAAABAAEAAAAAAXMBMAElcwAyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
0677{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":288,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":103,"flow_packet_id":2,"flow_first_seen":1120470158623,"flow_last_seen":1120470158625,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2757,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":1,"num_answers":1,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":293,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":6,"flow_packet_id":2,"flow_first_seen":1120469555830,"flow_last_seen":1120469564839,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2713,"dst_port":53,"l4_proto":"udp"}
0511{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":293,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1120469560833,"flow_last_seen":1120469560833,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2597,"dst_port":29440,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":293,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1120469560833,"flow_last_seen":1120469560833,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2597,"dst_port":29440,"l4_proto":"udp"}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":293,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":104,"flow_packet_id":1,"flow_first_seen":1120470170646,"flow_last_seen":1120470170646,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2640,"dst_port":53,"l4_proto":"udp"}
0441{"flow_id":104,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":293,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470170,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIaqwAAIARTKXAqAECwKgBAQpQADUANOIMR\/IBAAABAAAAAAAABKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0667{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":293,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":104,"flow_packet_id":1,"flow_first_seen":1120470170646,"flow_last_seen":1120470170646,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2640,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":294,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":105,"flow_packet_id":1,"flow_first_seen":1120470171641,"flow_last_seen":1120470171641,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2785,"dst_port":53,"l4_proto":"udp"}
0441{"flow_id":105,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":294,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470171,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIaq0AAIARTKTAqAECwKgBAQrhADUANOIMR\/IBAAABAAAAAAAABF9zaXAEX3RkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0666{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":294,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":105,"flow_packet_id":1,"flow_first_seen":1120470171641,"flow_last_seen":1120470171641,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2785,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._tdp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":295,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":106,"flow_packet_id":1,"flow_first_seen":1120470173644,"flow_last_seen":1120470173644,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.37.115","dst_ip":"128.168.1.1","src_port":2758,"dst_port":53,"l4_proto":"udp"}
0441{"flow_id":106,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":295,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470173,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIaq4AAIARTKPAqCVzgKgBAQrGADUANOIMR\/IBABwBAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":296,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":107,"flow_packet_id":1,"flow_first_seen":1120470175647,"flow_last_seen":1120470175647,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2758,"dst_port":53,"l4_proto":"udp"}
0441{"flow_id":107,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":296,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470175,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIaq8AAIARTKLAqAECwKgBAQrGADUANOIMR\/IBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAIhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0667{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":296,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":107,"flow_packet_id":1,"flow_first_seen":1120470175647,"flow_last_seen":1120470175647,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2758,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":545,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0441{"flow_id":107,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":297,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470179,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIarAAAIARTKHAqAECwKgBAQrGADUANOIMR\/IBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJZ3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0675{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":297,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":107,"flow_packet_id":2,"flow_first_seen":1120470175647,"flow_last_seen":1120470179653,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2758,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.gybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0482{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":298,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1120469572844,"flow_last_seen":1120469572844,"flow_tot_l4_data_len":475,"flow_min_l4_data_len":475,"flow_max_l4_data_len":475,"flow_avg_l4_data_len":475,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.52","dst_ip":"212.242.33.35","src_port":5060,"dst_port":5060,"l4_proto":"udp"}
0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":298,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":9,"flow_packet_id":2,"flow_first_seen":1120469572841,"flow_last_seen":1120469572842,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2714,"dst_port":53,"l4_proto":"udp"}
0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":298,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":12,"flow_packet_id":3,"flow_first_seen":1120469573246,"flow_last_seen":1120469578248,"flow_tot_l4_data_len":156,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2715,"dst_port":53,"l4_proto":"udp"}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":298,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":108,"flow_packet_id":1,"flow_first_seen":1120470187655,"flow_last_seen":1120470187655,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2759,"dst_port":53,"l4_proto":"udp"}
0436{"flow_id":108,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":298,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470187,"pkt_len":82,"pkt":"ADBUADRWAODtAW69CABFAABEarEAAIARTKTAqAECwKgBAQrHADUAMPwEKPMAAAABAAAAAAAAATEBMAEwAzEyNwdzbi1hZGRyBGFycGEAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
0662{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":298,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":108,"flow_packet_id":1,"flow_first_seen":1120470187655,"flow_last_seen":1120470187655,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2759,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.sn-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0440{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":109,"flow_packet_id":1,"flow_first_seen":1120470187656,"flow_last_seen":1120470187656,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","l4_proto":37}
0466{"flow_id":109,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470187,"pkt_len":105,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEAlcwDAqAEBwKgBAgA1CscAR96AKPOAAAABAAEAAAAAATFCMAEwAzEyNwdpbq1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
0479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":303,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":16,"flow_packet_id":1,"flow_first_seen":1120469595096,"flow_last_seen":1120469595096,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.251","src_port":138,"dst_port":138,"l4_proto":"udp"}
0481{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":303,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":15,"flow_packet_id":1,"flow_first_seen":1120469590405,"flow_last_seen":1120469590405,"flow_tot_l4_data_len":314,"flow_min_l4_data_len":314,"flow_max_l4_data_len":314,"flow_avg_l4_data_len":314,"midstream":0,"l3_proto":"ip4","src_ip":"208.242.33.35","dst_ip":"192.168.1.2","src_port":5060,"dst_port":5060,"l4_proto":"udp"}
0510{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":303,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":14,"flow_packet_id":1,"flow_first_seen":1120469590257,"flow_last_seen":1120469590257,"flow_tot_l4_data_len":65,"flow_min_l4_data_len":65,"flow_max_l4_data_len":65,"flow_avg_l4_data_len":65,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":9587,"dst_port":156,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":303,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":14,"flow_packet_id":1,"flow_first_seen":1120469590257,"flow_last_seen":1120469590257,"flow_tot_l4_data_len":65,"flow_min_l4_data_len":65,"flow_max_l4_data_len":65,"flow_avg_l4_data_len":65,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":9587,"dst_port":156,"l4_proto":"udp"}
0385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":303,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470199,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABBAABIarMAAIARTJ7xqAECwKgBAQrIADUANHAIufQBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0203{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":303,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":52}
0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":304,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":110,"flow_packet_id":1,"flow_first_seen":1120470200673,"flow_last_seen":1120470200673,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.22.1.2","dst_ip":"192.168.1.1","src_port":2760,"dst_port":53,"l4_proto":"udp"}
0440{"flow_id":110,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":304,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470200,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIaqsAAIARTJ3AFgECwKgBAQrIADUANHAIufQBALQBAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":305,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":111,"flow_packet_id":1,"flow_first_seen":1120470202676,"flow_last_seen":1120470202676,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2760,"dst_port":53,"l4_proto":"udp"}
0440{"flow_id":111,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":305,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470202,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIarUAAIARTJzAqAECwKgBAQrIADUANHAIufQBAAABAAAAAAAABF9zaXAEZXVkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0666{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":305,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":111,"flow_packet_id":1,"flow_first_seen":1120470202676,"flow_last_seen":1120470202676,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2760,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip.eudp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0386{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":306,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470204,"pkt_len":86,"pkt":"ADBUADRWAODtAW69uwBFAABIarYAAIARTJvAqAECwKgBAQrIADUANHAIufQBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":47872,"pkt_ipoffset":14}
0189{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":306,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","type":47872}
0400{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":307,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470207,"pkt_len":92,"pkt":"\/zT\/\/\/\/\/AODVAW69CABFAFJOarcAAIARkZbAqAECwKgB\/wCJAIkAOlt+hR0BEAABAAAAAABFIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ0FDQUJNAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
0203{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":307,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":58}
0402{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":308,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470208,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AODtAW69JXMAAABOargAAIARS5XAqAECwKgB\/wCJAIkAOlt+hZ0BEAABAAAAAAAAIEVGRURFSkZQRUVFUEVOREJFSkVPQ0FDQUNBQ0GQQUJNAAAgAAE=","pkt_caplen":92,"pkt_type":9587,"pkt_ipoffset":14}
0188{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":308,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","type":9587}
0440{"flow_id":111,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":309,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470208,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIarkAAIARTJjAqAECwKgBAQrIADUANHAIufQBAAABAAAAADYABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0527{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":311,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":18,"flow_packet_id":2,"flow_first_seen":1120469611651,"flow_last_seen":1120469614570,"flow_tot_l4_data_len":56,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"147.137.21.94","src_port":2718,"dst_port":139,"l4_proto":"tcp","ndpi": {"proto":"NetBIOS","category":"System"}}
0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":311,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":18,"flow_packet_id":2,"flow_first_seen":1120469611651,"flow_last_seen":1120469614570,"flow_tot_l4_data_len":56,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"147.137.21.94","src_port":2718,"dst_port":139,"l4_proto":"tcp"}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":311,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":112,"flow_packet_id":1,"flow_first_seen":1120470216686,"flow_last_seen":1120470216686,"flow_tot_l4_data_len":17,"flow_min_l4_data_len":17,"flow_max_l4_data_len":17,"flow_avg_l4_data_len":17,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2761,"dst_port":53,"l4_proto":"udp"}
0438{"flow_id":112,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":311,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470216,"pkt_len":82,"pkt":"ADBUADRWAODtAW69CABFAAAlcwAAAIARTJrAqAECwKgBAQrJADUAMPj\/K\/YAAAABAAAAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
0467{"flow_id":112,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":312,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470216,"pkt_len":105,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1CskAR9t7K\/aAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
0662{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":312,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":112,"flow_packet_id":2,"flow_first_seen":1120470216686,"flow_last_seen":1120470216688,"flow_tot_l4_data_len":88,"flow_min_l4_data_len":17,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2761,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":0,"rsp_type":12,"rsp_addr":"0.0.0.0"}}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":314,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":113,"flow_packet_id":1,"flow_first_seen":1120470216783,"flow_last_seen":1120470216783,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2762,"dst_port":53,"l4_proto":"udp"}
0440{"flow_id":113,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":314,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470216,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIar0AAIARTJTAqAECwKgBAQrKADUANKsCfvgBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0666{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":314,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":113,"flow_packet_id":1,"flow_first_seen":1120470216783,"flow_last_seen":1120470216783,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2762,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0440{"flow_id":113,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":315,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470217,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIar4AAIARTJPAqAECwKgBAQrKADUANKsCfvgBAABXAAAAAAAABF9zaXAEX3VkcANzaXAJY3m9ZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0714{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":315,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":113,"flow_packet_id":2,"flow_first_seen":1120470216783,"flow_last_seen":1120470217778,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2762,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0440{"flow_id":113,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":316,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470219,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIar8AAIARTJLAqAECwKgBAQrKADUANKsCfvgBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AnNrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0386{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":317,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470221,"pkt_len":86,"pkt":"ADBUADRWAODtAW4lcwBFAABIasAAAIARTJHAqAECwKglcwDKADUANKsCfvgBAAABAAAAAAgABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":29440,"pkt_ipoffset":14}
0189{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":317,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","type":29440}
0385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":318,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470225,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CACbAABIasEEAIARTJDAqAECwKgBAQrKADUANKsCfvgBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0183{"basic_event_id":2,"basic_event_name":"Unknown L3 protocol","thread_id":0,"packet_id":318,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","protocol":2048}
0529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":319,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":19,"flow_packet_id":1,"flow_first_seen":1120469620579,"flow_last_seen":1120469620579,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.71","dst_ip":"147.137.21.122","src_port":2718,"dst_port":139,"l4_proto":"tcp","ndpi": {"proto":"NetBIOS","category":"System"}}
0478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":319,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":19,"flow_packet_id":1,"flow_first_seen":1120469620579,"flow_last_seen":1120469620579,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.71","dst_ip":"147.137.21.122","src_port":2718,"dst_port":139,"l4_proto":"tcp"}
0665{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":319,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":20,"flow_packet_id":1,"flow_first_seen":1120469632829,"flow_last_seen":1120469632829,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.114.1.2","dst_ip":"192.168.1.1","src_port":2719,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":319,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":20,"flow_packet_id":1,"flow_first_seen":1120469632829,"flow_last_seen":1120469632829,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.114.1.2","dst_ip":"192.168.1.1","src_port":2719,"dst_port":53,"l4_proto":"udp"}
0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":319,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":17,"flow_packet_id":3,"flow_first_seen":1120469611651,"flow_last_seen":1120469620579,"flow_tot_l4_data_len":84,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"147.137.21.94","src_port":2717,"dst_port":445,"l4_proto":"tcp","ndpi": {"proto":"SMBv23","category":"System"}}
0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":319,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":17,"flow_packet_id":3,"flow_first_seen":1120469611651,"flow_last_seen":1120469620579,"flow_tot_l4_data_len":84,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"147.137.21.94","src_port":2717,"dst_port":445,"l4_proto":"tcp"}
0383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":319,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470233,"pkt_len":82,"pkt":"ADBUADRWAODtSm4lcwBFAABEasIAAIARTJPAqAECwKgBAQrLADUAMHT6r\/kAAAABAAAAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ==","pkt_caplen":82,"pkt_type":29440,"pkt_ipoffset":14}
0189{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":319,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","type":29440}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":320,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":114,"flow_packet_id":1,"flow_first_seen":1120470233792,"flow_last_seen":1120470233792,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2763,"l4_proto":"udp"}
0467{"flow_id":114,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":320,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470233,"pkt_len":105,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1CssAR1d2r\/mAAAAmcwEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAYAAJxAACwlsb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
0701{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":320,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":114,"flow_packet_id":1,"flow_first_seen":1120470233792,"flow_last_seen":1120470233792,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2763,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":38,"num_answers":1,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
1427{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":321,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470233,"pkt_len":867,"pkt":"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","pkt_caplen":867,"pkt_type":2176,"pkt_ipoffset":14}
0188{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":321,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","type":2176}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":322,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":115,"flow_packet_id":1,"flow_first_seen":1120470233796,"flow_last_seen":1120470233796,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2764,"dst_port":53,"l4_proto":"udp"}
0441{"flow_id":115,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":322,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470233,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIasQAAIARTI3AqAECwKgBAQrMADUANEn93\/sBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0666{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":322,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":115,"flow_packet_id":1,"flow_first_seen":1120470233796,"flow_last_seen":1120470233796,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2764,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
1428{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":323,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470234,"pkt_len":867,"pkt":"ADBUADRWAOCqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq","pkt_caplen":867,"pkt_type":43690,"pkt_ipoffset":14}
0189{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":323,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","type":43690}
0441{"flow_id":115,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":324,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470234,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIasYAAIARTIvAqAECwKgBAQrMADUANEn93\/sBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":328,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":116,"flow_packet_id":1,"flow_first_seen":1120470236795,"flow_last_seen":1120470236795,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"170.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"udp"}
0440{"flow_id":116,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":328,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470236,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIaskAAIARTIjAqAECqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0441{"flow_id":115,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":331,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470238,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIasoAAIARTIfAqAECwKgBAQrMADUANEn93\/sBAAABAAAAAAAABF9zaXAEX3VkcANzDXAJY0liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0440{"flow_id":115,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":332,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470242,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIassAAIARTIbAqAECwKgBAQrMADUANEn9qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0682{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":332,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":115,"flow_packet_id":4,"flow_first_seen":1120470233796,"flow_last_seen":1120470242804,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2764,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":170,"num_answers":254,"reply_code":10,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0604{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":25,"flow_packet_id":1,"flow_first_seen":1120469635042,"flow_last_seen":1120469635042,"flow_tot_l4_data_len":23,"flow_min_l4_data_len":23,"flow_max_l4_data_len":23,"flow_avg_l4_data_len":23,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"192.2.1.2","src_port":21,"dst_port":2720,"l4_proto":"tcp","ndpi": {"proto":"FTP_CONTROL","category":"Download-FileTransfer-FileSharing"},"ftp": {"user":"","password":"","auth_failed":0}}
0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":25,"flow_packet_id":1,"flow_first_seen":1120469635042,"flow_last_seen":1120469635042,"flow_tot_l4_data_len":23,"flow_min_l4_data_len":23,"flow_max_l4_data_len":23,"flow_avg_l4_data_len":23,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"192.2.1.2","src_port":21,"dst_port":2720,"l4_proto":"tcp"}
0605{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":38,"flow_packet_id":1,"flow_first_seen":1120469635179,"flow_last_seen":1120469635179,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"37.115.0.2","dst_ip":"147.234.1.253","src_port":2639,"dst_port":21,"l4_proto":"tcp","ndpi": {"proto":"FTP_CONTROL","category":"Download-FileTransfer-FileSharing"},"ftp": {"user":"","password":"","auth_failed":0}}
0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":38,"flow_packet_id":1,"flow_first_seen":1120469635179,"flow_last_seen":1120469635179,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"37.115.0.2","dst_ip":"147.234.1.253","src_port":2639,"dst_port":21,"l4_proto":"tcp"}
0606{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":34,"flow_packet_id":1,"flow_first_seen":1120469635128,"flow_last_seen":1120469635128,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"147.117.1.253","src_port":2720,"dst_port":21,"l4_proto":"tcp","ndpi": {"proto":"FTP_CONTROL","category":"Download-FileTransfer-FileSharing"},"ftp": {"user":"","password":"","auth_failed":0}}
0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":34,"flow_packet_id":1,"flow_first_seen":1120469635128,"flow_last_seen":1120469635128,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"147.117.1.253","src_port":2720,"dst_port":21,"l4_proto":"tcp"}
0513{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":30,"flow_packet_id":1,"flow_first_seen":1120469635049,"flow_last_seen":1120469635049,"flow_tot_l4_data_len":23,"flow_min_l4_data_len":23,"flow_max_l4_data_len":23,"flow_avg_l4_data_len":23,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"192.168.1.2","src_port":1045,"dst_port":2720,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
0477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":30,"flow_packet_id":1,"flow_first_seen":1120469635049,"flow_last_seen":1120469635049,"flow_tot_l4_data_len":23,"flow_min_l4_data_len":23,"flow_max_l4_data_len":23,"flow_avg_l4_data_len":23,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"192.168.1.2","src_port":1045,"dst_port":2720,"l4_proto":"tcp"}
0519{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":27,"flow_packet_id":1,"flow_first_seen":1120469635045,"flow_last_seen":1120469635045,"flow_tot_l4_data_len":79,"flow_min_l4_data_len":79,"flow_max_l4_data_len":79,"flow_avg_l4_data_len":79,"midstream":0,"l3_proto":"ip4","src_ip":"147.234.1.170","dst_ip":"170.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
0483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":27,"flow_packet_id":1,"flow_first_seen":1120469635045,"flow_last_seen":1120469635045,"flow_tot_l4_data_len":79,"flow_min_l4_data_len":79,"flow_max_l4_data_len":79,"flow_avg_l4_data_len":79,"midstream":0,"l3_proto":"ip4","src_ip":"147.234.1.170","dst_ip":"170.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"tcp"}
0606{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":28,"flow_packet_id":1,"flow_first_seen":1120469635046,"flow_last_seen":1120469635046,"flow_tot_l4_data_len":23,"flow_min_l4_data_len":23,"flow_max_l4_data_len":23,"flow_avg_l4_data_len":23,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"192.168.1.2","src_port":21,"dst_port":2208,"l4_proto":"tcp","ndpi": {"proto":"FTP_CONTROL","category":"Download-FileTransfer-FileSharing"},"ftp": {"user":"","password":"","auth_failed":0}}
0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":28,"flow_packet_id":1,"flow_first_seen":1120469635046,"flow_last_seen":1120469635046,"flow_tot_l4_data_len":23,"flow_min_l4_data_len":23,"flow_max_l4_data_len":23,"flow_avg_l4_data_len":23,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"192.168.1.2","src_port":21,"dst_port":2208,"l4_proto":"tcp"}
0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":21,"flow_packet_id":2,"flow_first_seen":1120469633828,"flow_last_seen":1120469634840,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":41,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":87,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2719,"dst_port":53,"l4_proto":"udp"}
0514{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":37,"flow_packet_id":1,"flow_first_seen":1120469635173,"flow_last_seen":1120469635173,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"192.232.1.2","src_port":58999,"dst_port":2721,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
0478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":37,"flow_packet_id":1,"flow_first_seen":1120469635173,"flow_last_seen":1120469635173,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"192.232.1.2","src_port":58999,"dst_port":2721,"l4_proto":"tcp"}
0513{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":35,"flow_packet_id":1,"flow_first_seen":1120469635152,"flow_last_seen":1120469635152,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"37.115.0.253","dst_ip":"192.168.1.2","src_port":58999,"dst_port":2721,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
0477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":35,"flow_packet_id":1,"flow_first_seen":1120469635152,"flow_last_seen":1120469635152,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"37.115.0.253","dst_ip":"192.168.1.2","src_port":58999,"dst_port":2721,"l4_proto":"tcp"}
0605{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":32,"flow_packet_id":1,"flow_first_seen":1120469635105,"flow_last_seen":1120469635105,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"84.168.1.2","src_port":21,"dst_port":2720,"l4_proto":"tcp","ndpi": {"proto":"FTP_CONTROL","category":"Download-FileTransfer-FileSharing"},"ftp": {"user":"","password":"","auth_failed":0}}
0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":32,"flow_packet_id":1,"flow_first_seen":1120469635105,"flow_last_seen":1120469635105,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"84.168.1.2","src_port":21,"dst_port":2720,"l4_proto":"tcp"}
0611{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":24,"flow_packet_id":1,"flow_first_seen":1120469635012,"flow_last_seen":1120469635012,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"147.234.1.253","src_port":2679,"dst_port":21,"l4_proto":"tcp","ndpi": {"proto":"FTP_CONTROL","category":"Download-FileTransfer-FileSharing"},"ftp": {"user":"","password":"d0xa!","auth_failed":0}}
0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":24,"flow_packet_id":1,"flow_first_seen":1120469635012,"flow_last_seen":1120469635012,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"147.234.1.253","src_port":2679,"dst_port":21,"l4_proto":"tcp"}
0606{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":33,"flow_packet_id":1,"flow_first_seen":1120469635106,"flow_last_seen":1120469635106,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":1,"l3_proto":"ip4","src_ip":"192.112.1.2","dst_ip":"147.234.1.253","src_port":2720,"dst_port":21,"l4_proto":"tcp","ndpi": {"proto":"FTP_CONTROL","category":"Download-FileTransfer-FileSharing"},"ftp": {"user":"","password":"","auth_failed":0}}
0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":33,"flow_packet_id":1,"flow_first_seen":1120469635106,"flow_last_seen":1120469635106,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":1,"l3_proto":"ip4","src_ip":"192.112.1.2","dst_ip":"147.234.1.253","src_port":2720,"dst_port":21,"l4_proto":"tcp"}
0607{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":26,"flow_packet_id":1,"flow_first_seen":1120469635043,"flow_last_seen":1120469635043,"flow_tot_l4_data_len":47,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"192.168.1.66","src_port":21,"dst_port":2720,"l4_proto":"tcp","ndpi": {"proto":"FTP_CONTROL","category":"Download-FileTransfer-FileSharing"},"ftp": {"user":"","password":"","auth_failed":0}}
0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":26,"flow_packet_id":1,"flow_first_seen":1120469635043,"flow_last_seen":1120469635043,"flow_tot_l4_data_len":47,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"192.168.1.66","src_port":21,"dst_port":2720,"l4_proto":"tcp"}
0607{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":31,"flow_packet_id":1,"flow_first_seen":1120469635052,"flow_last_seen":1120469635052,"flow_tot_l4_data_len":61,"flow_min_l4_data_len":61,"flow_max_l4_data_len":61,"flow_avg_l4_data_len":61,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"192.168.65.2","src_port":21,"dst_port":2720,"l4_proto":"tcp","ndpi": {"proto":"FTP_CONTROL","category":"Download-FileTransfer-FileSharing"},"ftp": {"user":"","password":"","auth_failed":0}}
0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":31,"flow_packet_id":1,"flow_first_seen":1120469635052,"flow_last_seen":1120469635052,"flow_tot_l4_data_len":61,"flow_min_l4_data_len":61,"flow_max_l4_data_len":61,"flow_avg_l4_data_len":61,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"192.168.65.2","src_port":21,"dst_port":2720,"l4_proto":"tcp"}
0606{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":29,"flow_packet_id":1,"flow_first_seen":1120469635048,"flow_last_seen":1120469635048,"flow_tot_l4_data_len":79,"flow_min_l4_data_len":79,"flow_max_l4_data_len":79,"flow_avg_l4_data_len":79,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"192.168.1.2","src_port":21,"dst_port":2732,"l4_proto":"tcp","ndpi": {"proto":"FTP_CONTROL","category":"Download-FileTransfer-FileSharing"},"ftp": {"user":"","password":"","auth_failed":0}}
0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":29,"flow_packet_id":1,"flow_first_seen":1120469635048,"flow_last_seen":1120469635048,"flow_tot_l4_data_len":79,"flow_min_l4_data_len":79,"flow_max_l4_data_len":79,"flow_avg_l4_data_len":79,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"192.168.1.2","src_port":21,"dst_port":2732,"l4_proto":"tcp"}
0606{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":23,"flow_packet_id":1,"flow_first_seen":1120469635010,"flow_last_seen":1120469635010,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":96,"flow_max_l4_data_len":96,"flow_avg_l4_data_len":96,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"192.169.1.2","src_port":21,"dst_port":2720,"l4_proto":"tcp","ndpi": {"proto":"FTP_CONTROL","category":"Download-FileTransfer-FileSharing"},"ftp": {"user":"","password":"","auth_failed":0}}
0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":23,"flow_packet_id":1,"flow_first_seen":1120469635010,"flow_last_seen":1120469635010,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":96,"flow_max_l4_data_len":96,"flow_avg_l4_data_len":96,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"192.169.1.2","src_port":21,"dst_port":2720,"l4_proto":"tcp"}
0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":117,"flow_packet_id":1,"flow_first_seen":1120470250805,"flow_last_seen":1120470250805,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.110","dst_ip":"192.168.1.1","src_port":2765,"dst_port":53,"l4_proto":"udp"}
0436{"flow_id":117,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470250,"pkt_len":82,"pkt":"ADAlcwBWAODtAW69CABFAABEaswAAIARTInAqAFuwKgBAQrNADUAMLv0aP0AAAABAAAAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
0664{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":117,"flow_packet_id":1,"flow_first_seen":1120470250805,"flow_last_seen":1120470250805,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.110","dst_ip":"192.168.1.1","src_port":2765,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":334,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":118,"flow_packet_id":1,"flow_first_seen":1120470250807,"flow_last_seen":1120470250807,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2765,"l4_proto":"udp"}
0466{"flow_id":118,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":334,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470250,"pkt_len":105,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1Cs0AR55waP2AAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyhGFycGEAAAwAAcAMAAwAJXMAJxAAawlsb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
0668{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":334,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":118,"flow_packet_id":1,"flow_first_seen":1120470250807,"flow_last_seen":1120470250807,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2765,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":1,"num_answers":1,"reply_code":0,"query_type":0,"rsp_type":12,"rsp_addr":"0.0.0.0"}}
0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":336,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":119,"flow_packet_id":1,"flow_first_seen":1120470250906,"flow_last_seen":1120470250906,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.172","dst_ip":"192.168.1.1","src_port":2766,"dst_port":53,"l4_proto":"udp"}
0441{"flow_id":119,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":336,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470250,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIas4AAIARTIPAqAGswKgBAQrOADUANK35e\/0BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0668{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":336,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":119,"flow_packet_id":1,"flow_first_seen":1120470250906,"flow_last_seen":1120470250906,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.172","dst_ip":"192.168.1.1","src_port":2766,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":337,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":120,"flow_packet_id":1,"flow_first_seen":1120470251907,"flow_last_seen":1120470251907,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2766,"dst_port":53,"l4_proto":"udp"}
0441{"flow_id":120,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":337,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470251,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIassAAIARTILAqAECwKgBAQrOADUANK35e\/0BAAABAAAAJXMABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0441{"flow_id":120,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":338,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470253,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIatAAAIARTIHAqAECwKgBAQrOADUANK35e\/0BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZTBjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0386{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":339,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470255,"pkt_len":86,"pkt":"ADBUAKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":86,"pkt_type":43690,"pkt_ipoffset":14}
0189{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":339,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","type":43690}
0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":343,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":121,"flow_packet_id":1,"flow_first_seen":1120470259918,"flow_last_seen":1120470259918,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":14798,"dst_port":53,"l4_proto":"udp"}
0441{"flow_id":121,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":343,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470259,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIatkAAIQRTHjAqAECwKgBATnOADUANK35e\/0BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhABE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0667{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":343,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":121,"flow_packet_id":1,"flow_first_seen":1120470259918,"flow_last_seen":1120470259918,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":14798,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":344,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":39,"flow_packet_id":1,"flow_first_seen":1120469663172,"flow_last_seen":1120469663172,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.136.1.1","src_port":2722,"dst_port":53,"l4_proto":"udp"}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":344,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":122,"flow_packet_id":1,"flow_first_seen":1120470267920,"flow_last_seen":1120470267920,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2767,"dst_port":53,"l4_proto":"udp"}
0437{"flow_id":122,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":344,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470267,"pkt_len":82,"pkt":"ADBUADRWAODtAW69CABFAABEatoAAIARTHvAqAECwKgBAQrPADUAMGzyt\/0AAAABAAAAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
0662{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":344,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":122,"flow_packet_id":1,"flow_first_seen":1120470267920,"flow_last_seen":1120470267920,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2767,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0466{"flow_id":122,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":345,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470267,"pkt_len":105,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1Cs8AR09ueP2AAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAAC1Bsb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
0672{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":345,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":122,"flow_packet_id":2,"flow_first_seen":1120470267920,"flow_last_seen":1120470267922,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2767,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":12,"rsp_type":12,"rsp_addr":"0.0.0.0"}}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":347,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":123,"flow_packet_id":1,"flow_first_seen":1120470267925,"flow_last_seen":1120470267925,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2768,"dst_port":53,"l4_proto":"udp"}
0440{"flow_id":123,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":347,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470267,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIatwAAIARTHXAqAECwKgBAQrQADUANDb28v4BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0666{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":347,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":123,"flow_packet_id":1,"flow_first_seen":1120470267925,"flow_last_seen":1120470267925,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2768,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":350,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470268,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAGhIat4AAIARTHPAqAECwKgBAQrQADUANDb28v4BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0203{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":350,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":52}
0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":351,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":124,"flow_packet_id":1,"flow_first_seen":1120470270925,"flow_last_seen":1120470270925,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":35536,"dst_port":53,"l4_proto":"udp"}
0440{"flow_id":124,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":351,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470270,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIat8AAIARTHLAqAECwKgBAYrQADUANDb28v4BAAABwwAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":352,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":125,"flow_packet_id":1,"flow_first_seen":1120470272927,"flow_last_seen":1120470272927,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"94.168.1.2","dst_ip":"192.168.1.1","src_port":2768,"dst_port":4,"l4_proto":"udp"}
0440{"flow_id":125,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":352,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470272,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIauAAAIARTHFeqAECwKgBAQrQAAQANDb28v4BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0440{"flow_id":123,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":353,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470276,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIauEAAIARTHDAqAECwKgBAQrQADUANDb28v4BALIBAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0714{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":353,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":123,"flow_packet_id":2,"flow_first_seen":1120470267925,"flow_last_seen":1120470276933,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2768,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0511{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":354,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":42,"flow_packet_id":1,"flow_first_seen":1120469680447,"flow_last_seen":1120469680447,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2724,"dst_port":9587,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":354,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":42,"flow_packet_id":1,"flow_first_seen":1120469680447,"flow_last_seen":1120469680447,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2724,"dst_port":9587,"l4_proto":"udp"}
0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":354,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":40,"flow_packet_id":4,"flow_first_seen":1120469664171,"flow_last_seen":1120469680185,"flow_tot_l4_data_len":204,"flow_min_l4_data_len":48,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":51,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2722,"dst_port":53,"l4_proto":"udp"}
0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":354,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":41,"flow_packet_id":1,"flow_first_seen":1120469680186,"flow_last_seen":1120469680186,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2723,"l4_proto":"udp"}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":354,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":126,"flow_packet_id":1,"flow_first_seen":1120470284935,"flow_last_seen":1120470284935,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2769,"dst_port":53,"l4_proto":"udp"}
0436{"flow_id":126,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":354,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470284,"pkt_len":82,"pkt":"ADBUADRWAODtAW69CABFAABEauIAAIARTHPAqAECwKgBAQrRADUAMPnuKv8AAAABAAAAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
0662{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":354,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":126,"flow_packet_id":1,"flow_first_seen":1120470284935,"flow_last_seen":1120470284935,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2769,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":355,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":127,"flow_packet_id":1,"flow_first_seen":1120470284936,"flow_last_seen":1120470284936,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":117,"dst_port":2769,"l4_proto":"udp"}
0466{"flow_id":127,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":355,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470284,"pkt_len":105,"pkt":"AODtAW4FADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgB1CtEARyVzAP+AAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
0333{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":356,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470284,"pkt_len":47,"pkt":"ADBUADRWAODtAW69CABFAAAhauMAqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":47,"pkt_type":2048,"pkt_ipoffset":14}
0203{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":356,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":13}
0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":357,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":45,"flow_packet_id":1,"flow_first_seen":1120469685452,"flow_last_seen":1120469685452,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.17.1","src_port":2724,"dst_port":53,"l4_proto":"udp"}
0666{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":357,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":43,"flow_packet_id":3,"flow_first_seen":1120469681446,"flow_last_seen":1120469689458,"flow_tot_l4_data_len":156,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2724,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":357,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":43,"flow_packet_id":3,"flow_first_seen":1120469681446,"flow_last_seen":1120469689458,"flow_tot_l4_data_len":156,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2724,"dst_port":53,"l4_proto":"udp"}
0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":357,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":46,"flow_packet_id":2,"flow_first_seen":1120469697460,"flow_last_seen":1120469697462,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2725,"dst_port":53,"l4_proto":"udp"}
0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":357,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":47,"flow_packet_id":1,"flow_first_seen":1120469697468,"flow_last_seen":1120469697468,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.46","dst_ip":"192.168.1.2","src_port":53,"dst_port":2726,"l4_proto":"udp"}
0528{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":357,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":44,"flow_packet_id":1,"flow_first_seen":1120469685131,"flow_last_seen":1120469685131,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":25481,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","category":"System"}}
0477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":357,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":44,"flow_packet_id":1,"flow_first_seen":1120469685131,"flow_last_seen":1120469685131,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":25481,"l4_proto":"udp"}
0386{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":357,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470298,"pkt_len":86,"pkt":"qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":86,"pkt_type":43690,"pkt_ipoffset":14}
0189{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":357,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","type":43690}
0387{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":358,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470299,"pkt_len":86,"pkt":"ADBUADRWAODtAW69JXMAAABIauUAAIARTGzAqFwCwKgBAQrSADUANCnz\/\/8BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":9587,"pkt_ipoffset":14}
0188{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":358,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","type":9587}
0441{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":359,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":128,"flow_packet_id":1,"flow_first_seen":1120470301328,"flow_last_seen":1120470301328,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","l4_proto":127}
0443{"flow_id":128,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":359,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470301,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIauYAAIB\/TGvAqAECwKgBAQrSADUANCnz\/\/8BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJYnliZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":360,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":129,"flow_packet_id":1,"flow_first_seen":1120470303331,"flow_last_seen":1120470303331,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2770,"dst_port":53,"l4_proto":"udp"}
0442{"flow_id":129,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":360,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470303,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFBABIaucAAIARTGrAqAECwKgBAQrSADUANCnz\/\/8BAAABAAAAAACqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0667{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":360,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":129,"flow_packet_id":1,"flow_first_seen":1120470303331,"flow_last_seen":1120470303331,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2770,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0402{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":361,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470303,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAFhOaugAAIARS2XAqAECwKgB\/wCJAIkAOlt2hSUBEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ0FDQUJNAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
0203{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":361,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":58}
0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":362,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":130,"flow_packet_id":1,"flow_first_seen":1120470304312,"flow_last_seen":1120470304312,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"120.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
0457{"flow_id":130,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":362,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470304,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABO7ukAAIARS2TAqAECeKgB\/wCJAIkAOlt2hSUBEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUKqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
0528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":362,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":130,"flow_packet_id":1,"flow_first_seen":1120470304312,"flow_last_seen":1120470304312,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"120.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","category":"System"}}
0398{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":363,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470305,"pkt_len":92,"pkt":"\/\/\/\/qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":92,"pkt_type":43690,"pkt_ipoffset":14}
0189{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":363,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","type":43690}
0442{"flow_id":129,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":364,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470307,"pkt_len":86,"pkt":"AFNUADRWAEjtAW69CABFAABIausAAIARTGbAqAECwKgBAQrSADUANCnz\/\/8BAABGAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":365,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":131,"flow_packet_id":1,"flow_first_seen":1120470315338,"flow_last_seen":1120470315338,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.57","dst_ip":"192.168.1.1","src_port":2771,"dst_port":53,"l4_proto":"udp"}
0437{"flow_id":131,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":365,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470315,"pkt_len":82,"pkt":"ADBUADRWAODtAW69CABFAABEauwAAIARTGnAqAE5wKgBAQrTADUAMCcL\/eAAAAABAAAAAAAAATEBMAEw3TEyNwdpbi1hZGRyBGFycHcAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
0669{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":365,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":131,"flow_packet_id":1,"flow_first_seen":1120470315338,"flow_last_seen":1120470315338,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.57","dst_ip":"192.168.1.1","src_port":2771,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":132,"flow_packet_id":1,"flow_first_seen":1120470315340,"flow_last_seen":1120470315340,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2771,"l4_proto":"udp"}
0467{"flow_id":132,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470315,"pkt_len":105,"pkt":"AODtAW68ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1CtMARwmH\/eCAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQBhJxAACwlsb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
0662{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":132,"flow_packet_id":1,"flow_first_seen":1120470315340,"flow_last_seen":1120470315340,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2771,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":0,"rsp_type":12,"rsp_addr":"0.0.0.0"}}
0333{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":367,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470315,"pkt_len":47,"pkt":"ADBUADRWAODtAW69CABFAAAhau0AUoARGB8NqAEC1PIhIxPEE8QADcBLICAgNiA=","pkt_caplen":47,"pkt_type":2048,"pkt_ipoffset":14}
0203{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":367,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":13}
0479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":368,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":133,"flow_packet_id":1,"flow_first_seen":1120470315653,"flow_last_seen":1120470315653,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":138,"dst_port":138,"l4_proto":"udp"}
0660{"flow_id":133,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":368,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470315,"pkt_len":243,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAADlau4AAIARSsjAqAECwKgB\/wCKAIoA0VstEQ6FJ8CoAQIAigC7AAAgRUVEQURBRENERURHREZDtkNBQ0FDQUNBQ0FDQUNBQ0EAIEVGRURFSkZQRUVFOEVORUJFSkVPQ0FDQUNBQ0FDQUJOAP9TTUIlNgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIQAAAAAAAAAAAOgDAAAAAAAAAAAhBFYAAwABAAAAAgA2AFxNQUlMU0xPVFxCUk9XU0UAAQCA\/AoARDAwMjQ2NQAAAAAAAAAAAAUAA2EAAA8BVaoA","pkt_caplen":243,"pkt_type":2048,"pkt_ipoffset":14}
0576{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":368,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":133,"flow_packet_id":1,"flow_first_seen":1120470315653,"flow_last_seen":1120470315653,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":138,"dst_port":138,"l4_proto":"udp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"NetBIOS.SMBv1","category":"System"}}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":371,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":134,"flow_packet_id":1,"flow_first_seen":1120470327552,"flow_last_seen":1120470327552,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2772,"dst_port":53,"l4_proto":"udp"}
0440{"flow_id":134,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":371,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470327,"pkt_len":86,"pkt":"ADBUOzRWAODtAW69CABFAABIau8AAIARTGLAqAECwKgBAQrUADUANIwPneEBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY6qqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0667{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":371,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":134,"flow_packet_id":1,"flow_first_seen":1120470327552,"flow_last_seen":1120470327552,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2772,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0440{"flow_id":134,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":372,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470328,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFQABIavAAAIARTGHAqAECwKgBAQrUADUANIwPneEBAACQAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0440{"flow_id":134,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":373,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470330,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIavEAAIARTGDAqAECwKgBAQrUADUANIwPneEBAAABAAAAAAAABF9zaXAAX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0695{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":373,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":134,"flow_packet_id":3,"flow_first_seen":1120470327552,"flow_last_seen":1120470330550,"flow_tot_l4_data_len":156,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2772,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"query":"_sip","num_queries":0,"num_answers":0,"reply_code":0,"query_type":24437,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":135,"flow_packet_id":1,"flow_first_seen":1120470332553,"flow_last_seen":1120470332553,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.184.1.1","src_port":2772,"dst_port":53,"l4_proto":"udp"}
0441{"flow_id":135,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470332,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIavIAAIARTF\/AqAECwLgBAQrUADUANIwPneEBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0666{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":135,"flow_packet_id":1,"flow_first_seen":1120470332553,"flow_last_seen":1120470332553,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.184.1.1","src_port":2772,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0440{"flow_id":134,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":375,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470336,"pkt_len":86,"pkt":"ADBUADRWAODtAW5yCABFAABIavMAAIARTF7AqAECwKgBAQrUADUANIwPneEBAAABAAAAAAAABF9zaXAEX3VkcANzaXAlcwBibXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0680{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":375,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":134,"flow_packet_id":4,"flow_first_seen":1120470327552,"flow_last_seen":1120470336558,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2772,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":25197,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":376,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":136,"flow_packet_id":1,"flow_first_seen":1120470344560,"flow_last_seen":1120470344560,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2773,"dst_port":53,"l4_proto":"udp"}
0436{"flow_id":136,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":376,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470344,"pkt_len":82,"pkt":"ADBUADRWAODtAW69CABFAABEavQAAIARTEHAqAECwKgBAQrVADUAMLAHdOoEAAABAAAAAAAAATEBMAEwAzEyNwdpTC1hZGRyBGFycGEAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
0662{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":376,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":136,"flow_packet_id":1,"flow_first_seen":1120470344560,"flow_last_seen":1120470344560,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2773,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.il-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":377,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470344,"pkt_len":105,"pkt":"AODtAW69ADBUADRWCABFAABbAACGAEARtz7AqAEBwKgBAgA1CtUAR5KDdOKAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
0203{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":377,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":71}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":382,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":137,"flow_packet_id":1,"flow_first_seen":1120470356585,"flow_last_seen":1120470356585,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2774,"dst_port":53,"l4_proto":"udp"}
0440{"flow_id":137,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":382,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470356,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIavkAAIARTFjAqAECwKgBAQrWADUANFcM0uIBAAABAAAAAAAABF9zaXAEX3VkcANzaXBpY3liZXJjaXR5AmJrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0668{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":382,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":137,"flow_packet_id":1,"flow_first_seen":1120470356585,"flow_last_seen":1120470356585,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2774,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0440{"flow_id":137,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":383,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470357,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIavoAAIARTFfAqAECwKgBAQrWADUANFcM0uIBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0714{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":383,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":137,"flow_packet_id":2,"flow_first_seen":1120470356585,"flow_last_seen":1120470357579,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2774,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0440{"flow_id":137,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":384,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470359,"pkt_len":86,"pkt":"ADBUADTdAODtAW69CABFSQBIavMAAIARTFbAqAECwKgBAQrWADUANFcM0uIBAAABAAAAAAAABF9zaXAEX3VkcAxzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0677{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":384,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":137,"flow_packet_id":3,"flow_first_seen":1120470356585,"flow_last_seen":1120470359581,"flow_tot_l4_data_len":156,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2774,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":385,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":138,"flow_packet_id":1,"flow_first_seen":1120470361584,"flow_last_seen":1120470361584,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.9.2","dst_ip":"192.168.1.1","src_port":2774,"dst_port":53,"l4_proto":"udp"}
0440{"flow_id":138,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":385,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470361,"pkt_len":86,"pkt":"ADBUAEtWAODtAW69CABFAABIavwAAIARTFXAqAkCwKgBAQrWADUANFcM2uIBAAAAAAAAJXMABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0440{"flow_id":137,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":386,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470365,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIav0AAIARTFTAqAECwKgBAQrWADUANFcM0uIBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0714{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":386,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":137,"flow_packet_id":4,"flow_first_seen":1120470356585,"flow_last_seen":1120470365590,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2774,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":387,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":139,"flow_packet_id":1,"flow_first_seen":1120470373592,"flow_last_seen":1120470373592,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2775,"dst_port":53,"l4_proto":"udp"}
0436{"flow_id":139,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":387,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470373,"pkt_len":82,"pkt":"ADBUADRWAODtAW69CABFAABEav4AAIARTFfAqAECwKgBAQrXADUAMHoFquIAAAABAAAAAAAIATEBMAEwAzEyNwdpbi1hUWSWBGFycGEAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
0662{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":387,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":139,"flow_packet_id":1,"flow_first_seen":1120470373592,"flow_last_seen":1120470373592,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2775,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-aqd_.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0466{"flow_id":139,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":388,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470373,"pkt_len":105,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1CtcAR1yBquKAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
0672{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":388,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":139,"flow_packet_id":2,"flow_first_seen":1120470373592,"flow_last_seen":1120470373593,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2775,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":12,"rsp_type":12,"rsp_addr":"0.0.0.0"}}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":390,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":140,"flow_packet_id":1,"flow_first_seen":1120470385615,"flow_last_seen":1120470385615,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2776,"dst_port":53,"l4_proto":"udp"}
0440{"flow_id":140,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":390,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470385,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIawQAAIARTE3AqAECwKgBAQrYADUANPsJLuMBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0666{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":390,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":140,"flow_packet_id":1,"flow_first_seen":1120470385615,"flow_last_seen":1120470385615,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2776,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0440{"flow_id":140,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":391,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470386,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIawUAAKARTEzAqAECwKgBAQrYADUANEcJLuMBAAABAAAAAAAABV9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0677{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":391,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":140,"flow_packet_id":2,"flow_first_seen":1120470385615,"flow_last_seen":1120470386610,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2776,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0386{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":392,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470388,"pkt_len":86,"pkt":"ADBUADSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":86,"pkt_type":43690,"pkt_ipoffset":14}
0189{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":392,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","type":43690}
0440{"flow_id":140,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":393,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470390,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIawsAAIARTEbAqAECwKgBAQrYADUANPsJLuMBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0714{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":393,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":140,"flow_packet_id":3,"flow_first_seen":1120470385615,"flow_last_seen":1120470390616,"flow_tot_l4_data_len":156,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2776,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0440{"flow_id":140,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":394,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470394,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIayAAAIARTDHAqAECwKgBAQrYADUANPsJLuMBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0402{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":397,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470399,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOazwAJXMASxHAqAECwKgB\/wD+AIkAOltshS8BFAABAAAAAAAAIEVGRURFSkZQRUVFUEVOJXMASkVPQ0FDQUNBQ0FDQUJNAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
0203{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":397,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":58}
0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":398,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":141,"flow_packet_id":1,"flow_first_seen":1120470402624,"flow_last_seen":1120470402624,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.33.2","dst_ip":"192.168.1.1","src_port":2782,"dst_port":53,"l4_proto":"udp"}
0436{"flow_id":141,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":398,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470402,"pkt_len":82,"pkt":"ADBUADRWAODtAW69CABFAABEaz0AAIARTBjAqCECwKgBAQreADUAMNT8T+QAAAABAAAAAAAAQTEBMAEwAzEyNwdpbi1hZGQgBGFycGEAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
0669{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":398,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":141,"flow_packet_id":1,"flow_first_seen":1120470402624,"flow_last_seen":1120470402624,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.33.2","dst_ip":"192.168.1.1","src_port":2782,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":399,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":142,"flow_packet_id":1,"flow_first_seen":1120470402625,"flow_last_seen":1120470402625,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2782,"l4_proto":"udp"}
0466{"flow_id":142,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":399,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470402,"pkt_len":105,"pkt":"AeDtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1Ct4AR7d4T+SAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
0662{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":399,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":142,"flow_packet_id":1,"flow_first_seen":1120470402625,"flow_last_seen":1120470402625,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2782,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":0,"rsp_type":12,"rsp_addr":"0.0.0.0"}}
0477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":400,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":143,"flow_packet_id":1,"flow_first_seen":1120470402627,"flow_last_seen":1120470402627,"flow_tot_l4_data_len":13,"flow_min_l4_data_len":13,"flow_max_l4_data_len":13,"flow_avg_l4_data_len":13,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"212.242.33.35","src_port":5060,"dst_port":5060,"l4_proto":"udp"}
0388{"flow_id":143,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":400,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470402,"pkt_len":47,"pkt":"ADBUADRWAODtAW69CABFAAAhaz4AAIARF87AqAEG1PIhIxPEE8QADcBLICAgICA=","pkt_caplen":47,"pkt_type":2048,"pkt_ipoffset":14}
0350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":401,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470407,"pkt_len":60,"pkt":"AODtAW5nADBUADRWCgYAAQgABgQAAQAwVAA0VsCoAQEAAAAAAADAqAECiGQRAPY3AArAIQkOAAjPO\/nN","pkt_caplen":60,"pkt_type":2566,"pkt_ipoffset":14}
0188{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":401,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","type":2566}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":403,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":144,"flow_packet_id":1,"flow_first_seen":1120470414647,"flow_last_seen":1120470414647,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2783,"dst_port":53,"l4_proto":"udp"}
0440{"flow_id":144,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":403,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470414,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa0oAAIARTAfAqAECwKgBAQrfADUANOABSeQBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAQhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0668{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":403,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":144,"flow_packet_id":1,"flow_first_seen":1120470414647,"flow_last_seen":1120470414647,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2783,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1057,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0440{"flow_id":144,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":404,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470415,"pkt_len":86,"pkt":"ADBUJXMAAODtAW69CABFAABIa0sAAIARTAbAqAECwKgBAQrfADUANOABSeQBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0675{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":404,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":144,"flow_packet_id":2,"flow_first_seen":1120470414647,"flow_last_seen":1120470415643,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2783,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0386{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":405,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470417,"pkt_len":86,"pkt":"ADBUADRWAOCqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":86,"pkt_type":43690,"pkt_ipoffset":14}
0189{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":405,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","type":43690}
0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":406,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":145,"flow_packet_id":1,"flow_first_seen":1120470419648,"flow_last_seen":1120470419648,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"0.168.1.2","dst_ip":"192.168.1.1","src_port":2783,"dst_port":53,"l4_proto":"udp"}
0440{"flow_id":145,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":406,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470419,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa00AAIARJXMAqAECwKgBAQrfADUANOABSeQBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0664{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":406,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":145,"flow_packet_id":1,"flow_first_seen":1120470419648,"flow_last_seen":1120470419648,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"0.168.1.2","dst_ip":"192.168.1.1","src_port":2783,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0440{"flow_id":144,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":407,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470423,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa04AAIARTAPAqAECwKgBAQrfADUANOABSeQBAAIBAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0714{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":407,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":144,"flow_packet_id":3,"flow_first_seen":1120470414647,"flow_last_seen":1120470423654,"flow_tot_l4_data_len":156,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2783,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":408,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":48,"flow_packet_id":1,"flow_first_seen":1120469828958,"flow_last_seen":1120469828958,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.202","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":408,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":146,"flow_packet_id":1,"flow_first_seen":1120470431656,"flow_last_seen":1120470431656,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2784,"dst_port":53,"l4_proto":"udp"}
0436{"flow_id":146,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":408,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470431,"pkt_len":82,"pkt":"ADBUADRWAODtAW69CABFAABEa08AAIARTAbAqAECwKgBAQrgADUAMIb5neUAAAABAAAAAAAAATEBMAEwJXMANwdpbi1hZGRyqqqqqqqqqqqqqg==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
0671{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":408,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":146,"flow_packet_id":1,"flow_first_seen":1120470431656,"flow_last_seen":1120470431656,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2784,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":14087,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":409,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":147,"flow_packet_id":1,"flow_first_seen":1120470431657,"flow_last_seen":1120470431657,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.5.2","src_port":53,"dst_port":2784,"l4_proto":"udp"}
0466{"flow_id":147,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":409,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470431,"pkt_len":105,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgFAgA1CuAAR2l1neWAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFzcGEAAAwAAcAMAAwAAQAAJyVzAAlsb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
0662{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":409,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":147,"flow_packet_id":1,"flow_first_seen":1120470431657,"flow_last_seen":1120470431657,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.5.2","src_port":53,"dst_port":2784,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.aspa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":0,"rsp_type":12,"rsp_addr":"0.0.0.0"}}
0386{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":411,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470439,"pkt_len":86,"pkt":"ADBUADRWAODtAW69SQBFAIBIa1EAAIARTADAqAECwKgBAQrhADUANAD+KOYBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":18688,"pkt_ipoffset":14}
0189{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":411,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","type":18688}
0385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":412,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470440,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa1LfAEwlcwDAqAECwKgBAQrhADUANAD+KOYBAAABAAAAQAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0203{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":412,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":52}
0517{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":413,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":50,"flow_packet_id":1,"flow_first_seen":1120469839664,"flow_last_seen":1120469839664,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
0481{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":413,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":50,"flow_packet_id":1,"flow_first_seen":1120469839664,"flow_last_seen":1120469839664,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"udp"}
0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":413,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":49,"flow_packet_id":2,"flow_first_seen":1120469831652,"flow_last_seen":1120469835658,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2732,"dst_port":53,"l4_proto":"udp"}
0440{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":413,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":148,"flow_packet_id":1,"flow_first_seen":1120470442140,"flow_last_seen":1120470442140,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","l4_proto":19}
0441{"flow_id":148,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":413,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470442,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAAAwa1MAAIATS\/7AqAECwKgBAQrhADUANAD+KOYBAAABAAAAAEsABF9zaXAEX3VkcANzaXB3Y3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":414,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":149,"flow_packet_id":1,"flow_first_seen":1120470444143,"flow_last_seen":1120470444143,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"200.168.1.2","dst_ip":"192.168.1.1","src_port":2785,"dst_port":53,"l4_proto":"udp"}
0441{"flow_id":149,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":414,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470444,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa1QAAIARS\/3IqAECwKgBAQrhADUANAD+KOYBIAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAEk=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0666{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":414,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":149,"flow_packet_id":1,"flow_first_seen":1120470444143,"flow_last_seen":1120470444143,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"200.168.1.2","dst_ip":"192.168.1.1","src_port":2785,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":416,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":150,"flow_packet_id":1,"flow_first_seen":1120470447197,"flow_last_seen":1120470447197,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":35721,"l4_proto":"udp"}
0457{"flow_id":150,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":416,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470447,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOa1YAAIARSvfAqAECwKgB\/wCJi4kAOltphTIBEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ3hDQSlNAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
0441{"flow_id":105,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":418,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470448,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa1gAAIARS\/nAqAECwKgBAQrhADUANAD+KOYBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXZjaXR5AmRrAAAhlAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0665{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":419,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":54,"flow_packet_id":1,"flow_first_seen":1120469848977,"flow_last_seen":1120469848977,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"172.168.1.2","dst_ip":"192.168.1.1","src_port":2734,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":419,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":54,"flow_packet_id":1,"flow_first_seen":1120469848977,"flow_last_seen":1120469848977,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"172.168.1.2","dst_ip":"192.168.1.1","src_port":2734,"dst_port":53,"l4_proto":"udp"}
0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":419,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":51,"flow_packet_id":1,"flow_first_seen":1120469847666,"flow_last_seen":1120469847666,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.115.1","src_port":2733,"dst_port":53,"l4_proto":"udp"}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":419,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":151,"flow_packet_id":1,"flow_first_seen":1120470456151,"flow_last_seen":1120470456151,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.3","src_port":2786,"dst_port":53,"l4_proto":"udp"}
0437{"flow_id":151,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":419,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470456,"pkt_len":82,"pkt":"ADBUADRWAODtAW69CABFAABEa1kAAIARS\/zAqAECwKgBAwriADUAMED14+cAAAABAAAAAAAAATEBMAEwAzEyNwdpbi1hZKxyBGFycGEAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
0662{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":419,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":151,"flow_packet_id":1,"flow_first_seen":1120470456151,"flow_last_seen":1120470456151,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.3","src_port":2786,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-ad_r.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":420,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470456,"pkt_len":105,"pkt":"AODtAW69ADBUADRWCABFAABbAABACEARtz7AqAEBwKgBAgA1CuIARyNx4+eAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
0203{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":420,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":71}
0480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":422,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":152,"flow_packet_id":1,"flow_first_seen":1120470456286,"flow_last_seen":1120470456286,"flow_tot_l4_data_len":493,"flow_min_l4_data_len":493,"flow_max_l4_data_len":493,"flow_avg_l4_data_len":493,"midstream":0,"l3_proto":"ip4","src_ip":"212.242.33.35","dst_ip":"192.168.1.2","src_port":9587,"dst_port":196,"l4_proto":"udp"}
1030{"flow_id":152,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":422,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470456,"pkt_len":527,"pkt":"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","pkt_caplen":527,"pkt_type":2048,"pkt_ipoffset":14}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":423,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":153,"flow_packet_id":1,"flow_first_seen":1120470456513,"flow_last_seen":1120470456513,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.3.1","src_port":2787,"dst_port":53,"l4_proto":"udp"}
0441{"flow_id":153,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":423,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470456,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa1sAAIARS\/bAqAECwKgDAQrjADU0NPT5NOgBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0666{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":423,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":153,"flow_packet_id":1,"flow_first_seen":1120470456513,"flow_last_seen":1120470456513,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.3.1","src_port":2787,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":154,"flow_packet_id":1,"flow_first_seen":1120470457512,"flow_last_seen":1120470457512,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2787,"dst_port":53,"l4_proto":"udp"}
0441{"flow_id":154,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470457,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa1wAAIARS\/XAqAECwKgBAQrjADUANPT5NOgBAAABAAAAAAAABFtzaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0666{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":154,"flow_packet_id":1,"flow_first_seen":1120470457512,"flow_last_seen":1120470457512,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2787,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0441{"flow_id":154,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":425,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470459,"pkt_len":86,"pkt":"ADBUAjRWAODtAW69CABFAABIa10AAIARS\/TAqAECwKgBAQrjADUANPT5NOgBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0441{"flow_id":154,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":426,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470461,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa14AAFMRS\/PAqAECwKgBAQrjADUANPT5NOgBAAABAAAAAAAABF9zaXAEX3VkcAPDaXAJa3liZXJtaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0441{"flow_id":154,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":427,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470465,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIaV8AAIARS\/LAqAECwKgBAQrjADUANPT5NOgBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":428,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":53,"flow_packet_id":4,"flow_first_seen":1120469847979,"flow_last_seen":1120469856989,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2734,"dst_port":53,"l4_proto":"udp"}
0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":428,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":55,"flow_packet_id":1,"flow_first_seen":1120469864991,"flow_last_seen":1120469864991,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"200.168.1.2","dst_ip":"192.168.1.1","src_port":2735,"dst_port":53,"l4_proto":"udp"}
0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":428,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":56,"flow_packet_id":1,"flow_first_seen":1120469864992,"flow_last_seen":1120469864992,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"253.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2735,"l4_proto":"udp"}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":428,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":155,"flow_packet_id":1,"flow_first_seen":1120470473526,"flow_last_seen":1120470473526,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2788,"dst_port":53,"l4_proto":"udp"}
0437{"flow_id":155,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":428,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470473,"pkt_len":82,"pkt":"ADBUADRWAODtAW69CABFAABEa2AAAIARS\/XAqAECwKgBAQrkADUAMLnxaukAAAABAAAAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
0662{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":428,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":155,"flow_packet_id":1,"flow_first_seen":1120470473526,"flow_last_seen":1120470473526,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2788,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":429,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470473,"pkt_len":105,"pkt":"AODtAW69ADBUADRWCABFAABbAABAJXMAtz7AqAEBwKgBAgA1CuQAR5xtaumAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3Qw","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
0203{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":429,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":71}
0386{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":431,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470473,"pkt_len":86,"pkt":"ADBUADRWACVzVG69CG1FAABIa2IAAIARS+\/AqAECwKgBAQrlADUANLH1d+oBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2157,"pkt_ipoffset":14}
0188{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":431,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","type":2157}
0983{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":432,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470473,"pkt_len":532,"pkt":"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","pkt_caplen":532,"pkt_type":2048,"pkt_ipoffset":14}
0204{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":432,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":498}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":433,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":156,"flow_packet_id":1,"flow_first_seen":1120470474627,"flow_last_seen":1120470474627,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2789,"dst_port":53,"l4_proto":"udp"}
0440{"flow_id":156,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":433,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470474,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa2MAAIARS+7AqAECwKgBAQrlADUANLH1d+oBgAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0666{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":433,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":156,"flow_packet_id":1,"flow_first_seen":1120470474627,"flow_last_seen":1120470474627,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2789,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0440{"flow_id":156,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":434,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470476,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa2QAAIARS+3AqAECwKgBAQrlADUANLH1d+oBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrJXMAAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0676{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":434,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":156,"flow_packet_id":2,"flow_first_seen":1120470474627,"flow_last_seen":1120470476630,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2789,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0440{"flow_id":156,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":437,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470478,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa2UAAIARS+zAqAECwKgBAQrlADUANLH1d+oBAAABAAAAAAAABF9zaXAEX3VkcJpzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0677{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":437,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":156,"flow_packet_id":3,"flow_first_seen":1120470474627,"flow_last_seen":1120470478633,"flow_tot_l4_data_len":156,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2789,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0440{"flow_id":156,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":438,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470482,"pkt_len":86,"pkt":"bDBUADRWAODtAW69CABFAABIa2YAAIARS+vAqAECwKgBAQrlADUANLH1d+oBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0714{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":438,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":156,"flow_packet_id":4,"flow_first_seen":1120470474627,"flow_last_seen":1120470482638,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2789,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":57,"flow_packet_id":1,"flow_first_seen":1120469877188,"flow_last_seen":1120469877188,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":169,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","category":"System"}}
0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":57,"flow_packet_id":1,"flow_first_seen":1120469877188,"flow_last_seen":1120469877188,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":169,"l4_proto":"udp"}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":157,"flow_packet_id":1,"flow_first_seen":1120470490640,"flow_last_seen":1120470490640,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2790,"dst_port":53,"l4_proto":"udp"}
0436{"flow_id":157,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470490,"pkt_len":82,"pkt":"ADBUADRWAODlAW69CABFAABEa2cAAIARS+7AqAECwKgBAQrmADUAMMHtYusAAAABAAAA6QAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":440,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470490,"pkt_len":105,"pkt":"AJLtAW69ADBUADRWCABFAABbAABADUARtz7AqAEBwKgBAgA1CuYAR6QBYuuAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
0203{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":440,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":71}
0482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":442,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":158,"flow_packet_id":1,"flow_first_seen":1120470490782,"flow_last_seen":1120470490782,"flow_tot_l4_data_len":493,"flow_min_l4_data_len":493,"flow_max_l4_data_len":493,"flow_avg_l4_data_len":493,"midstream":0,"l3_proto":"ip4","src_ip":"212.242.33.35","dst_ip":"192.37.115.0","src_port":5060,"dst_port":5060,"l4_proto":"udp"}
1030{"flow_id":158,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":442,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470490,"pkt_len":527,"pkt":"AODtAW69ADBUADRWCABFAAIBAABAADcRiizU8iEjwCVzABPEE8QB7RaaU0lQLzIuMCA0MDEgVW5hdXRob3JpemVkDQpDYWxsLUlEOiA1NzgyMjI3MjktNDY2NWQ3NzVANTc4MjIyNzMyLTQ2NjVkNzcyDQpDU2VxOiA3OCBSRUdJU1RFUg0KRnJvbTogPHNpcDozNTEwNDcyM0BzaXAuY3liZXJjaXR5LmRrPjt0YWc9M2EyZDBkYw0KVG86IDxzaXA6MzUxMDQ3MjNAc2lwLmN5YmVyY2l0NC5kaz47dGFnPTAwLTk0JXMALTE3MDFiNmFiLTEzOTM1YzgzNA0KVmlhOiBTSVAvMi4wL1VEUCAxOTIuMTY4LjEuMjtyYWNlaXZlZD04MC4yMzAuMjE5cjcwO3Jwb3J0PTUwNjA7YnJhbmNoPXo5SEc0YktucDYxMDAxODczLTQzYmViWWE1MTkyLjE2OC4xLjINCldXVy1BdXRoZW50aWNhdGU6IERpZ2VzdCByZWFsbT0ic2lwLmN5YmVyY2l0eS5kayIsbm9mY2U9IjE3MDFiNjliNDdiNTFjNmQ2NmM5ZTQ1MDNjNjc5YzIiLG9wYXF1ZT0iMTcwMWExMzUxZjcwNzk1IixzdGFsZT1mYWxzZSxhbGdvcml0aG30TUQ1DQpDb250ZW50Lf5lbmd0aDogMA0KDQo=","pkt_caplen":527,"pkt_type":2048,"pkt_ipoffset":14}
0529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":442,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":158,"flow_packet_id":1,"flow_first_seen":1120470490782,"flow_last_seen":1120470490782,"flow_tot_l4_data_len":493,"flow_min_l4_data_len":493,"flow_max_l4_data_len":493,"flow_avg_l4_data_len":493,"midstream":0,"l3_proto":"ip4","src_ip":"212.242.33.35","dst_ip":"192.37.115.0","src_port":5060,"dst_port":5060,"l4_proto":"udp","ndpi": {"proto":"SIP","category":"VoIP"}}
0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":443,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":159,"flow_packet_id":1,"flow_first_seen":1120470491041,"flow_last_seen":1120470491041,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.79.2","dst_ip":"192.168.1.1","src_port":2791,"dst_port":53,"l4_proto":"udp"}
0440{"flow_id":159,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":443,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470491,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa2kAAIARS+jAqE8CwKgBAQrnADUANKZlgusBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0667{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":443,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":159,"flow_packet_id":1,"flow_first_seen":1120470491041,"flow_last_seen":1120470491041,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.79.2","dst_ip":"192.168.1.1","src_port":2791,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":444,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":160,"flow_packet_id":1,"flow_first_seen":1120470492042,"flow_last_seen":1120470492042,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.53","dst_ip":"192.168.1.1","src_port":2791,"dst_port":53,"l4_proto":"udp"}
0440{"flow_id":160,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":444,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470492,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa2oAAIARS+fAqAE1wKgBAQrnADUANKbygusBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0667{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":444,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":160,"flow_packet_id":1,"flow_first_seen":1120470492042,"flow_last_seen":1120470492042,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.53","dst_ip":"192.168.1.1","src_port":2791,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":445,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470494,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIayVzAIARS+bAqAECwKgBAQrnADUANKbygusBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0203{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":445,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":52}
0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":446,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":161,"flow_packet_id":1,"flow_first_seen":1120470494127,"flow_last_seen":1120470494127,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.194.1.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
0457{"flow_id":161,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":446,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470494,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOa2wAAIARSuHAqAECwMIB\/wCJAIkAOltkhTcBEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ0FDQUJNAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
0528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":446,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":161,"flow_packet_id":1,"flow_first_seen":1120470494127,"flow_last_seen":1120470494127,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.194.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","category":"System"}}
0485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":448,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":162,"flow_packet_id":1,"flow_first_seen":1120470495627,"flow_last_seen":1120470495627,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"170.170.170.170","dst_ip":"170.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"udp"}
0456{"flow_id":162,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":448,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470495,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AODtNm69CABFAABOe24AAIARSt+qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":449,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":163,"flow_packet_id":1,"flow_first_seen":1120470496048,"flow_last_seen":1120470496048,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2791,"dst_port":53,"l4_proto":"udp"}
0440{"flow_id":163,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":449,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470496,"pkt_len":86,"pkt":"ADBUADRWAODtAVW9CABFAABIa28AAIARS+LAqAECwKgBAQrnADUANKbygusBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAghAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0668{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":449,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":163,"flow_packet_id":1,"flow_first_seen":1120470496048,"flow_last_seen":1120470496048,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2791,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":2081,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":450,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":164,"flow_packet_id":1,"flow_first_seen":1120470501450,"flow_last_seen":1120470501450,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.67.1","src_port":2791,"dst_port":53,"l4_proto":"udp"}
0440{"flow_id":164,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":450,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470501,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa3QAAIARS93AqAECwKhDAQrnADUANKbygusBAAABAAAAAAAABF9zaXAEX3VkcANzaSVzAHliZXJjaaqqqqqqqqqqqqo=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0672{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":450,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":164,"flow_packet_id":1,"flow_first_seen":1120470501450,"flow_last_seen":1120470501450,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.67.1","src_port":2791,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":31074,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":451,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":165,"flow_packet_id":1,"flow_first_seen":1120470509447,"flow_last_seen":1120470509447,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2792,"dst_port":53,"l4_proto":"udp"}
0436{"flow_id":165,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":451,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470509,"pkt_len":82,"pkt":"ADBUADRWAODtAW69CABFAABEeHUAAIARS+DAqAECwKgBAQroADUAMOPqQOwAAAABAAAAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
0662{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":451,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":165,"flow_packet_id":1,"flow_first_seen":1120470509447,"flow_last_seen":1120470509447,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2792,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":452,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":166,"flow_packet_id":1,"flow_first_seen":1120470509449,"flow_last_seen":1120470509449,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"240.168.1.2","src_port":53,"dst_port":2792,"l4_proto":"udp"}
0466{"flow_id":166,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":452,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470509,"pkt_len":105,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEB8KgBAgA1CugAR8ZmQOyAAABkAAEAAAAAATEBMAEwAzEyNwdpbi1hGmRyBGFycGEAAFcAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
0702{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":452,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":166,"flow_packet_id":1,"flow_first_seen":1120470509449,"flow_last_seen":1120470509449,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"240.168.1.2","src_port":53,"dst_port":2792,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-a_dr.arpa","num_queries":100,"num_answers":1,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0983{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":454,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470509,"pkt_len":532,"pkt":"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","pkt_caplen":532,"pkt_type":2048,"pkt_ipoffset":14}
0204{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":454,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":498}
0482{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":455,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":62,"flow_packet_id":1,"flow_first_seen":1120469938910,"flow_last_seen":1120469938910,"flow_tot_l4_data_len":475,"flow_min_l4_data_len":475,"flow_max_l4_data_len":475,"flow_avg_l4_data_len":475,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"212.242.33.35","src_port":20932,"dst_port":5060,"l4_proto":"udp"}
0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":455,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":59,"flow_packet_id":1,"flow_first_seen":1120469922894,"flow_last_seen":1120469922894,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2684,"dst_port":53,"l4_proto":"udp"}
0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":455,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":60,"flow_packet_id":1,"flow_first_seen":1120469924897,"flow_last_seen":1120469924897,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.17","src_port":2736,"dst_port":53,"l4_proto":"udp"}
0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":455,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":58,"flow_packet_id":3,"flow_first_seen":1120469921898,"flow_last_seen":1120469930905,"flow_tot_l4_data_len":156,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2736,"dst_port":53,"l4_proto":"udp"}
0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":455,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":61,"flow_packet_id":2,"flow_first_seen":1120469938907,"flow_last_seen":1120469938908,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2737,"dst_port":53,"l4_proto":"udp"}
0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":455,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":63,"flow_packet_id":1,"flow_first_seen":1120469939223,"flow_last_seen":1120469939223,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.84.1","src_port":2738,"dst_port":53,"l4_proto":"udp"}
0527{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":458,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":67,"flow_packet_id":1,"flow_first_seen":1120469970215,"flow_last_seen":1120469970215,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":8329,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","category":"System"}}
0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":458,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":67,"flow_packet_id":1,"flow_first_seen":1120469970215,"flow_last_seen":1120469970215,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":8329,"l4_proto":"udp"}
0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":458,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":13,"flow_packet_id":2,"flow_first_seen":1120469590256,"flow_last_seen":1120469944224,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":48,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2716,"dst_port":53,"l4_proto":"udp"}
0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":458,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":64,"flow_packet_id":3,"flow_first_seen":1120469940218,"flow_last_seen":1120469948230,"flow_tot_l4_data_len":156,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2738,"dst_port":53,"l4_proto":"udp"}
0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":458,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":65,"flow_packet_id":2,"flow_first_seen":1120469956232,"flow_last_seen":1120469956233,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2739,"dst_port":53,"l4_proto":"udp"}
0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":458,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":66,"flow_packet_id":4,"flow_first_seen":1120469956945,"flow_last_seen":1120469965955,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2740,"dst_port":53,"l4_proto":"udp"}
0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":458,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":69,"flow_packet_id":1,"flow_first_seen":1120469973959,"flow_last_seen":1120469973959,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.130.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2741,"l4_proto":"udp"}
0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":458,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":68,"flow_packet_id":1,"flow_first_seen":1120469973957,"flow_last_seen":1120469973957,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2741,"dst_port":53,"l4_proto":"udp"}
0512{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":458,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":71,"flow_packet_id":1,"flow_first_seen":1120469986976,"flow_last_seen":1120469986976,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2730,"dst_port":43690,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":458,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":71,"flow_packet_id":1,"flow_first_seen":1120469986976,"flow_last_seen":1120469986976,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2730,"dst_port":43690,"l4_proto":"udp"}
0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":458,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":167,"flow_packet_id":1,"flow_first_seen":1120470588783,"flow_last_seen":1120470588783,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.112","src_port":137,"dst_port":137,"l4_proto":"udp"}
0457{"flow_id":167,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":458,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470588,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOa3oAAO8RStPAqAECwKgBcACJAIkAOltehT0BEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ\/VDQUJNAAAoAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
0528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":458,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":167,"flow_packet_id":1,"flow_first_seen":1120470588783,"flow_last_seen":1120470588783,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.112","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","category":"System"}}
0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":459,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":168,"flow_packet_id":1,"flow_first_seen":1120470589532,"flow_last_seen":1120470589532,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.136.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
0456{"flow_id":168,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":459,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470589,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/3AODtAW69CABFAABOa3sAAIARStLAiAECwKgB\/wCJAIkAOltehT0BEAABAAAAAAAAIERGRURFSkZQRUVFUEVORUNFSkVPQ0FDQUNBQ0FDQUJNAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
0528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":459,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":168,"flow_packet_id":1,"flow_first_seen":1120470589532,"flow_last_seen":1120470589532,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.136.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","category":"System"}}
0519{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":461,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":75,"flow_packet_id":1,"flow_first_seen":1120470032081,"flow_last_seen":1120470032081,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.170","dst_ip":"170.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
0483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":461,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":75,"flow_packet_id":1,"flow_first_seen":1120470032081,"flow_last_seen":1120470032081,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.170","dst_ip":"170.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"udp"}
0477{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":461,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":78,"flow_packet_id":1,"flow_first_seen":1120470033172,"flow_last_seen":1120470033172,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","l4_proto":240,"ndpi": {"proto":"Unknown"}}
0441{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":461,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":78,"flow_packet_id":1,"flow_first_seen":1120470033172,"flow_last_seen":1120470033172,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","l4_proto":240}
0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":461,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":74,"flow_packet_id":1,"flow_first_seen":1120470019512,"flow_last_seen":1120470019512,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":88,"dst_port":137,"l4_proto":"udp"}
0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":461,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":70,"flow_packet_id":4,"flow_first_seen":1120469985981,"flow_last_seen":1120469994988,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2742,"dst_port":53,"l4_proto":"udp"}
0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":461,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":72,"flow_packet_id":2,"flow_first_seen":1120470002989,"flow_last_seen":1120470002991,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2743,"dst_port":53,"l4_proto":"udp"}
0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":461,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":73,"flow_packet_id":5,"flow_first_seen":1120470015072,"flow_last_seen":1120470024079,"flow_tot_l4_data_len":260,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2744,"dst_port":53,"l4_proto":"udp"}
0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":461,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":76,"flow_packet_id":1,"flow_first_seen":1120470032083,"flow_last_seen":1120470032083,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2745,"l4_proto":"udp"}
0666{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":461,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":79,"flow_packet_id":1,"flow_first_seen":1120470035175,"flow_last_seen":1120470035175,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":2746,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":461,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":79,"flow_packet_id":1,"flow_first_seen":1120470035175,"flow_last_seen":1120470035175,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":2746,"dst_port":53,"l4_proto":"udp"}
0402{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":461,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470636,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AODtAW5LCABFAJxOa4EAAIARSszAqAECwKgB\/wCJAIkAOltZhUIBEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFTkVPYkFDQUNBekFDQUJNAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
0203{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":461,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":58}
0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":464,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":80,"flow_packet_id":1,"flow_first_seen":1120470049185,"flow_last_seen":1120470049185,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"67.168.1.1","src_port":2747,"dst_port":53,"l4_proto":"udp"}
0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":464,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":77,"flow_packet_id":3,"flow_first_seen":1120470032178,"flow_last_seen":1120470041184,"flow_tot_l4_data_len":156,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2746,"dst_port":53,"l4_proto":"udp"}
0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":464,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":81,"flow_packet_id":1,"flow_first_seen":1120470049187,"flow_last_seen":1120470049187,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2747,"l4_proto":"udp"}
0481{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":464,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":82,"flow_packet_id":1,"flow_first_seen":1120470049188,"flow_last_seen":1120470049188,"flow_tot_l4_data_len":830,"flow_min_l4_data_len":830,"flow_max_l4_data_len":830,"flow_avg_l4_data_len":830,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"200.68.120.81","src_port":5060,"dst_port":4932,"l4_proto":"udp"}
0480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":464,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":169,"flow_packet_id":1,"flow_first_seen":1120470657808,"flow_last_seen":1120470657808,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.41","dst_ip":"192.168.1.255","src_port":138,"dst_port":138,"l4_proto":"udp"}
0623{"flow_id":169,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":464,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470657,"pkt_len":216,"pkt":"\/\/\/\/\/\/\/\/AGCXD+5yCABFAADKXL8AAIARWOvAqAEpwKgB\/wCKAIoAtl+xEQKRTcCoASkAigCgAAAgRU1FQkVDREJEQkRCQ0FDQUNBQ0FDQUNBQ0FDQUNBQUEAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJOAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAABgAAAAAAAAAAAOgDAAAAAAAAAAAGAMEAAwABAAEAAgAXAFxNQUlMU0xPVFxCUk9XU0UACQTYAAAA","pkt_caplen":216,"pkt_type":2048,"pkt_ipoffset":14}
0577{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":464,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":169,"flow_packet_id":1,"flow_first_seen":1120470657808,"flow_last_seen":1120470657808,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.41","dst_ip":"192.168.1.255","src_port":138,"dst_port":138,"l4_proto":"udp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"NetBIOS.SMBv1","category":"System"}}
0478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":465,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":170,"flow_packet_id":1,"flow_first_seen":1120470657808,"flow_last_seen":1120470657808,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.184.189.41","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
0457{"flow_id":170,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":465,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470657,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AGCXD+5yCABFAABOXMAAAIARWWbAuL0pwKgB\/wCJAIkAOmgjkU8BEAABAAAAAAAAIEZIRVBGQ0VMRUh2Q0VQRkZGQUNBQ0FDQUNBQ0FDQUJMAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
0531{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":465,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":170,"flow_packet_id":1,"flow_first_seen":1120470657808,"flow_last_seen":1120470657808,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.184.189.41","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","category":"System"}}
0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":466,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":171,"flow_packet_id":1,"flow_first_seen":1120470658556,"flow_last_seen":1120470658556,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.41","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
0457{"flow_id":171,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":466,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470658,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AGCXD+5yCABFAABOXMEAAIARWWXAqAEpwKgB\/wCJAIkAOmgjkU8BEAABAAAAAAAAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0ElcwBMAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
0529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":466,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":171,"flow_packet_id":1,"flow_first_seen":1120470658556,"flow_last_seen":1120470658556,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.41","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","category":"System"}}
0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":467,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":172,"flow_packet_id":1,"flow_first_seen":1120470659308,"flow_last_seen":1120470659308,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.41","dst_ip":"107.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
0457{"flow_id":172,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":467,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470659,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AGCXD+5yCABFAABOXMIAAIARWWTAqAEpa6gB\/wCJAIkAOmgjkU8BEAABAAAAAAAAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJMAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
0529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":467,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":172,"flow_packet_id":1,"flow_first_seen":1120470659308,"flow_last_seen":1120470659308,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.41","dst_ip":"107.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","category":"System"}}
0623{"flow_id":169,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":468,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470662,"pkt_len":216,"pkt":"\/\/\/\/\/\/\/\/AGCXD+5yCABFAADKXMMAAIARWOfAqAEpwKgB\/wCKAIqWtl+uEQKRUMCoASkAigCgAAAgRU1FQkVDREJEQkRCQ0FDQUNBQ0FDQUNBMEFDQUNBQUEAIEZIRVBGQ0dMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJOAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAABgAAAAAAAAAAAOgDAAAAAAAAAAAGAFYAAwABAAEAQgAXAFxNQUlMU7xPVFxCUk9XU0UACQTYAAAA","pkt_caplen":216,"pkt_type":2048,"pkt_ipoffset":14}
0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":469,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":173,"flow_packet_id":1,"flow_first_seen":1120470662062,"flow_last_seen":1120470662062,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"115.0.1.41","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
0457{"flow_id":173,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":469,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470662,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AGCXD+5yCABFAABOXMQAAIARWSVzAAEpwKgB\/wCJAIkAOmggkVIBEAABAAAAAAAAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJTAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
0527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":469,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":173,"flow_packet_id":1,"flow_first_seen":1120470662062,"flow_last_seen":1120470662062,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"115.0.1.41","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","category":"System"}}
0457{"flow_id":171,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":470,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470662,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AGCXD+5yCABFAABOXMUAAIARWWHAqAEpwKgB\/wCJAIkAOGggkVIBEAABAAAAAAAAIEZIRVBGQ0VMRUhGQ0VQRkZGQUM1Q0FDQUNBQ0FDQUJMAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
0457{"flow_id":171,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":471,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470663,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AGCXD+5yCABFAABOXMYAAIARWWDAqAEpwKgB\/wCJAIkAOmggkVIBEAABAAAAAAAAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJMAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
0623{"flow_id":169,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":472,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470666,"pkt_len":216,"pkt":"\/\/\/\/\/\/\/\/AGCXD+5yCABFAADKXMcAAIARWOPAqAEpwKgB\/wCKAIoAtl+rEQKRU8CoASkAigCgAAAgRU1FQkVDREJEQkRCQ0FDQUNBQ0FDQUNBQ0FDQUNBQUEQIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJOAP9TTUIlAAAAAAAAAAAAAAAAAAAAAABMAAAAAAAAAAAAEQAABgAAQAAAAAAAAOgDAAAAAAAAAAAGAFYAAwABAAEAAgAXAFxNQUlMU0xPVFxCUk9XU0UACQTYAM8A","pkt_caplen":216,"pkt_type":2048,"pkt_ipoffset":14}
0455{"flow_id":171,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":473,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470666,"pkt_len":92,"pkt":"\/\/\/\/\/\/8lcwCXD+5yCABFAABOXMgAAIARWV7AqAEpwKgB\/wCJAIkAOmgdkVUBEAABAAAAAAAAIEZIRVBGZkVIRUhGQ0VQRkZGQUNBQ0xDJXMAQ0FDQUJMAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
0402{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":474,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470667,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AGCXD+5yCABFAFJOXMkAAIARWV3A6AEpwKgB\/wCJAIkAOmgdkVUBEAABAAAAAAAAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJMAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
0203{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":474,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":58}
0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":475,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":52,"flow_packet_id":2,"flow_first_seen":1120469847667,"flow_last_seen":1120470066201,"flow_tot_l4_data_len":142,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2733,"l4_proto":"udp"}
0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":475,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":83,"flow_packet_id":5,"flow_first_seen":1120470049190,"flow_last_seen":1120470058198,"flow_tot_l4_data_len":260,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2748,"dst_port":53,"l4_proto":"udp"}
0665{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":475,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":85,"flow_packet_id":1,"flow_first_seen":1120470066200,"flow_last_seen":1120470066200,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2749,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":475,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":85,"flow_packet_id":1,"flow_first_seen":1120470066200,"flow_last_seen":1120470066200,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2749,"dst_port":53,"l4_proto":"udp"}
0457{"flow_id":171,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":475,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470667,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AGCXD+5yCABFAABOXMoAAIARWVzAqAEpwKgB\/wCJAIkAOmgfkVUBEAABAAAAAAAAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJMAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
0477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":476,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":174,"flow_packet_id":1,"flow_first_seen":1120470670573,"flow_last_seen":1120470670573,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.41","dst_ip":"192.168.37.115","src_port":137,"dst_port":137,"l4_proto":"udp"}
0456{"flow_id":174,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":476,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470670,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AGCXD+5yCABFEABOXMsAAIARWVvAqAEpwKglcwCJAIkAOmUbkVcBEAABAAAAAAAAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJPAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
0530{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":476,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":174,"flow_packet_id":1,"flow_first_seen":1120470670573,"flow_last_seen":1120470670573,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.41","dst_ip":"192.168.37.115","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","category":"System"}}
0457{"flow_id":171,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":477,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470671,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AGCXD+5yCABFAABOXMwAAIARWVrAqAEpwKgB\/wCJAIkAOmUbkVcBEAABAAAAAAAAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJvAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
0457{"flow_id":171,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":478,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470672,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AGKXD+5yCABFAABOXM0AAIARWVnAqAEpwKgB\/wCJAIkAOmUbkVcBEAABAAAAAAAAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJPAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":479,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":87,"flow_packet_id":1,"flow_first_seen":1120470069294,"flow_last_seen":1120470069294,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":10942,"dst_port":53,"l4_proto":"udp"}
0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":479,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":86,"flow_packet_id":4,"flow_first_seen":1120470066293,"flow_last_seen":1120470075303,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2750,"dst_port":53,"l4_proto":"udp"}
0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":479,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":89,"flow_packet_id":1,"flow_first_seen":1120470083306,"flow_last_seen":1120470083306,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2751,"l4_proto":"udp"}
0666{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":479,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":88,"flow_packet_id":1,"flow_first_seen":1120470083305,"flow_last_seen":1120470083305,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.18","dst_ip":"192.168.1.1","src_port":2751,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":479,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":88,"flow_packet_id":1,"flow_first_seen":1120470083305,"flow_last_seen":1120470083305,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.18","dst_ip":"192.168.1.1","src_port":2751,"dst_port":53,"l4_proto":"udp"}
0481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":480,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":175,"flow_packet_id":1,"flow_first_seen":1120470684859,"flow_last_seen":1120470684859,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.170.170","src_port":43690,"dst_port":43690,"l4_proto":"udp"}
0456{"flow_id":175,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":480,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470684,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOa4UAAIARSsjAqAECwKiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":481,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":176,"flow_packet_id":1,"flow_first_seen":1120470685610,"flow_last_seen":1120470685610,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"200.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
0457{"flow_id":176,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":481,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470685,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AODtA269CABFAABOa4YAAIARTsfAqAECyKgB\/wCJAIkAOltWhUUBEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ0FDQUJNAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
0528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":481,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":176,"flow_packet_id":1,"flow_first_seen":1120470685610,"flow_last_seen":1120470685610,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"200.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","category":"System"}}
0481{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":482,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":91,"flow_packet_id":1,"flow_first_seen":1120470084827,"flow_last_seen":1120470084827,"flow_tot_l4_data_len":383,"flow_min_l4_data_len":383,"flow_max_l4_data_len":383,"flow_avg_l4_data_len":383,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"200.68.37.115","src_port":4292,"dst_port":5060,"l4_proto":"udp"}
0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":482,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":97,"flow_packet_id":1,"flow_first_seen":1120470102883,"flow_last_seen":1120470102883,"flow_tot_l4_data_len":383,"flow_min_l4_data_len":383,"flow_max_l4_data_len":383,"flow_avg_l4_data_len":383,"midstream":0,"l3_proto":"ip4","src_ip":"192.86.1.2","dst_ip":"200.68.120.99","src_port":5060,"dst_port":5060,"l4_proto":"udp","ndpi": {"proto":"SIP","category":"VoIP"}}
0480{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":482,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":97,"flow_packet_id":1,"flow_first_seen":1120470102883,"flow_last_seen":1120470102883,"flow_tot_l4_data_len":383,"flow_min_l4_data_len":383,"flow_max_l4_data_len":383,"flow_avg_l4_data_len":383,"midstream":0,"l3_proto":"ip4","src_ip":"192.86.1.2","dst_ip":"200.68.120.99","src_port":5060,"dst_port":5060,"l4_proto":"udp"}
0482{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":482,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":92,"flow_packet_id":1,"flow_first_seen":1120470085969,"flow_last_seen":1120470085969,"flow_tot_l4_data_len":273,"flow_min_l4_data_len":273,"flow_max_l4_data_len":273,"flow_avg_l4_data_len":273,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"200.68.120.81","src_port":4901,"dst_port":29440,"l4_proto":"udp"}
0665{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":482,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":93,"flow_packet_id":1,"flow_first_seen":1120470086308,"flow_last_seen":1120470086308,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"102.168.1.1","src_port":2752,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":482,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":93,"flow_packet_id":1,"flow_first_seen":1120470086308,"flow_last_seen":1120470086308,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"102.168.1.1","src_port":2752,"dst_port":53,"l4_proto":"udp"}
0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":482,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":90,"flow_packet_id":3,"flow_first_seen":1120470083310,"flow_last_seen":1120470088311,"flow_tot_l4_data_len":156,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2752,"dst_port":53,"l4_proto":"udp"}
0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":482,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":96,"flow_packet_id":2,"flow_first_seen":1120470100319,"flow_last_seen":1120470100321,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2753,"dst_port":53,"l4_proto":"udp"}
0483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":482,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":84,"flow_packet_id":12,"flow_first_seen":1120470049696,"flow_last_seen":1120470116279,"flow_tot_l4_data_len":6183,"flow_min_l4_data_len":383,"flow_max_l4_data_len":830,"flow_avg_l4_data_len":515,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"200.68.120.81","src_port":5060,"dst_port":5060,"l4_proto":"udp"}
0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":482,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":94,"flow_packet_id":1,"flow_first_seen":1120470092317,"flow_last_seen":1120470092317,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.98.1.2","dst_ip":"25.168.1.1","src_port":2752,"dst_port":53,"l4_proto":"udp"}
0483{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":482,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":99,"flow_packet_id":1,"flow_first_seen":1120470114910,"flow_last_seen":1120470114910,"flow_tot_l4_data_len":383,"flow_min_l4_data_len":383,"flow_max_l4_data_len":383,"flow_avg_l4_data_len":383,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"200.68.120.81","l4_proto":118,"ndpi": {"proto":"Unknown"}}
0447{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":482,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":99,"flow_packet_id":1,"flow_first_seen":1120470114910,"flow_last_seen":1120470114910,"flow_tot_l4_data_len":383,"flow_min_l4_data_len":383,"flow_max_l4_data_len":383,"flow_avg_l4_data_len":383,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"200.68.120.81","l4_proto":118}
0481{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":482,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":95,"flow_packet_id":1,"flow_first_seen":1120470098867,"flow_last_seen":1120470098867,"flow_tot_l4_data_len":383,"flow_min_l4_data_len":383,"flow_max_l4_data_len":383,"flow_avg_l4_data_len":383,"midstream":0,"l3_proto":"ip4","src_ip":"192.169.1.2","dst_ip":"200.68.120.81","src_port":5060,"dst_port":5060,"l4_proto":"udp"}
0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":484,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":177,"flow_packet_id":1,"flow_first_seen":1120470717078,"flow_last_seen":1120470717078,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":68,"dst_port":67,"l4_proto":"udp"}
0784{"flow_id":177,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":484,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470717,"pkt_len":342,"pkt":"ADBUADRWAODtAW69CABFAAFIa4cAAIARSsrAqAECwKgBAQBEAEMBNA+RAQEGAAZtDDgAAAAAwKgBAgAAAAAAAAAAAAAAAN\/g7QFuvQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADUAAAAAAAAAAAAAAAAAAAAAYQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANABjglNjNQEDPQcBAODtAW69DAdkMDAyNDY1UQsAAABkMDAyNDY1LjwITVNGVCA1LjA3CgEPAwYsLi8fISv\/AAAA","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
0579{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":484,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":177,"flow_packet_id":1,"flow_first_seen":1120470717078,"flow_last_seen":1120470717078,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":68,"dst_port":67,"l4_proto":"udp","ndpi": {"proto":"DHCP","category":"Network"},"dhcp": {"fingerprint":"1,15,3,6,44,46,47,31,33,43"}}
1117{"flow_id":177,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":485,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470717,"pkt_len":590,"pkt":"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","pkt_caplen":590,"pkt_type":2048,"pkt_ipoffset":14}
0480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":486,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":178,"flow_packet_id":1,"flow_first_seen":1120470721915,"flow_last_seen":1120470721915,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.41","dst_ip":"192.168.1.255","src_port":138,"dst_port":394,"l4_proto":"udp"}
0660{"flow_id":178,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":486,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470721,"pkt_len":243,"pkt":"\/\/\/\/\/\/\/\/AGCXD+5yCABFAADlXM4AAIARWMHAqAEpwKgB\/wCKAYoA0YerEQJM2MCoASkAigC7AAAghU1FQkVDREJEQkRCQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0EAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJOAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAIQAAAAAAAAAAAOgDAAAAAABGAAAhAFYAAwABAAAAAgAyAFxNQUlMU0xPVFxCUk9XbkUAAQCA\/AoATEFCMTExAAAAAAAAAAAAAAUBAxAAAA8BVaoA","pkt_caplen":243,"pkt_type":2048,"pkt_ipoffset":14}
0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":487,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":100,"flow_packet_id":1,"flow_first_seen":1120470117343,"flow_last_seen":1120470117343,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"14.168.1.2","dst_ip":"192.168.1.1","src_port":2754,"dst_port":53,"l4_proto":"udp"}
0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":487,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":98,"flow_packet_id":3,"flow_first_seen":1120470113337,"flow_last_seen":1120470121594,"flow_tot_l4_data_len":121,"flow_min_l4_data_len":17,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2754,"dst_port":53,"l4_proto":"udp"}
0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":487,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":101,"flow_packet_id":2,"flow_first_seen":1120470129591,"flow_last_seen":1120470129593,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2755,"dst_port":53,"l4_proto":"udp"}
0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":490,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":102,"flow_packet_id":5,"flow_first_seen":1120470141614,"flow_last_seen":1120470150621,"flow_tot_l4_data_len":260,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2756,"dst_port":53,"l4_proto":"udp"}
0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":490,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":103,"flow_packet_id":2,"flow_first_seen":1120470158623,"flow_last_seen":1120470158625,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2757,"dst_port":53,"l4_proto":"udp"}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":490,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":179,"flow_packet_id":1,"flow_first_seen":1120470764674,"flow_last_seen":1120470764674,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2793,"dst_port":53,"l4_proto":"udp"}
0428{"flow_id":179,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":490,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470764,"pkt_len":76,"pkt":"ADBUADRWQODtAW69CABFAAA+a48AAIARS8zAqAECwKgBAQrpADUAKoUz6OwBAAABAAAAAAAAA3JlLQhzaXBwc3RhcgNjb20AAAEAAQ==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
0655{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":490,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":179,"flow_packet_id":1,"flow_first_seen":1120470764674,"flow_last_seen":1120470764674,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2793,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"re-.sippstar.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0428{"flow_id":179,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":491,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470765,"pkt_len":76,"pkt":"AEtUADRWAODtAW69CABFAAA+a5AAAIARS8vAqAECwKgBAQrpADUAKoUz6OwBAAABAAAAAAAAA3JlZwhzaXC6c3RhcgNjb20AAAEAAQ==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
0373{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":492,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470767,"pkt_len":76,"pkt":"ADBUADRWAODtAW69CABFAAA+a5EABGQRS8rAqAECwKgBAQrpADUAKoUz6OwBAAABAAAAAAAAA3JlZwhzaXBwc3RhcgNjb20AAAEAAQ==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
0203{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":492,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":42}
0554{"flow_id":179,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":493,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470768,"pkt_len":169,"pkt":"AODtAW69ADBUADRWCABFAACbAABAAGcRtv7AqAEBwKgBAgA1CukAh65F6OyBgAABAAEAAgACA3JlZwhzaXBwc3RhcgNjb20AAAEAAcAMAAEAAQAAAlgABFJi0SfAEAACAAEAAAJYAA8CbnMGaHNwZWVkA25ldADAEAACAAEAAAJYAAYDbnMzwEHAPgABAAEAAAUPAAQ+XcA7wFkAAQABAAAFDwAE1d1SAg==","pkt_caplen":169,"pkt_type":2048,"pkt_ipoffset":14}
0670{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":493,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":179,"flow_packet_id":3,"flow_first_seen":1120470764674,"flow_last_seen":1120470768028,"flow_tot_l4_data_len":219,"flow_min_l4_data_len":42,"flow_max_l4_data_len":135,"flow_avg_l4_data_len":73,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2793,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"reg.sippstar.com","num_queries":1,"num_answers":5,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"82.98.209.39"}}
0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":496,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":180,"flow_packet_id":1,"flow_first_seen":1120470774132,"flow_last_seen":1120470774132,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.108.1","src_port":2794,"dst_port":53,"l4_proto":"udp"}
0428{"flow_id":180,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":496,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470774,"pkt_len":76,"pkt":"ADBUADRWAODtAW69CABFAAA+a5IAAIARS8nAqAECwKhsAQrqADUAKnjTXO4BAAABAAAAAHEAA3NpcAljeWJlcmNpdHkCZGsAAAEAAQ==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
0657{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":496,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":180,"flow_packet_id":1,"flow_first_seen":1120470774132,"flow_last_seen":1120470774132,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.108.1","src_port":2794,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":497,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":104,"flow_packet_id":1,"flow_first_seen":1120470170646,"flow_last_seen":1120470170646,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2640,"dst_port":53,"l4_proto":"udp"}
0669{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":497,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":106,"flow_packet_id":1,"flow_first_seen":1120470173644,"flow_last_seen":1120470173644,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.37.115","dst_ip":"128.168.1.1","src_port":2758,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":497,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":106,"flow_packet_id":1,"flow_first_seen":1120470173644,"flow_last_seen":1120470173644,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.37.115","dst_ip":"128.168.1.1","src_port":2758,"dst_port":53,"l4_proto":"udp"}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":497,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":181,"flow_packet_id":1,"flow_first_seen":1120470775049,"flow_last_seen":1120470775049,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2795,"dst_port":53,"l4_proto":"udp"}
0428{"flow_id":181,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":497,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470775,"pkt_len":76,"pkt":"ADBUADRWAODtAW69CABFAAA+a5MAAIARfcjAqAECwKgBAQrrADUAKvLQ4u8BAAABAAAAAAAAA3NpcAljeWJlcmNpdHkCZGsAAAEAAQ==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
0655{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":497,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":181,"flow_packet_id":1,"flow_first_seen":1120470775049,"flow_last_seen":1120470775049,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2795,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":182,"flow_packet_id":1,"flow_first_seen":1120470775129,"flow_last_seen":1120470775129,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2794,"dst_port":53,"l4_proto":"udp"}
0428{"flow_id":182,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470775,"pkt_len":76,"pkt":"ADBUADRWAODtAW69CABFAAA+a5QAAIARS1jAqAECwKgBAQrqADUAKnjTXO4BAAABAAAAAAAAA3NpcAljeWJlcmNpdHkCZGsAAAEAAQ==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
0655{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":182,"flow_packet_id":1,"flow_first_seen":1120470775129,"flow_last_seen":1120470775129,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2794,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0428{"flow_id":181,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":499,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470776,"pkt_len":76,"pkt":"ADBUADRWAODtAW69CABFAAA+a20AAIARS8bAqAECwKgBAQrrADUAKvLQ4u8BAAABAAAAAAAAA3NpcAljeWJlcmNpdHkCZGsAAAEAAQ==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
0428{"flow_id":182,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470777,"pkt_len":76,"pkt":"ADBUADRWAODtAW69CABFAAA+a5YAAIARS8XAqAECwKgBAQrqADUAKnjTXO4BAAABAAAAAAAQA3NpcAljeWJlcmNpdHkCZGsAAAEAAQ==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
0428{"flow_id":181,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":501,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470778,"pkt_len":76,"pkt":"ADBUADRWAODtAW69CABFAAA+a5cAAIARS8TAqAECwKgBAQrrADUAKvLQ4m8BAAABAAAAAAAAA3NpcAljeWJlcmNpdHkCZGsAAAEAAQ==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
0373{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":502,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470779,"pkt_len":76,"pkt":"ADBUADRWAODtAW69CABFAAA+ayVzAIARS8PAqAECwKgBAQrqADUAKnjTXO4BAAABAAAABAAAA3NpcAljeWJlcmNpdHkCZGsAAAEAAQ==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
0203{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":502,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":42}
0498{"flow_id":181,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":503,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470779,"pkt_len":128,"pkt":"AODtAW69ADBUADRWCABFAAByAABAAEARtyfAqAEBwKgBAgA1CusAXsqj4u+BgAABAAEAAgAAA3NpcAljeWJlcmNpdHkCZGsAAAEAAcAMAAEAAQAAASwABNTyISPAEAACAAEAAAEsAAYDbnMxwBDAEAACAAEAAAEsAAYDbnMywBA=","pkt_caplen":128,"pkt_type":2048,"pkt_ipoffset":14}
0670{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":503,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":181,"flow_packet_id":4,"flow_first_seen":1120470775049,"flow_last_seen":1120470779408,"flow_tot_l4_data_len":220,"flow_min_l4_data_len":42,"flow_max_l4_data_len":94,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2795,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"sip.cybercity.dk","num_queries":1,"num_answers":3,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"212.242.33.35"}}
0498{"flow_id":182,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":504,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470779,"pkt_len":128,"pkt":"ACjtAW69ADBUADRWCABFAAByAABAAEARtyfAqAEBwKgBAgA1CuoAXlCmXO6BgAABAAEAAgAAA3NpcAljeWJlcmNpdHkCZGsAAAECAcAMAAEAAQAAASwABNTyISPAEAACAAEAAAEsAAYDbnMywBDAEAACAAEAAAEsAAYDbnMxwBA=","pkt_caplen":128,"pkt_type":2048,"pkt_ipoffset":14}
0670{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":504,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":182,"flow_packet_id":3,"flow_first_seen":1120470775129,"flow_last_seen":1120470779409,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":42,"flow_max_l4_data_len":94,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2794,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"sip.cybercity.dk","num_queries":1,"num_answers":3,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"212.242.33.35"}}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":505,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":183,"flow_packet_id":1,"flow_first_seen":1120470779487,"flow_last_seen":1120470779487,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2796,"dst_port":53,"l4_proto":"udp"}
0440{"flow_id":183,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":505,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470779,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa5kAAIARS7jAqAECwKgBAQrsADUANNbHUxEBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AkFrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0666{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":505,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":183,"flow_packet_id":1,"flow_first_seen":1120470779487,"flow_last_seen":1120470779487,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2796,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.ak","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0440{"flow_id":183,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":506,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470780,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa5oAAIARS7fAqAECwKgBAQrsADUANNbHUxEBAAABrQAAAAAABDtzaXAEX3VkcANzaXAJqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0714{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":506,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":183,"flow_packet_id":2,"flow_first_seen":1120470779487,"flow_last_seen":1120470780685,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2796,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.ak","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":508,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":184,"flow_packet_id":1,"flow_first_seen":1120470781608,"flow_last_seen":1120470781608,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.170.170","dst_ip":"170.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"udp"}
0456{"flow_id":184,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":508,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470781,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOa5wAAIARSrHAqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
0440{"flow_id":183,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":510,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470782,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa54AAIARS7PAqAECwKgBAQrsADUANNbHUxEBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":511,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470784,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAAB6a58AAIARS7LAqAECwKgBAQrsADUANNbHUxEBAAABAAAAAAAAJF9zaXAEX3VkcANzaXAJeXliZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0203{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":511,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":52}
0477{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":512,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":109,"flow_packet_id":1,"flow_first_seen":1120470187656,"flow_last_seen":1120470187656,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","l4_proto":37,"ndpi": {"proto":"Unknown"}}
0441{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":512,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":109,"flow_packet_id":1,"flow_first_seen":1120470187656,"flow_last_seen":1120470187656,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","l4_proto":37}
0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":512,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":107,"flow_packet_id":2,"flow_first_seen":1120470175647,"flow_last_seen":1120470179653,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2758,"dst_port":53,"l4_proto":"udp"}
0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":512,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":108,"flow_packet_id":1,"flow_first_seen":1120470187655,"flow_last_seen":1120470187655,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2759,"dst_port":53,"l4_proto":"udp"}
0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":512,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":185,"flow_packet_id":1,"flow_first_seen":1120470788806,"flow_last_seen":1120470788806,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.129","src_port":2796,"dst_port":53,"l4_proto":"udp"}
0440{"flow_id":185,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":512,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470788,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa6AAAIARS7HAqAECwKgBgQrsADUANNbHUxEBAAABAACqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":513,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":186,"flow_packet_id":1,"flow_first_seen":1120470796801,"flow_last_seen":1120470796801,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2797,"dst_port":53,"l4_proto":"udp"}
0437{"flow_id":186,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":513,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470796,"pkt_len":82,"pkt":"ADBUADRWAODtAW69CABFAABEa6EAAIARS7TAqAECwKgBAQrtADUAMFm\/yxIAAAABAAAAQAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycFwAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
0466{"flow_id":186,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":514,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470796,"pkt_len":105,"pkt":"AODtAW69ADBUADRWCABFiQBbAABAAEARtz7AqAEBwKgBAgA1Cu0ARzw7yxKAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
0951{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":515,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470796,"pkt_len":508,"pkt":"ADBUADRWAODtAW69CABFAKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqg==","pkt_caplen":508,"pkt_type":2048,"pkt_ipoffset":14}
0204{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":515,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":474}
0385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":517,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470797,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAACBa6MAAIARSyVzAAECwKgBAQruADUANPLDNxMBAAABAAAAAAAABF9zaXAEX3VkcANzaXB0Y3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0203{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":517,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":52}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":518,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":187,"flow_packet_id":1,"flow_first_seen":1120470798172,"flow_last_seen":1120470798172,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2798,"dst_port":53,"l4_proto":"udp"}
0440{"flow_id":187,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":518,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470798,"pkt_len":86,"pkt":"ADBUABRUAODtAW69CABFAABIa6QAAIARS63AqAECwKgBAQruADUANPLDNxMBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0666{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":518,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":187,"flow_packet_id":1,"flow_first_seen":1120470798172,"flow_last_seen":1120470798172,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2798,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0440{"flow_id":187,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":519,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470800,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa6UAAIARS6zAqAECwKgBAQruADUANPLDNxMBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":520,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470802,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CHdFAABIa6YAAIARS6vAqAECwKgBAQruADUANPLDNxMBAAABAAAAAAAABF9zaXAEXyVzAANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2167,"pkt_ipoffset":14}
0188{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":520,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","type":2167}
0440{"flow_id":187,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":521,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470806,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa6cAAIARS6rAqAECwKgBAQruADUANPLDNxMBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0665{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":522,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":110,"flow_packet_id":1,"flow_first_seen":1120470200673,"flow_last_seen":1120470200673,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.22.1.2","dst_ip":"192.168.1.1","src_port":2760,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":522,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":110,"flow_packet_id":1,"flow_first_seen":1120470200673,"flow_last_seen":1120470200673,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.22.1.2","dst_ip":"192.168.1.1","src_port":2760,"dst_port":53,"l4_proto":"udp"}
0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":522,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":111,"flow_packet_id":2,"flow_first_seen":1120470202676,"flow_last_seen":1120470208684,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2760,"dst_port":53,"l4_proto":"udp"}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":522,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":188,"flow_packet_id":1,"flow_first_seen":1120470814186,"flow_last_seen":1120470814186,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2799,"dst_port":53,"l4_proto":"udp"}
0436{"flow_id":188,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":522,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470814,"pkt_len":82,"pkt":"ADBUADRWAODtAW69CABFAABEa6gAAIARS63AqAECwKgBAQrvADXTMAi8HBQAAAABAAAAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
0662{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":522,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":188,"flow_packet_id":1,"flow_first_seen":1120470814186,"flow_last_seen":1120470814186,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2799,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":523,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":189,"flow_packet_id":1,"flow_first_seen":1120470814187,"flow_last_seen":1120470814187,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.119.2","src_port":53,"dst_port":2799,"l4_proto":"udp"}
0466{"flow_id":189,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":523,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470814,"pkt_len":105,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKh3AgA1Cu8AR+s3HBSAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAUAAAJxAACwlsb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
0664{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":523,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":189,"flow_packet_id":1,"flow_first_seen":1120470814187,"flow_last_seen":1120470814187,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.119.2","src_port":53,"dst_port":2799,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":0,"rsp_type":12,"rsp_addr":"0.0.0.0"}}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":525,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":190,"flow_packet_id":1,"flow_first_seen":1120470814334,"flow_last_seen":1120470814334,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2800,"dst_port":53,"l4_proto":"udp"}
0441{"flow_id":190,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":525,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470814,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa6oAAIARS6fAqAECwKgBAQrwADUANDG\/+BUBAAABAAAAAAAABF9zxXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0666{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":525,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":190,"flow_packet_id":1,"flow_first_seen":1120470814334,"flow_last_seen":1120470814334,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2800,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_s_p._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0441{"flow_id":190,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":528,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470815,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa6sAAIARS6bAqAECwKgBAQrwADUASDG\/+BUBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0441{"flow_id":190,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":529,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470817,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa6wAAIARS6XAqAECwKgBAQrwADUANDG\/+BUBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":530,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":191,"flow_packet_id":1,"flow_first_seen":1120470819393,"flow_last_seen":1120470819393,"flow_tot_l4_data_len":17,"flow_min_l4_data_len":17,"flow_max_l4_data_len":17,"flow_avg_l4_data_len":17,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2800,"dst_port":21,"l4_proto":"udp"}
0441{"flow_id":191,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":530,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470819,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAAAlcwAAAIARS6TAqAECwKgBAQrwABUANDG\/+BUBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3libXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0386{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":531,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470823,"pkt_len":86,"pkt":"ADBUADRWAODtAW69JXMAAABIa64AAIARS6PAqAECwKgBAQrwADUANDG\/+BUBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":9587,"pkt_ipoffset":14}
0188{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":531,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","type":9587}
0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":532,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":112,"flow_packet_id":2,"flow_first_seen":1120470216686,"flow_last_seen":1120470216688,"flow_tot_l4_data_len":88,"flow_min_l4_data_len":17,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2761,"dst_port":53,"l4_proto":"udp"}
0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":532,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":113,"flow_packet_id":3,"flow_first_seen":1120470216783,"flow_last_seen":1120470219780,"flow_tot_l4_data_len":156,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2762,"dst_port":53,"l4_proto":"udp"}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":535,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":192,"flow_packet_id":1,"flow_first_seen":1120470831400,"flow_last_seen":1120470831400,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2801,"dst_port":53,"l4_proto":"udp"}
0436{"flow_id":192,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":535,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470831,"pkt_len":82,"pkt":"ADBUADRWAODtAW69CABFAABEa7IAAIARS6PAqAECwKgBAQrxADUAMKq2ehcAAAABAAAAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAQAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
0665{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":535,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":192,"flow_packet_id":1,"flow_first_seen":1120470831400,"flow_last_seen":1120470831400,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2801,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":16396,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0466{"flow_id":192,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":536,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470831,"pkt_len":105,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1CvEAR40yeheAAAABAAEAAAAAATEBMCVzADEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
0680{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":536,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":192,"flow_packet_id":2,"flow_first_seen":1120470831400,"flow_last_seen":1120470831402,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2801,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":1,"num_answers":1,"reply_code":0,"query_type":16396,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0951{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":537,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470831,"pkt_len":508,"pkt":"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","pkt_caplen":508,"pkt_type":2048,"pkt_ipoffset":14}
0204{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":537,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":474}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":538,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":193,"flow_packet_id":1,"flow_first_seen":1120470831516,"flow_last_seen":1120470831516,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2568,"dst_port":53,"l4_proto":"udp"}
0440{"flow_id":193,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":538,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470831,"pkt_len":86,"pkt":"ADBUADRWAODsAW69CABFAABIa7QAAIARS53AqAECwKgBAQoIADUANBq8DxcBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0666{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":538,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":193,"flow_packet_id":1,"flow_first_seen":1120470831516,"flow_last_seen":1120470831516,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2568,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":540,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":194,"flow_packet_id":1,"flow_first_seen":1120470832512,"flow_last_seen":1120470832512,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2802,"dst_port":53,"l4_proto":"udp"}
0440{"flow_id":194,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":540,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470832,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa7UAAIARS5zAqAECwKgBAQryADUANBq8DxcBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0666{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":540,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":194,"flow_packet_id":1,"flow_first_seen":1120470832512,"flow_last_seen":1120470832512,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2802,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":541,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":195,"flow_packet_id":1,"flow_first_seen":1120470834515,"flow_last_seen":1120470834515,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":18162,"dst_port":53,"l4_proto":"udp"}
0440{"flow_id":195,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":541,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470834,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa7YAAIARS5vAqAECwKgBAUbyADUANBq8DxcBAAABRwAAAAAABF9zaXAEX3VkcANzaXAJY3loZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0440{"flow_id":194,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":544,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470836,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa7cAAIARS5rAqAECwKgBAQryADUANBq8DxcBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0518{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":545,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":116,"flow_packet_id":1,"flow_first_seen":1120470236795,"flow_last_seen":1120470236795,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"170.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
0482{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":545,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":116,"flow_packet_id":1,"flow_first_seen":1120470236795,"flow_last_seen":1120470236795,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"170.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"udp"}
0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":545,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":114,"flow_packet_id":1,"flow_first_seen":1120470233792,"flow_last_seen":1120470233792,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2763,"l4_proto":"udp"}
0440{"flow_id":194,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":545,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470840,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa7gAAIARS5nAqAECwKgBAQryADUANBq8DxcBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":546,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":196,"flow_packet_id":1,"flow_first_seen":1120470848525,"flow_last_seen":1120470848525,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2803,"dst_port":53,"l4_proto":"udp"}
0436{"flow_id":196,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":546,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470848,"pkt_len":82,"pkt":"ADBUADRWAODtAW5iCABFAABEa7kAAIARS5zAqAECwKgBAQrzADUAMMmyWxkAAAABAAAAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
0662{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":546,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":196,"flow_packet_id":1,"flow_first_seen":1120470848525,"flow_last_seen":1120470848525,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2803,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0466{"flow_id":196,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":547,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470848,"pkt_len":105,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1CvMAR6wuWxmAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAMMAAcAMAAyeAQAAJxAACwlsb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
0672{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":547,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":196,"flow_packet_id":2,"flow_first_seen":1120470848525,"flow_last_seen":1120470848527,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2803,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":12,"rsp_type":12,"rsp_addr":"0.0.0.0"}}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":549,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":197,"flow_packet_id":1,"flow_first_seen":1120470848643,"flow_last_seen":1120470848643,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2804,"dst_port":53,"l4_proto":"udp"}
0440{"flow_id":197,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":549,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470848,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIW7sAAIARS5bAqAECwKgBAQr0ADUANOq3PxkBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0666{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":549,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":197,"flow_packet_id":1,"flow_first_seen":1120470848643,"flow_last_seen":1120470848643,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2804,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0784{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":551,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470848,"pkt_len":382,"pkt":"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","pkt_caplen":382,"pkt_type":2048,"pkt_ipoffset":14}
0183{"basic_event_id":2,"basic_event_name":"Unknown L3 protocol","thread_id":0,"packet_id":551,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","protocol":2048}
0440{"flow_id":197,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":552,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470849,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa70AAIARS5TAqAECwKgBAQr0ADUANOq3JXMAAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJj6XR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":115,"flow_packet_id":4,"flow_first_seen":1120470233796,"flow_last_seen":1120470242804,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2764,"dst_port":53,"l4_proto":"udp"}
0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":118,"flow_packet_id":1,"flow_first_seen":1120470250807,"flow_last_seen":1120470250807,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2765,"l4_proto":"udp"}
0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":117,"flow_packet_id":1,"flow_first_seen":1120470250805,"flow_last_seen":1120470250805,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.110","dst_ip":"192.168.1.1","src_port":2765,"dst_port":53,"l4_proto":"udp"}
0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":119,"flow_packet_id":1,"flow_first_seen":1120470250906,"flow_last_seen":1120470250906,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.172","dst_ip":"192.168.1.1","src_port":2766,"dst_port":53,"l4_proto":"udp"}
0440{"flow_id":197,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470851,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa74AAIARS5PAqAECwKgBAQr0ADUANOq3PxkBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":554,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470853,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CFhFAABIa78AAIARS5LAqAECwKgBAQr0ADUANOq3PxkBAAABAAAAAAAABF9zaXAET3VkcANzaXAJY3liZXJjaXR5AuRrAFchAAE=","pkt_caplen":86,"pkt_type":2136,"pkt_ipoffset":14}
0188{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":554,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","type":2136}
0385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":555,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470857,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABJa8QAAIARS43AqAECwKgBAQr0ADUANOq3PxkBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0203{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":555,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":52}
0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":556,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":121,"flow_packet_id":1,"flow_first_seen":1120470259918,"flow_last_seen":1120470259918,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":14798,"dst_port":53,"l4_proto":"udp"}
0667{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":556,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":120,"flow_packet_id":2,"flow_first_seen":1120470251907,"flow_last_seen":1120470253909,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2766,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":556,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":120,"flow_packet_id":2,"flow_first_seen":1120470251907,"flow_last_seen":1120470253909,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2766,"dst_port":53,"l4_proto":"udp"}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":556,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":198,"flow_packet_id":1,"flow_first_seen":1120470865650,"flow_last_seen":1120470865650,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2805,"dst_port":51,"l4_proto":"udp"}
0436{"flow_id":198,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":556,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470865,"pkt_len":82,"pkt":"ADBUADRWAODtAW69CABFAABEa8UAAIARS5DAqAECwKgBAQr1ADMAMFWvzyVzAAABAAAAAAAAATEBMAEwAzEyNwdpbj1hZGRyBGFmcGEAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":199,"flow_packet_id":1,"flow_first_seen":1120470865651,"flow_last_seen":1120470865651,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2805,"l4_proto":"udp"}
0466{"flow_id":199,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470865,"pkt_len":105,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1CvUARzgrzxqAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsbmNhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
0662{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":199,"flow_packet_id":1,"flow_first_seen":1120470865651,"flow_last_seen":1120470865651,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2805,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":0,"rsp_type":12,"rsp_addr":"0.0.0.0"}}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":559,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":200,"flow_packet_id":1,"flow_first_seen":1120470865712,"flow_last_seen":1120470865712,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2806,"dst_port":53,"l4_proto":"udp"}
0440{"flow_id":200,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":559,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470865,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa8cAAIARS4rAqAECwKgBAQr2ADUANKezghsBAAABAAAAAAAABF9zaU0EX3VkcANzaXAJY3tiZXJbaXRNAmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0666{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":559,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":200,"flow_packet_id":1,"flow_first_seen":1120470865712,"flow_last_seen":1120470865712,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2806,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sim._udp.sip.c_ber_itm.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0440{"flow_id":200,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":561,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470866,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa8gAAIARS4jAqAECwKgBAQr2ADUANKezghsBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJYzRiZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0440{"flow_id":200,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":562,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470868,"pkt_len":86,"pkt":"ADB0ADRWAODtAW69CABFAABIa8kAAIARS4jAqAECwKgBAQr2ADUANKezghsBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0440{"flow_id":200,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":563,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470870,"pkt_len":86,"pkt":"ADBrADRWAODtAW69CABFAABIa8oAAIARW4fAqAECwKgBAQr2ADUANKezghsBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3hiZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0440{"flow_id":200,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":564,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470874,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa8sAAIARS4bAqAECwKgBAQr2ADUANKezghsBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AlFrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0508{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":565,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":125,"flow_packet_id":1,"flow_first_seen":1120470272927,"flow_last_seen":1120470272927,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"94.168.1.2","dst_ip":"192.168.1.1","src_port":2768,"dst_port":4,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":565,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":125,"flow_packet_id":1,"flow_first_seen":1120470272927,"flow_last_seen":1120470272927,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"94.168.1.2","dst_ip":"192.168.1.1","src_port":2768,"dst_port":4,"l4_proto":"udp"}
0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":565,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":122,"flow_packet_id":2,"flow_first_seen":1120470267920,"flow_last_seen":1120470267922,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2767,"dst_port":53,"l4_proto":"udp"}
0667{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":565,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":124,"flow_packet_id":1,"flow_first_seen":1120470270925,"flow_last_seen":1120470270925,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":35536,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":565,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":124,"flow_packet_id":1,"flow_first_seen":1120470270925,"flow_last_seen":1120470270925,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":35536,"dst_port":53,"l4_proto":"udp"}
0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":568,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470882,"pkt_len":82,"pkt":"ADBUADRWAODtAW69CAhFAABEa88AAIARS4bCqAECwKgBAQr3ADUAMHGrsxwAAAABAAAAqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqg==","pkt_caplen":82,"pkt_type":2056,"pkt_ipoffset":14}
0188{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":568,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","type":2056}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":569,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":201,"flow_packet_id":1,"flow_first_seen":1120470882726,"flow_last_seen":1120470882726,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2807,"l4_proto":"udp"}
0466{"flow_id":201,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":569,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470882,"pkt_len":105,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1CvcAR1QnsxyAAAABAAEAAAAAASVzAAEwAzEyNwdpbi1hZGRyBGF2cGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
0667{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":569,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":201,"flow_packet_id":1,"flow_first_seen":1120470882726,"flow_last_seen":1120470882726,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2807,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":1,"num_answers":1,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":571,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":202,"flow_packet_id":1,"flow_first_seen":1120470882846,"flow_last_seen":1120470882846,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2808,"dst_port":38709,"l4_proto":"udp"}
0440{"flow_id":202,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":571,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470882,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa9EAAIARS4DAqAECwKgBAQr4lzUAND6uRB4BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":572,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":203,"flow_packet_id":1,"flow_first_seen":1120470883845,"flow_last_seen":1120470883845,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2808,"dst_port":53,"l4_proto":"udp"}
0441{"flow_id":203,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":572,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470883,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa9IAAIARS3\/AqAECwKgBAQr4ADUAND6u6x4BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAHghAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0669{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":572,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":203,"flow_packet_id":1,"flow_first_seen":1120470883845,"flow_last_seen":1120470883845,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2808,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":30753,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0440{"flow_id":203,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":573,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470885,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa9MAAIARS37AqAECwKgBAQr4ADUAND6u6x4BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0675{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":573,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":203,"flow_packet_id":2,"flow_first_seen":1120470883845,"flow_last_seen":1120470885848,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2808,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":574,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":123,"flow_packet_id":2,"flow_first_seen":1120470267925,"flow_last_seen":1120470276933,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2768,"dst_port":53,"l4_proto":"udp"}
0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":574,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":126,"flow_packet_id":1,"flow_first_seen":1120470284935,"flow_last_seen":1120470284935,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2769,"dst_port":53,"l4_proto":"udp"}
0511{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":574,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":127,"flow_packet_id":1,"flow_first_seen":1120470284936,"flow_last_seen":1120470284936,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":117,"dst_port":2769,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":574,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":127,"flow_packet_id":1,"flow_first_seen":1120470284936,"flow_last_seen":1120470284936,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":117,"dst_port":2769,"l4_proto":"udp"}
0387{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":574,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470887,"pkt_len":86,"pkt":"ADBUADRWAODtAW69qYBFAABI\/dQAAIARS33AqAECwKgBAXP4ADUAND6u6x4BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaWJ5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":43392,"pkt_ipoffset":14}
0189{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":574,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","type":43392}
0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":575,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":204,"flow_packet_id":1,"flow_first_seen":1120470891857,"flow_last_seen":1120470891857,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":19192,"dst_port":53,"l4_proto":"udp"}
0440{"flow_id":204,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":575,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470891,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa1YAAIARS3zAqAECwKgBAUr4ADUAND6u6x4BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0667{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":575,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":204,"flow_packet_id":1,"flow_first_seen":1120470891857,"flow_last_seen":1120470891857,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":19192,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":576,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":205,"flow_packet_id":1,"flow_first_seen":1120470899859,"flow_last_seen":1120470899859,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2809,"dst_port":53,"l4_proto":"udp"}
0437{"flow_id":205,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":576,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470899,"pkt_len":82,"pkt":"ADBUADRWAODtAW69CABFAABEVdYAAIARS3\/AqAECwKgBAQr5ADUAMKjFfAAAAAABAAAAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
0662{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":576,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":205,"flow_packet_id":1,"flow_first_seen":1120470899859,"flow_last_seen":1120470899859,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2809,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0466{"flow_id":205,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":577,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470899,"pkt_len":105,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1CvkAR4tBfACAAAABAgEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
0671{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":577,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":205,"flow_packet_id":2,"flow_first_seen":1120470899859,"flow_last_seen":1120470899861,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2809,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":578,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":206,"flow_packet_id":1,"flow_first_seen":1120470899862,"flow_last_seen":1120470899862,"flow_tot_l4_data_len":1084,"flow_min_l4_data_len":1084,"flow_max_l4_data_len":1084,"flow_avg_l4_data_len":1084,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"212.242.33.35","src_port":5060,"dst_port":17860,"l4_proto":"udp"}
1822{"flow_id":206,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":578,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470899,"pkt_len":1118,"pkt":"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","pkt_caplen":1118,"pkt_type":2048,"pkt_ipoffset":14}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":579,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":207,"flow_packet_id":1,"flow_first_seen":1120470899865,"flow_last_seen":1120470899865,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.170.1.2","dst_ip":"192.168.1.1","src_port":2810,"dst_port":53,"l4_proto":"udp"}
0440{"flow_id":207,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":579,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470899,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa9gAAIARS3nAqgECwKgBAQr6ADUANDnJ8AEBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrd0YhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0667{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":579,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":207,"flow_packet_id":1,"flow_first_seen":1120470899865,"flow_last_seen":1120470899865,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.170.1.2","dst_ip":"192.168.1.1","src_port":2810,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":583,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":208,"flow_packet_id":1,"flow_first_seen":1120470900860,"flow_last_seen":1120470900860,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2810,"dst_port":53,"l4_proto":"udp"}
0440{"flow_id":208,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":583,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470900,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa9oAAIARS3fAqAECwKgBAQr6ADUANDnU8AEBAAABAAAAAAAABF9zaXAEX3VkcQNzaXAJTXliZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0666{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":583,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":208,"flow_packet_id":1,"flow_first_seen":1120470900860,"flow_last_seen":1120470900860,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2810,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udq.sip.mybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0440{"flow_id":208,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":584,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470902,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa9sAAIARS3bAqAECwKgBAQr6ADUANDnJ8AEBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAheQE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0440{"flow_id":208,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":587,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470904,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa9wAAIARS3XAqAECwKgBAQr6ADUANDnJ8AEBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJTnliZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":588,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":209,"flow_packet_id":1,"flow_first_seen":1120470908872,"flow_last_seen":1120470908872,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"128.168.1.2","dst_ip":"192.168.1.1","src_port":2810,"dst_port":53,"l4_proto":"udp"}
0440{"flow_id":209,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":588,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470908,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa90AAIARS3SAqAECwKgBAQr6ADUANDnJ8AEBAIgBAAAAABAABF9zaXAEX3VkcANzaXAJY3liZXNjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0478{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":589,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":128,"flow_packet_id":1,"flow_first_seen":1120470301328,"flow_last_seen":1120470301328,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","l4_proto":127,"ndpi": {"proto":"Unknown"}}
0442{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":589,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":128,"flow_packet_id":1,"flow_first_seen":1120470301328,"flow_last_seen":1120470301328,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","l4_proto":127}
0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":589,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":130,"flow_packet_id":1,"flow_first_seen":1120470304312,"flow_last_seen":1120470304312,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"120.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
0480{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":589,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":133,"flow_packet_id":1,"flow_first_seen":1120470315653,"flow_last_seen":1120470315653,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":138,"dst_port":138,"l4_proto":"udp"}
0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":589,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":129,"flow_packet_id":2,"flow_first_seen":1120470303331,"flow_last_seen":1120470307336,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2770,"dst_port":53,"l4_proto":"udp"}
0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":589,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":132,"flow_packet_id":1,"flow_first_seen":1120470315340,"flow_last_seen":1120470315340,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2771,"l4_proto":"udp"}
0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":589,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":131,"flow_packet_id":1,"flow_first_seen":1120470315338,"flow_last_seen":1120470315338,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.57","dst_ip":"192.168.1.1","src_port":2771,"dst_port":53,"l4_proto":"udp"}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":589,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":210,"flow_packet_id":1,"flow_first_seen":1120470916873,"flow_last_seen":1120470916873,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2811,"dst_port":53,"l4_proto":"udp"}
0436{"flow_id":210,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":589,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470916,"pkt_len":82,"pkt":"ADBUADRWAODtAW69CABFAABEa94AAIARS3fAqAECwKgBAQr7ADUAMMzBWAIAAAABqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqg==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":590,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":211,"flow_packet_id":1,"flow_first_seen":1120470916875,"flow_last_seen":1120470916875,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.233.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2811,"l4_proto":"udp"}
0466{"flow_id":211,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":590,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470916,"pkt_len":105,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqOkBwKgBAgA1CvsAR689eAKAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
0663{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":590,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":211,"flow_packet_id":1,"flow_first_seen":1120470916875,"flow_last_seen":1120470916875,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.233.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2811,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0334{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":591,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470916,"pkt_len":47,"pkt":"ADBUADRWAODtAaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":47,"pkt_type":43690,"pkt_ipoffset":14}
0189{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":591,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","type":43690}
0402{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":592,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470923,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AODtAW4zDABFAABOa+AAAIARSm3AqAECwKgB\/wCJAIkAOltBhVoBEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ0FDQUJNAAAgAAE=","pkt_caplen":92,"pkt_type":3072,"pkt_ipoffset":14}
0188{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":592,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","type":3072}
0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":593,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":212,"flow_packet_id":1,"flow_first_seen":1120470924263,"flow_last_seen":1120470924263,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":905,"l4_proto":"udp"}
0457{"flow_id":212,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":593,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470924,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOa+EAAIARSmzAqAECwKgB\/wCJA4kAOltBhVoBEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVIQ0FDQUNBQ0FDQUJNAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":595,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":135,"flow_packet_id":1,"flow_first_seen":1120470332553,"flow_last_seen":1120470332553,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.184.1.1","src_port":2772,"dst_port":53,"l4_proto":"udp"}
0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":595,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":134,"flow_packet_id":4,"flow_first_seen":1120470327552,"flow_last_seen":1120470336558,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2772,"dst_port":53,"l4_proto":"udp"}
0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":595,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":136,"flow_packet_id":1,"flow_first_seen":1120470344560,"flow_last_seen":1120470344560,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2773,"dst_port":53,"l4_proto":"udp"}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":595,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":213,"flow_packet_id":1,"flow_first_seen":1120470949427,"flow_last_seen":1120470949427,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2812,"dst_port":53,"l4_proto":"udp"}
0440{"flow_id":213,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":595,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470949,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa+MAAIARS27AqAECwKgBAQr8ADUANNjGUQIBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3lhZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0666{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":595,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":213,"flow_packet_id":1,"flow_first_seen":1120470949427,"flow_last_seen":1120470949427,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2812,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cyaercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0440{"flow_id":213,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":596,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470950,"pkt_len":86,"pkt":"ADBUADRWAODtAW49CABFAABIa+QAAIARS23AqAECwKgBAQr8ADUANNjGUZgBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0440{"flow_id":213,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470952,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa+UAAIARS2zAqAECwKgBAQr8ADUANNjGUQIBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":598,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470954,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa+YAEIARS6qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0203{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":598,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":52}
0440{"flow_id":213,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":599,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470958,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa+cAAIARS2rAqAECwKgBAQr8ADUANNjGUQIBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0666{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":600,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":138,"flow_packet_id":1,"flow_first_seen":1120470361584,"flow_last_seen":1120470361584,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.9.2","dst_ip":"192.168.1.1","src_port":2774,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":600,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":138,"flow_packet_id":1,"flow_first_seen":1120470361584,"flow_last_seen":1120470361584,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.9.2","dst_ip":"192.168.1.1","src_port":2774,"dst_port":53,"l4_proto":"udp"}
0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":600,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":137,"flow_packet_id":4,"flow_first_seen":1120470356585,"flow_last_seen":1120470365590,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2774,"dst_port":53,"l4_proto":"udp"}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":600,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":214,"flow_packet_id":1,"flow_first_seen":1120470966440,"flow_last_seen":1120470966440,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2813,"dst_port":53,"l4_proto":"udp"}
0436{"flow_id":214,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":600,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470966,"pkt_len":82,"pkt":"ADBUADRWAODtAW69CABFAABEa+gAAIARS23AqAECwKgBAQr9ADUAMIS+oAMAAAABAAAAAAAAATEBMAEwEzEyNwdpbi1hZGByBGFycGEAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
0665{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":600,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":214,"flow_packet_id":1,"flow_first_seen":1120470966440,"flow_last_seen":1120470966440,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2813,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127_in-ad_r_arpa___","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":601,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470966,"pkt_len":105,"pkt":"AJrtBW69ADBUADRWCABFAJFbeQBAAEARtz7AqAEBwKgBAgA1Cv0AR2c6oAOAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGTyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
0203{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":601,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":71}
1416{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":602,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470966,"pkt_len":856,"pkt":"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","pkt_caplen":856,"pkt_type":2048,"pkt_ipoffset":14}
0204{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":602,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":822}
0767{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":604,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470966,"pkt_len":371,"pkt":"ADBUADRWAODtAW69CABFAAFla+oIAKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":371,"pkt_type":2048,"pkt_ipoffset":14}
0204{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":604,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":337}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":605,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":215,"flow_packet_id":1,"flow_first_seen":1120470966852,"flow_last_seen":1120470966852,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2814,"dst_port":53,"l4_proto":"udp"}
0440{"flow_id":215,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":605,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470966,"pkt_len":86,"pkt":"ADBUADR2AODtAW69CABFAABIa+sAAIARS2bAqAECwKgBAQr+ADUANOrBPwUBAAABAAAAAAAABF9zaXAEX3VkcAJzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0668{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":605,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":215,"flow_packet_id":1,"flow_first_seen":1120470966852,"flow_last_seen":1120470966852,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2814,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":606,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470967,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa+yjAIARS2XAqAECwKgBAQr+ADUANOrBPwUBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0203{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":606,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":52}
0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":607,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470969,"pkt_len":86,"pkt":"ADBUADRWAODtASVzAABFAABIa+0AAIARS2TAqAECwKgBAQr+ADUANOrBPwUBAAABAAAAAAAABGRzaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":0,"pkt_ipoffset":14}
0185{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":607,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","type":0}
0400{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470971,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AODtAW69AABFAABOa+4AAIARSl\/AqAECwKgB\/wCJAIkAOlt8hV8BEAABAAAAAAAAIEVGRW9FSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ0FDQTVNAAAgAAE=","pkt_caplen":92,"pkt_type":0,"pkt_ipoffset":14}
0185{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","type":0}
0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":611,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":216,"flow_packet_id":1,"flow_first_seen":1120470971822,"flow_last_seen":1120470971822,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.37","src_port":29440,"dst_port":137,"l4_proto":"udp"}
0456{"flow_id":216,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":611,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470971,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOa+8AAIARSl7AqAECwKgBJXMAAIkAOls8hV8BEAABAAAAAAAAIUVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ0FDQUJNAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
0529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":611,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":216,"flow_packet_id":1,"flow_first_seen":1120470971822,"flow_last_seen":1120470971822,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.37","src_port":29440,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","category":"System"}}
0386{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":612,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470971,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAGVIa\/AAAIARS2HAqAECwKgBAQr+ADUANOrBPwUBAAABAAAACAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0203{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":612,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":52}
0442{"flow_id":215,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":614,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470975,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa\/IAAIARS1\/AqAECwKgBAQr+ADUANOrBPwUBAAABAAAAAAAABF9zaWIEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0714{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":614,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":215,"flow_packet_id":2,"flow_first_seen":1120470966852,"flow_last_seen":1120470975858,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2814,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"query":"_sib._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":615,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":139,"flow_packet_id":2,"flow_first_seen":1120470373592,"flow_last_seen":1120470373593,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2775,"dst_port":53,"l4_proto":"udp"}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":615,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":217,"flow_packet_id":1,"flow_first_seen":1120470983860,"flow_last_seen":1120470983860,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2815,"dst_port":53,"l4_proto":"udp"}
0438{"flow_id":217,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":615,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470983,"pkt_len":82,"pkt":"ADBUADRWAODtAW69CABFAABEa\/cAAIARS17AqAECwKgBAQr\/ADUAMJu6iQWqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqg==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
0672{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":615,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":217,"flow_packet_id":1,"flow_first_seen":1120470983860,"flow_last_seen":1120470983860,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2815,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":170,"num_answers":254,"reply_code":10,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":616,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470983,"pkt_len":105,"pkt":"AODtam69ADBUADRWCABFAABLAABcAEARtz7AqAEBhagBAgA1Cv8AR342iQWAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
0203{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":616,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":71}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":618,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":218,"flow_packet_id":1,"flow_first_seen":1120470983999,"flow_last_seen":1120470983999,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2816,"dst_port":53,"l4_proto":"udp"}
0441{"flow_id":218,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":618,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470983,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa\/kAAIARS1jAqAECwKgBAQsAADUANFW+1AYBAAABAAAAAAAABOxzaXAEX3VkcANzaHAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0666{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":618,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":218,"flow_packet_id":1,"flow_first_seen":1120470983999,"flow_last_seen":1120470983999,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2816,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.shp.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":622,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":219,"flow_packet_id":1,"flow_first_seen":1120470984353,"flow_last_seen":1120470984353,"flow_tot_l4_data_len":332,"flow_min_l4_data_len":332,"flow_max_l4_data_len":332,"flow_avg_l4_data_len":332,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"212.242.33.201","src_port":5060,"dst_port":5060,"l4_proto":"udp"}
0815{"flow_id":219,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":622,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470984,"pkt_len":366,"pkt":"ADBUADRWAODt4G69CABFAAFga\/oAAIARFdPAqAEC1PIhyRPEE8QBRC7GQUNLIHNpcDozNTEwNDcwNEBzaXAuY3liZXJjaXR5LmRrIFNJUC8yLjANCkZyb206ICJhcmlrIiA8c2lwOjM1MTA0qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq","pkt_caplen":366,"pkt_type":2048,"pkt_ipoffset":14}
0529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":622,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":219,"flow_packet_id":1,"flow_first_seen":1120470984353,"flow_last_seen":1120470984353,"flow_tot_l4_data_len":332,"flow_min_l4_data_len":332,"flow_max_l4_data_len":332,"flow_avg_l4_data_len":332,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"212.242.33.201","src_port":5060,"dst_port":5060,"l4_proto":"udp","ndpi": {"proto":"SIP","category":"VoIP"}}
0441{"flow_id":218,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":623,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470985,"pkt_len":86,"pkt":"ADBUADTZAODtAW69CABFAABIa\/sAAIARS1bAqAECwKgBAQsAADUANFW+1AYBAAABAAAAAAAABF9zaXAEX3VkUQNzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":624,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":220,"flow_packet_id":1,"flow_first_seen":1120470985348,"flow_last_seen":1120470985348,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"212.242.33.36","src_port":30000,"dst_port":40392,"l4_proto":"udp"}
0616{"flow_id":220,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":624,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470985,"pkt_len":214,"pkt":"ADBUADRWAODtAW69CABFAADIa\/wAAIARFmjAqAED1PIhJHUwncgAHRjegAhvrgAABNg3lstx1dXV1dXV1dXV1dXV1dXV1dXV1dXV1dXV1dXV1dXV1dXV1U\/V1dXV1REEHBgYEhIeEBQXahMcGAQEBQYBAQAHBQUZEwUbGRATGQUEBAcDAgMDAAACDQ0NAAEDDQwNAAABAgMBBgYBDw4eDAMABwYAAwMGBwEEBgYbHxwRaWBiFBEQFGoTFWBpYX10UltZ10dcVlJVREtCdatzeFp8bmgUag==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
0531{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":624,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":220,"flow_packet_id":1,"flow_first_seen":1120470985348,"flow_last_seen":1120470985348,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"212.242.33.36","src_port":30000,"dst_port":40392,"l4_proto":"udp","ndpi": {"proto":"RTP","category":"Media"}}
0481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":625,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":221,"flow_packet_id":1,"flow_first_seen":1120470985418,"flow_last_seen":1120470985418,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"37.115.0.36","src_port":30000,"dst_port":40392,"l4_proto":"udp"}
0617{"flow_id":221,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":625,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470985,"pkt_len":214,"pkt":"ADBUNjRWAODtAW69CABFAADIa\/0AAIARFmfAqAECJXMAJHUwncgAtL+rgAhvrwAABXg3lstxbmgVFGoUFBVpYG5qbG5kbGoWF2xubWBmfn9Fxsnw\/Ofz+uXwy+phC83k+sJTdF9CW\/bw8vzg7pfo8ldaT011Z399ZmV0dUN4S0dVQ2dmbWNsZGZkeGRvbxQUbBcRExAXEBwfHRAQFhAQHxwfGR4YEBcSFGxibWNqFRUXbmV3ckDQ93N9fmJnYmoVahcVZa9xWll+YGZ6cnJJZXpgeF1EQg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
0529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":625,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":221,"flow_packet_id":1,"flow_first_seen":1120470985418,"flow_last_seen":1120470985418,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"37.115.0.36","src_port":30000,"dst_port":40392,"l4_proto":"udp","ndpi": {"proto":"RTP","category":"Media"}}
0483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":626,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":222,"flow_packet_id":1,"flow_first_seen":1120470985421,"flow_last_seen":1120470985421,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"212.242.33.36","src_port":30000,"dst_port":40392,"l4_proto":"udp"}
0618{"flow_id":222,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":626,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470985,"pkt_len":214,"pkt":"ADBUADRWAODtAW69CABFAADIa\/4AAIARFmbAqAEC1PIhJHUwncgAtNyMgGNvsAAABhg3lstxcX5wdvzF0Et0dn92T1BB0VhmZ2V\/Z294Y2ZmahQXFhQREBAVb2ZPemVlYWJoYE9\/YWZkcnV4bWwVFRVqZ2xpYn94ZmBnY2F0zfjXdmNiYXhveHJgaW5jUFlwZTFkYc9lamoREhAQEx4fHx0XahRvRl1F3V5ESXjQxFFR39TfQXR\/Z9L15ebs6JeW7+DslJOU6uqUn5CcnJKX+Ofs5+Hg6g==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
0531{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":626,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":222,"flow_packet_id":1,"flow_first_seen":1120470985421,"flow_last_seen":1120470985421,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"212.242.33.36","src_port":30000,"dst_port":40392,"l4_proto":"udp","ndpi": {"proto":"RTP","category":"Media"}}
0615{"flow_id":222,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":627,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470985,"pkt_len":214,"pkt":"ADBUADRWAODtAW69CABFAADIa\/8AAIARFmXAqAEC1PIhJHUwncgAtJlvgAhvsQAABrg3lstxkpfo6Zfq5frn5uz6+gt4emFkcGBneMvv7+rslZHuqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
0620{"flow_id":222,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":628,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470985,"pkt_len":214,"pkt":"ADBUADRWAODtAW69CABFAADIbAAAAIARFmTAqAEC1PIhJHUwncgAtMoSgAhvsgAABVg3lstxRH1wXN719vLg7uHxw3h4ZHZhfE9UWV\/RzzPt5\/PklJOUlJXt4uzx+Pjm5vPHzf38\/fr05+3ikurj4ezn4+H6\/97AwEJ8S9DN9Vd1XdzJ8eDp6eXwzcXWRUJnZHhnYX96aHLW+ubo6eHg5\/DG\/MNRcE3B+ubNy+Xu7Obt7+qX4+7oy9fw3vLT3N1W19X49PBBf39jZnhmbBEdEWpqb2BweA==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
0615{"flow_id":222,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":629,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470985,"pkt_len":214,"pkt":"ADBUADRWAODtAW69CABFAADIbAEAAIARFmPAqAEC1PIhJHUwncgAtHeogAhvswAAB\/g3louqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
0614{"flow_id":222,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":630,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470985,"pkt_len":214,"pkt":"ADBUADRWAODtAW69CABFAADIbAIAAIARFmLAqAEC1PIhJHUwncgAqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
0483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":631,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":223,"flow_packet_id":1,"flow_first_seen":1120470985504,"flow_last_seen":1120470985504,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"214.242.33.36","src_port":30000,"dst_port":40392,"l4_proto":"udp"}
0618{"flow_id":223,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":631,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470985,"pkt_len":214,"pkt":"ADBUADRWAODtAW69CABFAADIbAMAAIARFmHAqAEC1vIhJHUwncgAtLaDgAhvtQAACTg3lstx6urs5ueUkJOXlZGWbOyVlOD46O7hzXXbxsfz\/OLg5ufawPH4wk3N8Obu7+Pv6unk4fj\/29jZ1\/7l4+Ht7JOXyOrs4vPPUfVQz97J5fLjl5GXkpyRl+jqk5aQlero4svh7+rslJfp6uP+9vbL+OLg5vj99\/LL9ub4+uTs6ZSVlJXp6Ojv7eqWkZOTnJORkpCbk5GXlpaRkJBK6ejp7JWXlw==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
0531{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":631,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":223,"flow_packet_id":1,"flow_first_seen":1120470985504,"flow_last_seen":1120470985504,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"214.242.33.36","src_port":30000,"dst_port":40392,"l4_proto":"udp","ndpi": {"proto":"RTP","category":"Media"}}
0482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":632,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":224,"flow_packet_id":1,"flow_first_seen":1120470985511,"flow_last_seen":1120470985511,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":0,"l3_proto":"ip4","src_ip":"81.168.1.2","dst_ip":"212.242.33.36","src_port":30000,"dst_port":40392,"l4_proto":"udp"}
0618{"flow_id":224,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":632,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470985,"pkt_len":214,"pkt":"ADBUADRWAODtAb+9CABFAADIbAQAAIARFm9RqAEC1PIhJHUwncgAtIfqgAhvtgAACdg3lstxlpDplp2cmZ6fkpaRle3n9PTy\/CVzAJKehIeEmJGRl52QlJaX6OOU6JaRlp2cn4WEhZ2RkJeV6WOQnZ6EhJOFh4WFmYWYk7+dkpCQ6u\/qkZ2fmYSYnZ6Rk5OU7OD6+Pbh4PTl+OTo6unl9eXi7f7c1VT\/+uiX6JSUkJCV7uXm\/Obu7pWWkZeW7OPpk5Ofm5+Yk5WV7untlJeSkpeV7+qWkA==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
0530{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":632,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":224,"flow_packet_id":1,"flow_first_seen":1120470985511,"flow_last_seen":1120470985511,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":0,"l3_proto":"ip4","src_ip":"81.168.1.2","dst_ip":"212.242.33.36","src_port":30000,"dst_port":40392,"l4_proto":"udp","ndpi": {"proto":"RTP","category":"Media"}}
0468{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":633,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470986,"pkt_len":146,"pkt":"ADBUADRWAODtAW69UgBFAACEbAVoAIARFqPAqAEC9PIhJHUxnckAcCyBgMgABjeWy3FCyQfKXvrGAwAAJMMAAAAJAAAGDIHKAAs3lstxAR0xMTg5NDI5Ny00NDMyYTlmOEAxOTIuMTY4LjEuMgYFU0lQUFMAAIHLAAY3lstxEHNlc3Npb24gc2h1dGRvd24AAAE=","pkt_caplen":146,"pkt_type":20992,"pkt_ipoffset":14}
0189{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":633,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","type":20992}
0440{"flow_id":218,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":634,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470987,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIbAYAAIARS0vAqAECwKgBAQsAADUANFW+1AYBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaVR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":635,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470989,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIbAdtAIARS07AqAECwKgBAQsAADUANFW+1AYBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaVN5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0203{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":635,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":52}
0440{"flow_id":218,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":636,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470993,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIbAgAAIARS0nAqAECwKgBAQsAADUANFW+1AYBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":637,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":140,"flow_packet_id":4,"flow_first_seen":1120470385615,"flow_last_seen":1120470394622,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2776,"dst_port":53,"l4_proto":"udp"}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":637,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":225,"flow_packet_id":1,"flow_first_seen":1120471001245,"flow_last_seen":1120471001245,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2822,"dst_port":53,"l4_proto":"udp"}
0436{"flow_id":225,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":637,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471001,"pkt_len":82,"pkt":"ADBUADRWAODtAW69CABFAABEbDoAAIARSxvAqAECwKgBAQsGADUAMBixDAgAAAABEAAAAAAAATEBMAEwAzHvNwdpbi1hZGRyBGFycGEAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":638,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471001,"pkt_len":105,"pkt":"AODtAW4lcwBUADRWCABFqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
0203{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":638,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":71}
0481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":639,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":226,"flow_packet_id":1,"flow_first_seen":1120471001263,"flow_last_seen":1120471001263,"flow_tot_l4_data_len":472,"flow_min_l4_data_len":472,"flow_max_l4_data_len":472,"flow_avg_l4_data_len":472,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"212.234.33.35","src_port":5060,"dst_port":5060,"l4_proto":"udp"}
1003{"flow_id":226,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":639,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471001,"pkt_len":506,"pkt":"ADBUADRWAODtAW69CABFAAHsbDsAAIARFQbAqAEC1OohIxPEE8QB2K3LUkVHSVNURVIgc2lwOnNpcC5jeWJlcmNpdHkuZGsgU0lQLzIuMA0KVmlhOiBTSVAvMi4wL1VEUCAxOTIuMTY4LjEuMjticmFuY2g9ejloRzRiS25wODg4NjAxNi00NGIxNGZlMzE5Mi4xNjguMS4yO3Jwb3J0DQpGcm9tOiA8c2lwOjM1MTA0NzIzQHNpcC5jeWJlcmNpdHkuZGs+O3RhZz04Nzk3MWENClRvOiA8c2lwOjM1MTA0NzIzQHNpcC5jeWJlcmNpdHkuZGs+DQpDYWxsLUlEOiAyOTg1ODFHNy00NjViMDc1MkAyOTg1ODA1MS00NjViMDdiMnMKQ29udGFjdDogcGVsIDxzaXA6MzUxMDQ3MjNAMTkyLjE2OC4xLjI6NTA2MDtsaW5lPTdkMzY1NThmMzEzNjcwNTE+O2V4cGlyZXM9MTIwMDtxBDAuNTAwDQpFeHBpcmVzOiAxMjAwDQpDU2VxOiA1IFJFR0lTVEVSDQpD\/G50ZW50LUxlbmd0aDogMA0KTWF4LUZvcndhYmRzOiA3MA0KVXNlci1BZ2VudDoiTmVybyBTSVBQUyBJUCBQaG9uZSBWZXJzaW9uIDIuOC41MS4xNg0KDQo=","pkt_caplen":506,"pkt_type":2048,"pkt_ipoffset":14}
0528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":639,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":226,"flow_packet_id":1,"flow_first_seen":1120471001263,"flow_last_seen":1120471001263,"flow_tot_l4_data_len":472,"flow_min_l4_data_len":472,"flow_max_l4_data_len":472,"flow_avg_l4_data_len":472,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"212.234.33.35","src_port":5060,"dst_port":5060,"l4_proto":"udp","ndpi": {"proto":"SIP","category":"VoIP"}}
0967{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":640,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471001,"pkt_len":522,"pkt":"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","pkt_caplen":522,"pkt_type":2048,"pkt_ipoffset":14}
0204{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":640,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":488}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":641,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":227,"flow_packet_id":1,"flow_first_seen":1120471001714,"flow_last_seen":1120471001714,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2823,"dst_port":53,"l4_proto":"udp"}
0440{"flow_id":227,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":641,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471001,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIbDwAAIARSxXAqAECwKgBAQsHADUANKe0ggkBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0666{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":641,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":227,"flow_packet_id":1,"flow_first_seen":1120471001714,"flow_last_seen":1120471001714,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2823,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0440{"flow_id":227,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":642,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471002,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIbD8gAIARSxTAqAECwKgBAQsHADUANKe0gjgBAAABAAAAAAAABF9zaXAEXXVkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":643,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471004,"pkt_len":86,"pkt":"ALlUADRWAODtAW69CABFAABIbD4Au4ARSxNYqAECwKgBAQsHADUANKe0ggkBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0203{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":643,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":52}
0440{"flow_id":227,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":644,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471006,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIbEcAAIARSwrAqAECwKgBAQsHADUANKe0ggkBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAApAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0675{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":644,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":227,"flow_packet_id":3,"flow_first_seen":1120471001714,"flow_last_seen":1120471006712,"flow_tot_l4_data_len":156,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2823,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":41,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0440{"flow_id":227,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":645,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471010,"pkt_len":86,"pkt":"ADBUADRWAODtAW6kCABFAABIbEgAAIARSwnAqAECwKgBAQsHADUANKe0ggkBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0675{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":645,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":227,"flow_packet_id":4,"flow_first_seen":1120471001714,"flow_last_seen":1120471010718,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2823,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0523{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":646,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":143,"flow_packet_id":1,"flow_first_seen":1120470402627,"flow_last_seen":1120470402627,"flow_tot_l4_data_len":13,"flow_min_l4_data_len":13,"flow_max_l4_data_len":13,"flow_avg_l4_data_len":13,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"212.242.33.35","src_port":5060,"dst_port":5060,"l4_proto":"udp","ndpi": {"proto":"SIP","category":"VoIP"}}
0478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":646,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":143,"flow_packet_id":1,"flow_first_seen":1120470402627,"flow_last_seen":1120470402627,"flow_tot_l4_data_len":13,"flow_min_l4_data_len":13,"flow_max_l4_data_len":13,"flow_avg_l4_data_len":13,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"212.242.33.35","src_port":5060,"dst_port":5060,"l4_proto":"udp"}
0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":646,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":142,"flow_packet_id":1,"flow_first_seen":1120470402625,"flow_last_seen":1120470402625,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2782,"l4_proto":"udp"}
0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":646,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":141,"flow_packet_id":1,"flow_first_seen":1120470402624,"flow_last_seen":1120470402624,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.33.2","dst_ip":"192.168.1.1","src_port":2782,"dst_port":53,"l4_proto":"udp"}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":646,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":228,"flow_packet_id":1,"flow_first_seen":1120471018720,"flow_last_seen":1120471018720,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2824,"dst_port":53,"l4_proto":"udp"}
0436{"flow_id":228,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":646,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471018,"pkt_len":82,"pkt":"ADBUADRWAODtAW69CABFAABEbEkAAIARSwzAqAECwKgBAQsIADUAMBesDQsAAAABAAAAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
0662{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":646,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":228,"flow_packet_id":1,"flow_first_seen":1120471018720,"flow_last_seen":1120471018720,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2824,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0466{"flow_id":228,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":647,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471018,"pkt_len":105,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1CwgAR8InDQuAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAgQAAJxAACwlsb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
0672{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":647,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":228,"flow_packet_id":2,"flow_first_seen":1120471018720,"flow_last_seen":1120471018721,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2824,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":12,"rsp_type":12,"rsp_addr":"0.0.0.0"}}
0727{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":649,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471018,"pkt_len":342,"pkt":"AODtAW69ADBUADRWCABFAAFIAABACDcRiuXU8iEjwKgBAhPEE8QBNCHFU0lQLzIuMCAxMDAgVHJ5aW5nDQpDYWxsLUlEOiAyOTg1ODE0qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
0204{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":649,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":308}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":652,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":229,"flow_packet_id":1,"flow_first_seen":1120471019307,"flow_last_seen":1120471019307,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2825,"dst_port":53,"l4_proto":"udp"}
0440{"flow_id":229,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":652,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471019,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIbEwAAIARSwXAqAECwKgBAQsJADUANMyuXQ0BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0666{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":652,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":229,"flow_packet_id":1,"flow_first_seen":1120471019307,"flow_last_seen":1120471019307,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2825,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0440{"flow_id":229,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":654,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471020,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIbE4AAIARSwPAqAECwKgBAQsJADUANMyuXQ0BAAABAAAAAAAAcF9zaXAEX3VkcANzaXAJY3liZXJjaXT5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0677{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":654,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":229,"flow_packet_id":2,"flow_first_seen":1120471019307,"flow_last_seen":1120471020302,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2825,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0440{"flow_id":229,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":656,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471022,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIbFAAAIARSwHAqAECwKgBAQsJADUANMyuXQ0BAAABAAAAAAAABF+qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0440{"flow_id":229,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471024,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIbFEAAIARSwDAqAECwKgBAQsJADUANMyuXQ0BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0714{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":229,"flow_packet_id":4,"flow_first_seen":1120471019307,"flow_last_seen":1120471024307,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2825,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0441{"flow_id":229,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":660,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471028,"pkt_len":86,"pkt":"ADBUADRWAODtARe9CABFAABIbFIAAIARSv\/AqAECwKgBAQsJADUANMyuXQ0BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":661,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":145,"flow_packet_id":1,"flow_first_seen":1120470419648,"flow_last_seen":1120470419648,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"0.168.1.2","dst_ip":"192.168.1.1","src_port":2783,"dst_port":53,"l4_proto":"udp"}
0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":661,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":144,"flow_packet_id":3,"flow_first_seen":1120470414647,"flow_last_seen":1120470423654,"flow_tot_l4_data_len":156,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2783,"dst_port":53,"l4_proto":"udp"}
0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":661,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":147,"flow_packet_id":1,"flow_first_seen":1120470431657,"flow_last_seen":1120470431657,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.5.2","src_port":53,"dst_port":2784,"l4_proto":"udp"}
0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":661,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":146,"flow_packet_id":1,"flow_first_seen":1120470431656,"flow_last_seen":1120470431656,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2784,"dst_port":53,"l4_proto":"udp"}
0479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":661,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":230,"flow_packet_id":1,"flow_first_seen":1120471033895,"flow_last_seen":1120471033895,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":138,"dst_port":138,"l4_proto":"udp"}
0659{"flow_id":230,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":661,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471033,"pkt_len":243,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAADlbFMAAIARSWPAqAECwKgB\/wCKAIoA0VrwEQ6FZMCoAQIAigC7AAAgRUVEQURBBENERURHREZDQUNBQ0FDQUNBQ0FDQUNBQ0EAIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ0FDQUJOAP+qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq","pkt_caplen":243,"pkt_type":2048,"pkt_ipoffset":14}
0576{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":661,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":230,"flow_packet_id":1,"flow_first_seen":1120471033895,"flow_last_seen":1120471033895,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":138,"dst_port":138,"l4_proto":"udp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"NetBIOS.SMBv1","category":"System"}}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":662,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":231,"flow_packet_id":1,"flow_first_seen":1120471036315,"flow_last_seen":1120471036315,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2826,"dst_port":53,"l4_proto":"udp"}
0436{"flow_id":231,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":662,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471036,"pkt_len":82,"pkt":"ADBUADRWAODtAW69CABFAABEbFQAAIARSwHAqAECwKgBAQsKADUAMJWmjw4AAAABAAAAAAAAATEBEgEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
0662{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":662,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":231,"flow_packet_id":1,"flow_first_seen":1120471036315,"flow_last_seen":1120471036315,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2826,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1._.0.127.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0466{"flow_id":231,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":663,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471036,"pkt_len":105,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1CwoAR3gijw6AAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAgAwAAcAMAAwAAQAAJRAACwlsb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
0672{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":663,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":231,"flow_packet_id":2,"flow_first_seen":1120471036315,"flow_last_seen":1120471036317,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2826,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":12,"rsp_type":12,"rsp_addr":"0.0.0.0"}}
0477{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":665,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":148,"flow_packet_id":1,"flow_first_seen":1120470442140,"flow_last_seen":1120470442140,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","l4_proto":19,"ndpi": {"proto":"Unknown"}}
0441{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":665,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":148,"flow_packet_id":1,"flow_first_seen":1120470442140,"flow_last_seen":1120470442140,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","l4_proto":19}
0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":665,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":105,"flow_packet_id":2,"flow_first_seen":1120470171641,"flow_last_seen":1120470448149,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2785,"dst_port":53,"l4_proto":"udp"}
0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":665,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":149,"flow_packet_id":1,"flow_first_seen":1120470444143,"flow_last_seen":1120470444143,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"200.168.1.2","dst_ip":"192.168.1.1","src_port":2785,"dst_port":53,"l4_proto":"udp"}
0529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":665,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":150,"flow_packet_id":1,"flow_first_seen":1120470447197,"flow_last_seen":1120470447197,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":35721,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","category":"System"}}
0478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":665,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":150,"flow_packet_id":1,"flow_first_seen":1120470447197,"flow_last_seen":1120470447197,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":35721,"l4_proto":"udp"}
0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":665,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":232,"flow_packet_id":1,"flow_first_seen":1120471048339,"flow_last_seen":1120471048339,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.114","src_port":2827,"dst_port":53,"l4_proto":"udp"}
0440{"flow_id":232,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":665,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471048,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIbFYAAIARSvvAqAECwKgBcgsLADUANESJJXMAAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0668{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":665,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":232,"flow_packet_id":1,"flow_first_seen":1120471048339,"flow_last_seen":1120471048339,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.114","src_port":2827,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":666,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":233,"flow_packet_id":1,"flow_first_seen":1120471049334,"flow_last_seen":1120471049334,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2827,"dst_port":53,"l4_proto":"udp"}
0440{"flow_id":233,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":666,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471049,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIbFcAAIARSvrAqAECwKgBAQsLADUANESJ5TABAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaU15Alb4AAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0666{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":666,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":233,"flow_packet_id":1,"flow_first_seen":1120471049334,"flow_last_seen":1120471049334,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2827,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercimy.v_","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0386{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":667,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471051,"pkt_len":86,"pkt":"ADBUADRWAODtAW69SABFAABIbFgAAIARQvnAqAECwKgBAQsLADUANESJ5TABAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":18432,"pkt_ipoffset":14}
0189{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":667,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","type":18432}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":668,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":234,"flow_packet_id":1,"flow_first_seen":1120471053339,"flow_last_seen":1120471053339,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.170.1.1","src_port":2827,"dst_port":53,"l4_proto":"udp"}
0440{"flow_id":234,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":668,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471053,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIbFkAAIARSvjAqAECwKoBAQsLADUANESJ5TABAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJj8XR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0666{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":668,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":234,"flow_packet_id":1,"flow_first_seen":1120471053339,"flow_last_seen":1120471053339,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.170.1.1","src_port":2827,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cyberc_ty.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":669,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471057,"pkt_len":86,"pkt":"ADBcADRHAODtAW69CABgAABIbFoAAIARSvfAqAECwKgBAQsLADUANESJ5TABAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liRXdjaXR5AmRrAAAhgAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0183{"basic_event_id":2,"basic_event_name":"Unknown L3 protocol","thread_id":0,"packet_id":669,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","protocol":2048}
0517{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":670,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":152,"flow_packet_id":1,"flow_first_seen":1120470456286,"flow_last_seen":1120470456286,"flow_tot_l4_data_len":493,"flow_min_l4_data_len":493,"flow_max_l4_data_len":493,"flow_avg_l4_data_len":493,"midstream":0,"l3_proto":"ip4","src_ip":"212.242.33.35","dst_ip":"192.168.1.2","src_port":9587,"dst_port":196,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
0481{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":670,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":152,"flow_packet_id":1,"flow_first_seen":1120470456286,"flow_last_seen":1120470456286,"flow_tot_l4_data_len":493,"flow_min_l4_data_len":493,"flow_max_l4_data_len":493,"flow_avg_l4_data_len":493,"midstream":0,"l3_proto":"ip4","src_ip":"212.242.33.35","dst_ip":"192.168.1.2","src_port":9587,"dst_port":196,"l4_proto":"udp"}
0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":670,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":151,"flow_packet_id":1,"flow_first_seen":1120470456151,"flow_last_seen":1120470456151,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.3","src_port":2786,"dst_port":53,"l4_proto":"udp"}
0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":670,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":153,"flow_packet_id":1,"flow_first_seen":1120470456513,"flow_last_seen":1120470456513,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.3.1","src_port":2787,"dst_port":53,"l4_proto":"udp"}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":670,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":235,"flow_packet_id":1,"flow_first_seen":1120471065347,"flow_last_seen":1120471065347,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2828,"dst_port":53,"l4_proto":"udp"}
0436{"flow_id":235,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":670,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471065,"pkt_len":82,"pkt":"ADBUADRWAODtAW69CABFAABEJXMAAIARSvrAqAECwKgBAQsMADUAMOiAPDIAAAABAAAAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
0662{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":670,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":235,"flow_packet_id":1,"flow_first_seen":1120471065347,"flow_last_seen":1120471065347,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2828,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":671,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":236,"flow_packet_id":1,"flow_first_seen":1120471065349,"flow_last_seen":1120471065349,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2572,"l4_proto":"udp"}
0466{"flow_id":236,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":671,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471065,"pkt_len":105,"pkt":"AODtAW69ADBUADRWCABFAABbAAFAAEARtz7AqAEBwKgBAgA1CgwAR8r8PDKAAAABAAHJAAAAATEBMAEwAzEyN0ppbi1hZGRyBGFycGEAABwAAcAMAAwAAQBsJxAADwlsb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
0668{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":671,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":236,"flow_packet_id":1,"flow_first_seen":1120471065349,"flow_last_seen":1120471065349,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2572,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":1,"num_answers":1,"reply_code":0,"query_type":0,"rsp_type":12,"rsp_addr":"0.0.0.0"}}
0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":673,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":237,"flow_packet_id":1,"flow_first_seen":1120471067211,"flow_last_seen":1120471067211,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":11,"dst_port":137,"l4_proto":"udp"}
0457{"flow_id":237,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":673,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471067,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABObF0AAIARSfDAqAECwKgB\/wALAIkAOls0hWcBEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ0FDQUJNAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
0527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":673,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":237,"flow_packet_id":1,"flow_first_seen":1120471067211,"flow_last_seen":1120471067211,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":11,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","category":"System"}}
0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":675,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":238,"flow_packet_id":1,"flow_first_seen":1120471068711,"flow_last_seen":1120471068711,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"62.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
0457{"flow_id":238,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":675,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471068,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABObF8AAIARSe4+qAECwKgB\/wCJAIkAOls0hWcBEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ0FDQUJNNQAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
0527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":675,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":238,"flow_packet_id":1,"flow_first_seen":1120471068711,"flow_last_seen":1120471068711,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"62.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","category":"System"}}
0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":676,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":154,"flow_packet_id":4,"flow_first_seen":1120470457512,"flow_last_seen":1120470465524,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2787,"dst_port":53,"l4_proto":"udp"}
0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":676,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":155,"flow_packet_id":1,"flow_first_seen":1120470473526,"flow_last_seen":1120470473526,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2788,"dst_port":53,"l4_proto":"udp"}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":676,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":239,"flow_packet_id":1,"flow_first_seen":1120471077370,"flow_last_seen":1120471077370,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2829,"dst_port":53,"l4_proto":"udp"}
0440{"flow_id":239,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":676,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471077,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIbGAAAIARSvHAqAECwKgBAQsNADUANFmE0DMBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0666{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":676,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":239,"flow_packet_id":1,"flow_first_seen":1120471077370,"flow_last_seen":1120471077370,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2829,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0440{"flow_id":239,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":677,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471078,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIbGEAAIARSvDAqAECwKgBAQsNADUANFmE0DMBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0386{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":678,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471080,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABjbGIAAIARSu\/AqAECwKgBAQsNADUANFmE0DMBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3muZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0203{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":678,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":52}
0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":679,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":240,"flow_packet_id":1,"flow_first_seen":1120471082371,"flow_last_seen":1120471082371,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.54.2","dst_ip":"192.168.1.1","src_port":2829,"dst_port":53,"l4_proto":"udp"}
0440{"flow_id":240,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":679,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471082,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIbGMAAIARSu7AqDYCwKgBAQsNADUANFmE0DMBAAABAAAAAAAABF9zaXAEX3VkcCVzAHAJY2liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0672{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":679,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":240,"flow_packet_id":1,"flow_first_seen":1120471082371,"flow_last_seen":1120471082371,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.54.2","dst_ip":"192.168.1.1","src_port":2829,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":28681,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":680,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":241,"flow_packet_id":1,"flow_first_seen":1120471084097,"flow_last_seen":1120471084097,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2830,"dst_port":53,"l4_proto":"udp"}
0428{"flow_id":241,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":680,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471084,"pkt_len":76,"pkt":"ADBUADQ1AODtAW69CABFAAA+bGQAAIARSvfAqAECwKgBAQsOADUAKohoTTQBAAABAAAAAAAAA3NpcAljeWJlcmNpdHkCZGsAQQEAAQ==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
0659{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":680,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":241,"flow_packet_id":1,"flow_first_seen":1120471084097,"flow_last_seen":1120471084097,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2830,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":16641,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0428{"flow_id":241,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":681,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471085,"pkt_len":76,"pkt":"JDBUADRWAODtAW69CABFAAA+bGUAAIARSvbAqAECwKgBAQsOADUAKohoTTUBAAABAAAAAAAAA3NpcAljeWJlcmNpdHkCZGsAAAEAAQ==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
0663{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":681,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":241,"flow_packet_id":2,"flow_first_seen":1120471084097,"flow_last_seen":1120471085095,"flow_tot_l4_data_len":84,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2830,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":242,"flow_packet_id":1,"flow_first_seen":1120471086377,"flow_last_seen":1120471086377,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"116.168.1.2","dst_ip":"192.168.1.1","src_port":2829,"dst_port":53,"l4_proto":"udp"}
0440{"flow_id":242,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471086,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIbGYAAIARSut0qAECwKgBAQsNADUANFmE0DMBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0666{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":242,"flow_packet_id":1,"flow_first_seen":1120471086377,"flow_last_seen":1120471086377,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"116.168.1.2","dst_ip":"192.168.1.1","src_port":2829,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0428{"flow_id":241,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":683,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471087,"pkt_len":76,"pkt":"ADBUADRWAODtAW69CABFAAA+bGcAAIARSvTAqAECwKgBAQsOADUAKohoTTUBAAABAAAAAAAAA3NpcAljeWJlcmNpdHkCZGsAAAEAAQ==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":684,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":156,"flow_packet_id":4,"flow_first_seen":1120470474627,"flow_last_seen":1120470482638,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2789,"dst_port":53,"l4_proto":"udp"}
0498{"flow_id":241,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":684,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471088,"pkt_len":128,"pkt":"AODtAW69ADBUADRWCABFAAByAABAAEARtyfAqAEBwKgBAgA1Cw4AXmA7TTWBgAABAAEAAgAAA3NpcAljeWJlcmNpdHkCZGsAAAEAAcAMAAEAAQAAAVUABNTyISPAEAAmAgEAAAEsAAYDbnMxwBDAEAACAAEAAAEsAAYDbnMywBA=","pkt_caplen":128,"pkt_type":2048,"pkt_ipoffset":14}
0670{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":684,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":241,"flow_packet_id":4,"flow_first_seen":1120471084097,"flow_last_seen":1120471088463,"flow_tot_l4_data_len":220,"flow_min_l4_data_len":42,"flow_max_l4_data_len":94,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2830,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"sip.cybercity.dk","num_queries":1,"num_answers":3,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"212.242.33.35"}}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":687,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":243,"flow_packet_id":1,"flow_first_seen":1120471094410,"flow_last_seen":1120471094410,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2831,"dst_port":53,"l4_proto":"udp"}
0436{"flow_id":243,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":687,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471094,"pkt_len":82,"pkt":"ADBUADRWAODtAW5TCABFAABEbGgAAIARSu3AqAECwKgBAQsPADUAMMF5YzYAAAABAAAAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
0662{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":687,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":243,"flow_packet_id":1,"flow_first_seen":1120471094410,"flow_last_seen":1120471094410,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2831,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0466{"flow_id":243,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":688,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471094,"pkt_len":105,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1Cw8AR6P1dTaAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
0672{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":688,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":243,"flow_packet_id":2,"flow_first_seen":1120471094410,"flow_last_seen":1120471094412,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2831,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":12,"rsp_type":12,"rsp_addr":"0.0.0.0"}}
0483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":690,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":158,"flow_packet_id":1,"flow_first_seen":1120470490782,"flow_last_seen":1120470490782,"flow_tot_l4_data_len":493,"flow_min_l4_data_len":493,"flow_max_l4_data_len":493,"flow_avg_l4_data_len":493,"midstream":0,"l3_proto":"ip4","src_ip":"212.242.33.35","dst_ip":"192.37.115.0","src_port":5060,"dst_port":5060,"l4_proto":"udp"}
0522{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":690,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":162,"flow_packet_id":1,"flow_first_seen":1120470495627,"flow_last_seen":1120470495627,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"170.170.170.170","dst_ip":"170.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
0486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":690,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":162,"flow_packet_id":1,"flow_first_seen":1120470495627,"flow_last_seen":1120470495627,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"170.170.170.170","dst_ip":"170.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"udp"}
0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":690,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":161,"flow_packet_id":1,"flow_first_seen":1120470494127,"flow_last_seen":1120470494127,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.194.1.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
0666{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":690,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":157,"flow_packet_id":1,"flow_first_seen":1120470490640,"flow_last_seen":1120470490640,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2790,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":690,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":157,"flow_packet_id":1,"flow_first_seen":1120470490640,"flow_last_seen":1120470490640,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2790,"dst_port":53,"l4_proto":"udp"}
0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":690,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":160,"flow_packet_id":1,"flow_first_seen":1120470492042,"flow_last_seen":1120470492042,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.53","dst_ip":"192.168.1.1","src_port":2791,"dst_port":53,"l4_proto":"udp"}
0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":690,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":164,"flow_packet_id":1,"flow_first_seen":1120470501450,"flow_last_seen":1120470501450,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.67.1","src_port":2791,"dst_port":53,"l4_proto":"udp"}
0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":690,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":163,"flow_packet_id":1,"flow_first_seen":1120470496048,"flow_last_seen":1120470496048,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2791,"dst_port":53,"l4_proto":"udp"}
0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":690,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":159,"flow_packet_id":1,"flow_first_seen":1120470491041,"flow_last_seen":1120470491041,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.79.2","dst_ip":"192.168.1.1","src_port":2791,"dst_port":53,"l4_proto":"udp"}
0385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":690,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471106,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIbG4A3oARSuPAqAECwKgBAQsQJXMANDd+8jYBAFEBAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0203{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":690,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":52}
0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":244,"flow_packet_id":1,"flow_first_seen":1120471107427,"flow_last_seen":1120471107427,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2832,"dst_port":53,"l4_proto":"udp"}
0440{"flow_id":244,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471107,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIbJIAAIARSuLAqAECwKgBAQsQADUANDd+8jYBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
0666{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":244,"flow_packet_id":1,"flow_first_seen":1120471107427,"flow_last_seen":1120471107427,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2832,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0667{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":195,"flow_packet_id":1,"flow_first_seen":1120470834515,"flow_last_seen":1120470834515,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":18162,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":195,"flow_packet_id":1,"flow_first_seen":1120470834515,"flow_last_seen":1120470834515,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":18162,"dst_port":53,"l4_proto":"udp"}
0522{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":184,"flow_packet_id":1,"flow_first_seen":1120470781608,"flow_last_seen":1120470781608,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.170.170","dst_ip":"170.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
0486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":184,"flow_packet_id":1,"flow_first_seen":1120470781608,"flow_last_seen":1120470781608,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.170.170","dst_ip":"170.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"udp"}
0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":177,"flow_packet_id":2,"flow_first_seen":1120470717078,"flow_last_seen":1120470717080,"flow_tot_l4_data_len":864,"flow_min_l4_data_len":308,"flow_max_l4_data_len":556,"flow_avg_l4_data_len":432,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":68,"dst_port":67,"l4_proto":"udp"}
0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":238,"flow_packet_id":1,"flow_first_seen":1120471068711,"flow_last_seen":1120471068711,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"62.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":237,"flow_packet_id":1,"flow_first_seen":1120471067211,"flow_last_seen":1120471067211,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":11,"dst_port":137,"l4_proto":"udp"}
0477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":172,"flow_packet_id":1,"flow_first_seen":1120470659308,"flow_last_seen":1120470659308,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.41","dst_ip":"107.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":173,"flow_packet_id":1,"flow_first_seen":1120470662062,"flow_last_seen":1120470662062,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"115.0.1.41","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
0478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":174,"flow_packet_id":1,"flow_first_seen":1120470670573,"flow_last_seen":1120470670573,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.41","dst_ip":"192.168.37.115","src_port":137,"dst_port":137,"l4_proto":"udp"}
0478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":171,"flow_packet_id":7,"flow_first_seen":1120470658556,"flow_last_seen":1120470672075,"flow_tot_l4_data_len":406,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.41","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
0479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":170,"flow_packet_id":1,"flow_first_seen":1120470657808,"flow_last_seen":1120470657808,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.184.189.41","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":167,"flow_packet_id":1,"flow_first_seen":1120470588783,"flow_last_seen":1120470588783,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.112","src_port":137,"dst_port":137,"l4_proto":"udp"}
0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":168,"flow_packet_id":1,"flow_first_seen":1120470589532,"flow_last_seen":1120470589532,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.136.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
0477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":0,"flow_packet_id":69,"flow_first_seen":1120469540839,"flow_last_seen":1120471067960,"flow_tot_l4_data_len":3994,"flow_min_l4_data_len":50,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":57,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
0480{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":230,"flow_packet_id":1,"flow_first_seen":1120471033895,"flow_last_seen":1120471033895,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":138,"dst_port":138,"l4_proto":"udp"}
0481{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":169,"flow_packet_id":3,"flow_first_seen":1120470657808,"flow_last_seen":1120470666317,"flow_tot_l4_data_len":546,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.41","dst_ip":"192.168.1.255","src_port":138,"dst_port":138,"l4_proto":"udp"}
0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":176,"flow_packet_id":1,"flow_first_seen":1120470685610,"flow_last_seen":1120470685610,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"200.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
0483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":219,"flow_packet_id":1,"flow_first_seen":1120470984353,"flow_last_seen":1120470984353,"flow_tot_l4_data_len":332,"flow_min_l4_data_len":332,"flow_max_l4_data_len":332,"flow_avg_l4_data_len":332,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"212.242.33.201","src_port":5060,"dst_port":5060,"l4_proto":"udp"}
0482{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":226,"flow_packet_id":1,"flow_first_seen":1120471001263,"flow_last_seen":1120471001263,"flow_tot_l4_data_len":472,"flow_min_l4_data_len":472,"flow_max_l4_data_len":472,"flow_avg_l4_data_len":472,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"212.234.33.35","src_port":5060,"dst_port":5060,"l4_proto":"udp"}
0484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":11,"flow_packet_id":57,"flow_first_seen":1120469572981,"flow_last_seen":1120471094413,"flow_tot_l4_data_len":22875,"flow_min_l4_data_len":13,"flow_max_l4_data_len":1084,"flow_avg_l4_data_len":401,"midstream":0,"l3_proto":"ip4","src_ip":"212.242.33.35","dst_ip":"192.168.1.2","src_port":5060,"dst_port":5060,"l4_proto":"udp"}
0532{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":178,"flow_packet_id":1,"flow_first_seen":1120470721915,"flow_last_seen":1120470721915,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.41","dst_ip":"192.168.1.255","src_port":138,"dst_port":394,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","category":"System"}}
0481{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":178,"flow_packet_id":1,"flow_first_seen":1120470721915,"flow_last_seen":1120470721915,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.41","dst_ip":"192.168.1.255","src_port":138,"dst_port":394,"l4_proto":"udp"}
0513{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":202,"flow_packet_id":1,"flow_first_seen":1120470882846,"flow_last_seen":1120470882846,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2808,"dst_port":38709,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
0477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":202,"flow_packet_id":1,"flow_first_seen":1120470882846,"flow_last_seen":1120470882846,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2808,"dst_port":38709,"l4_proto":"udp"}
0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":193,"flow_packet_id":1,"flow_first_seen":1120470831516,"flow_last_seen":1120470831516,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2568,"dst_port":53,"l4_proto":"udp"}
0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":236,"flow_packet_id":1,"flow_first_seen":1120471065349,"flow_last_seen":1120471065349,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2572,"l4_proto":"udp"}
0666{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":209,"flow_packet_id":1,"flow_first_seen":1120470908872,"flow_last_seen":1120470908872,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"128.168.1.2","dst_ip":"192.168.1.1","src_port":2810,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":209,"flow_packet_id":1,"flow_first_seen":1120470908872,"flow_last_seen":1120470908872,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"128.168.1.2","dst_ip":"192.168.1.1","src_port":2810,"dst_port":53,"l4_proto":"udp"}
0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":242,"flow_packet_id":1,"flow_first_seen":1120471086377,"flow_last_seen":1120471086377,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"116.168.1.2","dst_ip":"192.168.1.1","src_port":2829,"dst_port":53,"l4_proto":"udp"}
0510{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":191,"flow_packet_id":1,"flow_first_seen":1120470819393,"flow_last_seen":1120470819393,"flow_tot_l4_data_len":17,"flow_min_l4_data_len":17,"flow_max_l4_data_len":17,"flow_avg_l4_data_len":17,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2800,"dst_port":21,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":191,"flow_packet_id":1,"flow_first_seen":1120470819393,"flow_last_seen":1120470819393,"flow_tot_l4_data_len":17,"flow_min_l4_data_len":17,"flow_max_l4_data_len":17,"flow_avg_l4_data_len":17,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2800,"dst_port":21,"l4_proto":"udp"}
0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":165,"flow_packet_id":1,"flow_first_seen":1120470509447,"flow_last_seen":1120470509447,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2792,"dst_port":53,"l4_proto":"udp"}
0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":179,"flow_packet_id":3,"flow_first_seen":1120470764674,"flow_last_seen":1120470768028,"flow_tot_l4_data_len":219,"flow_min_l4_data_len":42,"flow_max_l4_data_len":135,"flow_avg_l4_data_len":73,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2793,"dst_port":53,"l4_proto":"udp"}
0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":182,"flow_packet_id":3,"flow_first_seen":1120470775129,"flow_last_seen":1120470779409,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":42,"flow_max_l4_data_len":94,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2794,"dst_port":53,"l4_proto":"udp"}
0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":180,"flow_packet_id":1,"flow_first_seen":1120470774132,"flow_last_seen":1120470774132,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.108.1","src_port":2794,"dst_port":53,"l4_proto":"udp"}
0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":181,"flow_packet_id":4,"flow_first_seen":1120470775049,"flow_last_seen":1120470779408,"flow_tot_l4_data_len":220,"flow_min_l4_data_len":42,"flow_max_l4_data_len":94,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2795,"dst_port":53,"l4_proto":"udp"}
0668{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":185,"flow_packet_id":1,"flow_first_seen":1120470788806,"flow_last_seen":1120470788806,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.129","src_port":2796,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":185,"flow_packet_id":1,"flow_first_seen":1120470788806,"flow_last_seen":1120470788806,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.129","src_port":2796,"dst_port":53,"l4_proto":"udp"}
0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":183,"flow_packet_id":3,"flow_first_seen":1120470779487,"flow_last_seen":1120470782692,"flow_tot_l4_data_len":156,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2796,"dst_port":53,"l4_proto":"udp"}
0667{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":186,"flow_packet_id":2,"flow_first_seen":1120470796801,"flow_last_seen":1120470796802,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2797,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":186,"flow_packet_id":2,"flow_first_seen":1120470796801,"flow_last_seen":1120470796802,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2797,"dst_port":53,"l4_proto":"udp"}
0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":187,"flow_packet_id":3,"flow_first_seen":1120470798172,"flow_last_seen":1120470806184,"flow_tot_l4_data_len":156,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2798,"dst_port":53,"l4_proto":"udp"}
0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":189,"flow_packet_id":1,"flow_first_seen":1120470814187,"flow_last_seen":1120470814187,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.119.2","src_port":53,"dst_port":2799,"l4_proto":"udp"}
0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":188,"flow_packet_id":1,"flow_first_seen":1120470814186,"flow_last_seen":1120470814186,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2799,"dst_port":53,"l4_proto":"udp"}
0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":190,"flow_packet_id":3,"flow_first_seen":1120470814334,"flow_last_seen":1120470817390,"flow_tot_l4_data_len":156,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2800,"dst_port":53,"l4_proto":"udp"}
0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":192,"flow_packet_id":2,"flow_first_seen":1120470831400,"flow_last_seen":1120470831402,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2801,"dst_port":53,"l4_proto":"udp"}
0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":194,"flow_packet_id":3,"flow_first_seen":1120470832512,"flow_last_seen":1120470840523,"flow_tot_l4_data_len":156,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2802,"dst_port":53,"l4_proto":"udp"}
0510{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":198,"flow_packet_id":1,"flow_first_seen":1120470865650,"flow_last_seen":1120470865650,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2805,"dst_port":51,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":198,"flow_packet_id":1,"flow_first_seen":1120470865650,"flow_last_seen":1120470865650,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2805,"dst_port":51,"l4_proto":"udp"}
0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":196,"flow_packet_id":2,"flow_first_seen":1120470848525,"flow_last_seen":1120470848527,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2803,"dst_port":53,"l4_proto":"udp"}
0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":197,"flow_packet_id":3,"flow_first_seen":1120470848643,"flow_last_seen":1120470851639,"flow_tot_l4_data_len":156,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2804,"dst_port":53,"l4_proto":"udp"}
0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":199,"flow_packet_id":1,"flow_first_seen":1120470865651,"flow_last_seen":1120470865651,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2805,"l4_proto":"udp"}
0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":200,"flow_packet_id":5,"flow_first_seen":1120470865712,"flow_last_seen":1120470874723,"flow_tot_l4_data_len":260,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2806,"dst_port":53,"l4_proto":"udp"}
0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":201,"flow_packet_id":1,"flow_first_seen":1120470882726,"flow_last_seen":1120470882726,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2807,"l4_proto":"udp"}
0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":204,"flow_packet_id":1,"flow_first_seen":1120470891857,"flow_last_seen":1120470891857,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":19192,"dst_port":53,"l4_proto":"udp"}
0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":203,"flow_packet_id":2,"flow_first_seen":1120470883845,"flow_last_seen":1120470885848,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2808,"dst_port":53,"l4_proto":"udp"}
0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":205,"flow_packet_id":2,"flow_first_seen":1120470899859,"flow_last_seen":1120470899861,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2809,"dst_port":53,"l4_proto":"udp"}
0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":208,"flow_packet_id":3,"flow_first_seen":1120470900860,"flow_last_seen":1120470904866,"flow_tot_l4_data_len":156,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2810,"dst_port":53,"l4_proto":"udp"}
0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":211,"flow_packet_id":1,"flow_first_seen":1120470916875,"flow_last_seen":1120470916875,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.233.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2811,"l4_proto":"udp"}
0666{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":210,"flow_packet_id":1,"flow_first_seen":1120470916873,"flow_last_seen":1120470916873,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2811,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":210,"flow_packet_id":1,"flow_first_seen":1120470916873,"flow_last_seen":1120470916873,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2811,"dst_port":53,"l4_proto":"udp"}
0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":213,"flow_packet_id":4,"flow_first_seen":1120470949427,"flow_last_seen":1120470958433,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2812,"dst_port":53,"l4_proto":"udp"}
0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":214,"flow_packet_id":1,"flow_first_seen":1120470966440,"flow_last_seen":1120470966440,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2813,"dst_port":53,"l4_proto":"udp"}
0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":215,"flow_packet_id":2,"flow_first_seen":1120470966852,"flow_last_seen":1120470975858,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2814,"dst_port":53,"l4_proto":"udp"}
0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":217,"flow_packet_id":1,"flow_first_seen":1120470983860,"flow_last_seen":1120470983860,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2815,"dst_port":53,"l4_proto":"udp"}
0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":218,"flow_packet_id":4,"flow_first_seen":1120470983999,"flow_last_seen":1120470993243,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2816,"dst_port":53,"l4_proto":"udp"}
0666{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":225,"flow_packet_id":1,"flow_first_seen":1120471001245,"flow_last_seen":1120471001245,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2822,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":225,"flow_packet_id":1,"flow_first_seen":1120471001245,"flow_last_seen":1120471001245,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2822,"dst_port":53,"l4_proto":"udp"}
0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":227,"flow_packet_id":4,"flow_first_seen":1120471001714,"flow_last_seen":1120471010718,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2823,"dst_port":53,"l4_proto":"udp"}
0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":228,"flow_packet_id":2,"flow_first_seen":1120471018720,"flow_last_seen":1120471018721,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2824,"dst_port":53,"l4_proto":"udp"}
0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":229,"flow_packet_id":5,"flow_first_seen":1120471019307,"flow_last_seen":1120471028313,"flow_tot_l4_data_len":260,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2825,"dst_port":53,"l4_proto":"udp"}
0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":231,"flow_packet_id":2,"flow_first_seen":1120471036315,"flow_last_seen":1120471036317,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2826,"dst_port":53,"l4_proto":"udp"}
0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":233,"flow_packet_id":1,"flow_first_seen":1120471049334,"flow_last_seen":1120471049334,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2827,"dst_port":53,"l4_proto":"udp"}
0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":232,"flow_packet_id":1,"flow_first_seen":1120471048339,"flow_last_seen":1120471048339,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.114","src_port":2827,"dst_port":53,"l4_proto":"udp"}
0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":235,"flow_packet_id":1,"flow_first_seen":1120471065347,"flow_last_seen":1120471065347,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2828,"dst_port":53,"l4_proto":"udp"}
0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":240,"flow_packet_id":1,"flow_first_seen":1120471082371,"flow_last_seen":1120471082371,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.54.2","dst_ip":"192.168.1.1","src_port":2829,"dst_port":53,"l4_proto":"udp"}
0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":239,"flow_packet_id":2,"flow_first_seen":1120471077370,"flow_last_seen":1120471078365,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2829,"dst_port":53,"l4_proto":"udp"}
0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":241,"flow_packet_id":4,"flow_first_seen":1120471084097,"flow_last_seen":1120471088463,"flow_tot_l4_data_len":220,"flow_min_l4_data_len":42,"flow_max_l4_data_len":94,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2830,"dst_port":53,"l4_proto":"udp"}
0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":243,"flow_packet_id":2,"flow_first_seen":1120471094410,"flow_last_seen":1120471094412,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2831,"dst_port":53,"l4_proto":"udp"}
0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":244,"flow_packet_id":1,"flow_first_seen":1120471107427,"flow_last_seen":1120471107427,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2832,"dst_port":53,"l4_proto":"udp"}
0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":166,"flow_packet_id":1,"flow_first_seen":1120470509449,"flow_last_seen":1120470509449,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"240.168.1.2","src_port":53,"dst_port":2792,"l4_proto":"udp"}
0477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":216,"flow_packet_id":1,"flow_first_seen":1120470971822,"flow_last_seen":1120470971822,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.37","src_port":29440,"dst_port":137,"l4_proto":"udp"}
0532{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":206,"flow_packet_id":1,"flow_first_seen":1120470899862,"flow_last_seen":1120470899862,"flow_tot_l4_data_len":1084,"flow_min_l4_data_len":1084,"flow_max_l4_data_len":1084,"flow_avg_l4_data_len":1084,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"212.242.33.35","src_port":5060,"dst_port":17860,"l4_proto":"udp","ndpi": {"proto":"SIP","category":"VoIP"}}
0487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":206,"flow_packet_id":1,"flow_first_seen":1120470899862,"flow_last_seen":1120470899862,"flow_tot_l4_data_len":1084,"flow_min_l4_data_len":1084,"flow_max_l4_data_len":1084,"flow_avg_l4_data_len":1084,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"212.242.33.35","src_port":5060,"dst_port":17860,"l4_proto":"udp"}
0527{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":212,"flow_packet_id":1,"flow_first_seen":1120470924263,"flow_last_seen":1120470924263,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":905,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","category":"System"}}
0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":212,"flow_packet_id":1,"flow_first_seen":1120470924263,"flow_last_seen":1120470924263,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":905,"l4_proto":"udp"}
0483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":224,"flow_packet_id":1,"flow_first_seen":1120470985511,"flow_last_seen":1120470985511,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":0,"l3_proto":"ip4","src_ip":"81.168.1.2","dst_ip":"212.242.33.36","src_port":30000,"dst_port":40392,"l4_proto":"udp"}
0484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":222,"flow_packet_id":5,"flow_first_seen":1120470985421,"flow_last_seen":1120470985466,"flow_tot_l4_data_len":900,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"212.242.33.36","src_port":30000,"dst_port":40392,"l4_proto":"udp"}
0484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":220,"flow_packet_id":1,"flow_first_seen":1120470985348,"flow_last_seen":1120470985348,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"212.242.33.36","src_port":30000,"dst_port":40392,"l4_proto":"udp"}
0484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":223,"flow_packet_id":1,"flow_first_seen":1120470985504,"flow_last_seen":1120470985504,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"214.242.33.36","src_port":30000,"dst_port":40392,"l4_proto":"udp"}
0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":207,"flow_packet_id":1,"flow_first_seen":1120470899865,"flow_last_seen":1120470899865,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.170.1.2","dst_ip":"192.168.1.1","src_port":2810,"dst_port":53,"l4_proto":"udp"}
0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":234,"flow_packet_id":1,"flow_first_seen":1120471053339,"flow_last_seen":1120471053339,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.170.1.1","src_port":2827,"dst_port":53,"l4_proto":"udp"}
0518{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":175,"flow_packet_id":1,"flow_first_seen":1120470684859,"flow_last_seen":1120470684859,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.170.170","src_port":43690,"dst_port":43690,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
0482{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":175,"flow_packet_id":1,"flow_first_seen":1120470684859,"flow_last_seen":1120470684859,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.170.170","src_port":43690,"dst_port":43690,"l4_proto":"udp"}
0482{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":221,"flow_packet_id":1,"flow_first_seen":1120470985418,"flow_last_seen":1120470985418,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"37.115.0.36","src_port":30000,"dst_port":40392,"l4_proto":"udp"}
0158{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap"}