0373{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype-conference-call.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
0480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype-conference-call.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1501061916646,"flow_last_seen":1501061916646,"flow_tot_l4_data_len":112,"flow_min_l4_data_len":112,"flow_max_l4_data_len":112,"flow_avg_l4_data_len":112,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.20","dst_ip":"104.46.40.49","src_port":49282,"dst_port":60642,"l4_proto":"udp"}
0523{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype-conference-call.pcap","pkt_oversize":false,"pkt_ts":1501061916,"pkt_len":146,"pkt":"XEl5dU5qxCwDBkn+CABFAACEzEwAAEARWwHAqAIUaC4oMcCC7OIAcIaYAAEAVCESpELFWk\/f3gwyXjBMYMcABgAJZ3BwZTp6V3lrAAAAACQABG7\/\/v+AKgAIAAAAAAC\/QxeAVAABMQAAAIBwAAQAAAADAAgAFMOSZmY4XAmhNOQKDGwu8wYai2KrgCgABB+1m2s=","pkt_caplen":146,"pkt_type":2048,"pkt_ipoffset":14}
0595{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype-conference-call.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1501061916646,"flow_last_seen":1501061916646,"flow_tot_l4_data_len":112,"flow_min_l4_data_len":112,"flow_max_l4_data_len":112,"flow_avg_l4_data_len":112,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.20","dst_ip":"104.46.40.49","src_port":49282,"dst_port":60642,"l4_proto":"udp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"STUN.SkypeCall","category":"VoIP"}}
0521{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype-conference-call.pcap","pkt_oversize":false,"pkt_ts":1501061916,"pkt_len":146,"pkt":"xCwDBkn+XEl5dU5qCABFAACERTYAAG4RtBdoLigxwKgCFOziwIIAcHm6AAEAVCESpEI8yF2moGJ4zvU2wuEABgAJeld5azpncHBlAAAAACQABG7\/\/v+AKQAIAAAAAAACl5OAVAABMQAAAIBwAAQAAAADAAgAFHnv8xovieyQrsQ6j2MMyqg8GNj1gCgABORvfhY=","pkt_caplen":146,"pkt_type":2048,"pkt_ipoffset":14}
0476{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype-conference-call.pcap","pkt_oversize":false,"pkt_ts":1501061916,"pkt_len":114,"pkt":"XEl5dU5qxCwDBkn+CABFAABkjWYAAEARmgfAqAIUaC4oMcCC7OIAUFnEAQEANCESpEI8yF2moGJ4zvU2wuEAIAAIAAHN8Ek8jHOAcAAEAAAAAwAIABSgsacIkgIOfzKEQbuerkeFTLj204AoAASK\/70B","pkt_caplen":114,"pkt_type":2048,"pkt_ipoffset":14}
0476{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype-conference-call.pcap","pkt_oversize":false,"pkt_ts":1501061916,"pkt_len":114,"pkt":"xCwDBkn+XEl5dU5qCABFAABkRTcAAG4RtDZoLigxwKgCFOziwIIAUMppAQEANCESpELFWk\/f3gwyXjBMYMcAIAAIAAHhkH7lJQGAcAAEAAAAAwAIABQrKEEJgBBMTTHUJMwo4kS9VvHVU4AoAARKHr2N","pkt_caplen":114,"pkt_type":2048,"pkt_ipoffset":14}
0521{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype-conference-call.pcap","pkt_oversize":false,"pkt_ts":1501061916,"pkt_len":146,"pkt":"xCwDBkn+XEl5dU5qCABFAACERTgAAG4RtBVoLigxwKgCFOziwIIAcHm6AAEAVCESpEI8yF2moGJ4zvU2wuEABgAJeld5azpncHBlAAAAACQABG7\/\/v+AKQAIAAAAAAACl5OAVAABMQAAAIBwAAQAAAADAAgAFHnv8xovieyQrsQ6j2MMyqg8GNj1gCgABORvfhY=","pkt_caplen":146,"pkt_type":2048,"pkt_ipoffset":14}
0476{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype-conference-call.pcap","pkt_oversize":false,"pkt_ts":1501061916,"pkt_len":114,"pkt":"XEl5dU5qxCwDBkn+CABFAABk+qAAAEARLM3AqAIUaC4oMcCC7OIAUFnEAQEANCESpEI8yF2moGJ4zvU2wuEAIAAIAAHN8Ek8jHOAcAAEAAAAAwAIABSgsacIkgIOfzKEQbuerkeFTLj204AoAASK\/70B","pkt_caplen":114,"pkt_type":2048,"pkt_ipoffset":14}
0526{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype-conference-call.pcap","pkt_oversize":false,"pkt_ts":1501061916,"pkt_len":150,"pkt":"XEl5dU5qxCwDBkn+CABFAACIyYsAAEARXb7AqAIUaC4oMcCC7OIAdCd0AAEAWCESpELFWk\/f3gwyXjBMYMcABgAJZ3BwZTp6V3lrAAAAACQABG7\/\/v8AJQAAgCoACAAAAAAAv0MXgFQAATEAAACAcAAEAAAAAwAIABT1JqdLy2bXvEeDsPwpSdGXvE59K4AoAARcs9hB","pkt_caplen":150,"pkt_type":2048,"pkt_ipoffset":14}
0529{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype-conference-call.pcap","pkt_oversize":false,"pkt_ts":1501061916,"pkt_len":152,"pkt":"XEl5dU5qxCwDBkn+CABFAACKpCcAAEARgyDAqAIUaC4oMcCC7OIAdi+4kGhdMwwzN\/\/gdMcAvt4AARJzAe98e2MCoivqZPnJUAFL3VX33q5uQ+IYKuS0EUKTIo39Hj8iukGI19FjyOxrBZyYkg6iF95EWV8le0HWtWEfKWDyZ1DDN5hOm3Kp5iAcotTqAYm+0+HE7xx8OWI=","pkt_caplen":152,"pkt_type":2048,"pkt_ipoffset":14}
0523{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype-conference-call.pcap","pkt_oversize":false,"pkt_ts":1501061916,"pkt_len":145,"pkt":"XEl5dU5qxCwDBkn+CABFAACDJZIAAEARAb3AqAIUaC4oMcCC7OIAbyMtkGhdNAwzOT\/gdMcAvt4AARJzFoIj8RvDtoBnCmxX9hIkCAPQbg6oB6F+2\/BS2ej\/1Yx+s5sbTunvLBoL2m+o5Jy0WdwZpTg4y027nZALU7f94OZPLZpX+snOwU8BPCbpSEb6h\/hgjA==","pkt_caplen":145,"pkt_type":2048,"pkt_ipoffset":14}
0510{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype-conference-call.pcap","pkt_oversize":false,"pkt_ts":1501061916,"pkt_len":137,"pkt":"XEl5dU5qxCwDBkn+CABFAAB7Cq8AAEARHKjAqAIUaC4oMcCC7OIAZ5KRkGhdNQwzOn\/gdMcAvt4AARJzL5WXAb4FnUpu5Ustien9yf4fKgKyZziei2176fxqYI29WcaPKmNBgxwUzkC0b7AvDpOjrM+YKSoqSExQI68c1fSSAXoy96BR5daIvws=","pkt_caplen":137,"pkt_type":2048,"pkt_ipoffset":14}
0610{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype-conference-call.pcap","pkt_oversize":false,"pkt_ts":1501061916,"pkt_len":209,"pkt":"xCwDBkn+XEl5dU5qCABFAADDRTkAAG4Rs9VoLigxwKgCFOziwIIAr5d6gckAEAAAA+jRYbbdpaZwZcp4HhimQeJvWTqwNpGSqnfDF2++mcV0CSMOA2sesBI9G6QTGaW73P0MbrjdyL2V7ezUhMi+JhQH1l+\/pucjL24WG\/3W+6J2ACSbEnQkSGuZnDqR07Gu66wLz\/t2bDNdmg\/zDByyOeTksyEr32n2gdG1py7P7M0grJaV4UdIpWrLn3RHkhXNGy+AAAACAUPdhV3J\/ZuDflQ=","pkt_caplen":209,"pkt_type":2048,"pkt_ipoffset":14}
0428{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype-conference-call.pcap","pkt_oversize":false,"pkt_ts":1501061916,"pkt_len":77,"pkt":"xCwDBkn+XEl5dU5qCABFAAA\/RToAAG4RtFhoLigxwKgCFOziwIIAKwMLj84ABAAAA+gZZ7Ud7jiCwNl1ozeAAAADAWGz1p37DOHYDPQ=","pkt_caplen":77,"pkt_type":2048,"pkt_ipoffset":14}
0555{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype-conference-call.pcap","pkt_oversize":false,"pkt_ts":1501061916,"pkt_len":169,"pkt":"xCwDBkn+XEl5dU5qCABFAACbRTsAAG4Rs\/toLigxwKgCFOziwIIAh3g4gMkABgAAA+kozqPuZhFQtvXYhXLU9laq6VpMsxyF5TyhbvlCVt7zAQFZOlRbxtk69tkjpENIlvzMKACC+zjGaufaaX4NQvZmRVnu7CWMI45MVTTEiJyIi0Y0uEFenTy\/eoe7G29X6WGy1lhMaBQE7oAAAAsBKpMsVI2YWnKXTg==","pkt_caplen":169,"pkt_type":2048,"pkt_ipoffset":14}
0557{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype-conference-call.pcap","pkt_oversize":false,"pkt_ts":1501061916,"pkt_len":169,"pkt":"xCwDBkn+XEl5dU5qCABFAACbRTwAAG4Rs\/poLigxwKgCFOziwIIAh7GygMkABgAABE31YJhxpeEStx\/Non2Hw9ODhjn1nPI6twAa6v4TPbXALXJS4WDhGnHiGs7M0q1LV5JIhmLN19a4UZ2oNcceD7gcC6\/hlfHMoWziriN+88lO8+6FVpNUywPwW580clvLUe3t1RqG\/Q2pUoAAAAwB9dds5qvBKmJN+A==","pkt_caplen":169,"pkt_type":2048,"pkt_ipoffset":14}
0557{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype-conference-call.pcap","pkt_oversize":false,"pkt_ts":1501061916,"pkt_len":169,"pkt":"xCwDBkn+XEl5dU5qCABFAACbRT0AAG4Rs\/loLigxwKgCFOziwIIAh3lxgMkABgAABLEYhveI+TJqXoNflKzETGTrRbw2whOI8HHGZ9H1FnMJe5bOVFI65E6c22uJfv\/qd5toD\/qg2AhULgiZ0dL4yqWJoA7uey4F0+\/ntXNU1VN2Qkq5FFOEjp3tzTNRRgKcJLBlUIvR1ZSm7IAAAA0B0DttNZRbKmPtmw==","pkt_caplen":169,"pkt_type":2048,"pkt_ipoffset":14}
0486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":200,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype-conference-call.pcap","flow_id":0,"flow_packet_id":200,"flow_first_seen":1501061916646,"flow_last_seen":1501061918151,"flow_tot_l4_data_len":32887,"flow_min_l4_data_len":40,"flow_max_l4_data_len":923,"flow_avg_l4_data_len":164,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.20","dst_ip":"104.46.40.49","src_port":49282,"dst_port":60642,"l4_proto":"udp"}
0159{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":200,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype-conference-call.pcap"}