1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
1001
1002
1003
1004
1005
1006
1007
1008
1009
1010
1011
1012
1013
1014
1015
1016
1017
1018
1019
1020
1021
1022
1023
1024
1025
1026
1027
1028
1029
1030
1031
1032
1033
1034
1035
1036
1037
1038
1039
1040
1041
1042
1043
1044
1045
1046
1047
1048
1049
1050
1051
1052
1053
1054
1055
1056
1057
1058
1059
1060
1061
1062
1063
1064
1065
1066
1067
1068
1069
1070
1071
1072
1073
1074
1075
1076
1077
1078
1079
1080
1081
1082
1083
1084
1085
1086
1087
1088
1089
1090
1091
1092
1093
1094
1095
1096
1097
1098
1099
1100
1101
1102
1103
1104
1105
1106
1107
1108
1109
1110
1111
1112
1113
1114
1115
1116
1117
1118
1119
1120
1121
1122
1123
1124
1125
1126
1127
1128
1129
1130
1131
1132
1133
1134
1135
1136
1137
1138
1139
1140
1141
1142
1143
1144
1145
1146
1147
1148
1149
1150
1151
1152
1153
1154
1155
1156
1157
1158
1159
1160
1161
1162
1163
1164
1165
|
00473{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"1kxun.pcap","alias":"nDPId-test","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"generic-max-idle-time":600000,"icmp-max-idle-time":30000,"udp-max-idle-time":180000,"tcp-max-idle-time":7440000,"tcp-max-post-end-flow-time":120000,"max-packets-per-flow-to-send":15,"max-packets-per-flow-to-process":255}
00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1470104373025,"flow_last_seen":0,"flow_min_l4_payload_len":26,"flow_max_l4_payload_len":26,"flow_tot_l4_payload_len":26,"flow_avg_l4_payload_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.44","dst_ip":"224.0.0.252","src_port":59571,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00425{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104373,"pkt_ts_usec":25824,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":68,"pkt_l4_len":34,"pkt":"AQBeAAD8SNIkYzEACABFAAA2OooAAAER2FzAqAUs4AAA\/OizFOsAIin75qEAAAABAAAAAAAACGphc29uLVBDAAD\/AAE="}
00514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1470104373025,"flow_last_seen":0,"flow_min_l4_payload_len":26,"flow_max_l4_payload_len":26,"flow_tot_l4_payload_len":26,"flow_avg_l4_payload_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.44","dst_ip":"224.0.0.252","src_port":59571,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}}
00426{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104373,"pkt_ts_usec":127416,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":68,"pkt_l4_len":34,"pkt":"AQBeAAD8SNIkYzEACABFAAA2OosAAAER2FvAqAUs4AAA\/OizFOsAIin75qEAAAABAAAAAAAACGphc29uLVBDAAD\/AAE="}
00489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1470104373232,"flow_last_seen":0,"flow_min_l4_payload_len":133,"flow_max_l4_payload_len":133,"flow_tot_l4_payload_len":133,"flow_avg_l4_payload_len":133,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.57","dst_ip":"239.255.255.250","src_port":55809,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00576{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104373,"pkt_ts_usec":232309,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6GF4PUugBCABFAAChMBcAAAER01nAqAU57\/\/\/+toBB2wAjcGgTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="}
00520{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1470104373232,"flow_last_seen":0,"flow_min_l4_payload_len":133,"flow_max_l4_payload_len":133,"flow_tot_l4_payload_len":133,"flow_avg_l4_payload_len":133,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.57","dst_ip":"239.255.255.250","src_port":55809,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}}
00489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1470104373232,"flow_last_seen":0,"flow_min_l4_payload_len":133,"flow_max_l4_payload_len":133,"flow_tot_l4_payload_len":133,"flow_avg_l4_payload_len":133,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.44","dst_ip":"239.255.255.250","src_port":51389,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00576{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104373,"pkt_ts_usec":232452,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6SNIkYzEACABFAAChOowAAAERyPHAqAUs7\/\/\/+si9B2wAjdLxTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="}
00520{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1470104373232,"flow_last_seen":0,"flow_min_l4_payload_len":133,"flow_max_l4_payload_len":133,"flow_tot_l4_payload_len":133,"flow_avg_l4_payload_len":133,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.44","dst_ip":"239.255.255.250","src_port":51389,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}}
00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1470104373741,"flow_last_seen":0,"flow_min_l4_payload_len":300,"flow_max_l4_payload_len":300,"flow_tot_l4_payload_len":300,"flow_avg_l4_payload_len":300,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.119.1","dst_ip":"255.255.255.255","src_port":67,"dst_port":68,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00806{"flow_id":4,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104373,"pkt_ts_usec":741279,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/TF4M6gNlCABFAAFIAAAAABARcfzAqHcB\/\/\/\/\/wBDAEQBNKS5AgEGAMCRIFIAAIAAwKgFJMCoBSTAqHcBAAAAAAAmWsJjVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEFNgTAqHcBMwQAAAA8AQT\/\/wAAAwTAqHcBBhCoXwEBCAgICKhfwAEICAQEKgioX8MMe8wtdP8AAAAA"}
00544{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":5,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1470104373741,"flow_last_seen":0,"flow_min_l4_payload_len":300,"flow_max_l4_payload_len":300,"flow_tot_l4_payload_len":300,"flow_avg_l4_payload_len":300,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.119.1","dst_ip":"255.255.255.255","src_port":67,"dst_port":68,"l4_proto":"udp","ndpi": {"proto":"DHCP","breed":"Acceptable","category":"Network"},"dhcp": {"fingerprint":""}}
00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1470104375419,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"68.233.253.133","src_port":53605,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00420{"flow_id":5,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104375,"pkt_ts_usec":419022,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlYMVHBbyMCABFAAA0ZDJAAEAGzmrAqAUQROn9hdFlAFAG4xw3xV6fSoAREAEocwAAAQEIChoPAavPGvHS"}
00489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1470104376017,"flow_last_seen":0,"flow_min_l4_payload_len":137,"flow_max_l4_payload_len":137,"flow_tot_l4_payload_len":137,"flow_avg_l4_payload_len":137,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.50","dst_ip":"239.255.255.250","src_port":64674,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00579{"flow_id":6,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104376,"pkt_ts_usec":17777,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/6uKxv2MGbCABFAAClQRIAAAQRv2HAqAUy7\/\/\/+vyiB2wAkVLKTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="}
00520{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":7,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1470104376017,"flow_last_seen":0,"flow_min_l4_payload_len":137,"flow_max_l4_payload_len":137,"flow_tot_l4_payload_len":137,"flow_avg_l4_payload_len":137,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.50","dst_ip":"239.255.255.250","src_port":64674,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}}
00489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1470104376017,"flow_last_seen":0,"flow_min_l4_payload_len":133,"flow_max_l4_payload_len":133,"flow_tot_l4_payload_len":133,"flow_avg_l4_payload_len":133,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.41","dst_ip":"239.255.255.250","src_port":55312,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00575{"flow_id":7,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104376,"pkt_ts_usec":17883,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6SNIkYwreCABFAAChfhwAAAERhWTAqAUp7\/\/\/+tgQB2wAjcOhTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="}
00520{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":8,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1470104376017,"flow_last_seen":0,"flow_min_l4_payload_len":133,"flow_max_l4_payload_len":133,"flow_tot_l4_payload_len":133,"flow_avg_l4_payload_len":133,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.41","dst_ip":"239.255.255.250","src_port":55312,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}}
00576{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104376,"pkt_ts_usec":203389,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6GF4PUugBCABFAAChMIoAAAER0ubAqAU57\/\/\/+toBB2wAjcGgTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="}
00577{"flow_id":3,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104376,"pkt_ts_usec":301439,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6SNIkYzEACABFAAChOpEAAAERyOzAqAUs7\/\/\/+si9B2wAjdLxTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="}
00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":11,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1470104376301,"flow_last_seen":0,"flow_min_l4_payload_len":300,"flow_max_l4_payload_len":300,"flow_tot_l4_payload_len":300,"flow_avg_l4_payload_len":300,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00805{"flow_id":8,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104376,"pkt_ts_usec":301823,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/cD6s8PAHCABFAAFIDscAAP8Rq94AAAAA\/\/\/\/\/wBEAEMBNJGnAQEGAAYPv1sAAAAAAAAAAAAAAAAAAAAAAAAAAHA+rPDwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEDNwcBeQMGD3f8OQIF3D0HAXA+rPDwBzIEwKgD7TMEAHanAAwEU2hlbv8AAAAAAAAAAAAAAAAAAAAA"}
00559{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":11,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1470104376301,"flow_last_seen":0,"flow_min_l4_payload_len":300,"flow_max_l4_payload_len":300,"flow_tot_l4_payload_len":300,"flow_avg_l4_payload_len":300,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","ndpi": {"proto":"DHCP","breed":"Acceptable","category":"Network"},"dhcp": {"fingerprint":"1,121,3,6,15,119,252"}}
00489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":12,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1470104376816,"flow_last_seen":0,"flow_min_l4_payload_len":36,"flow_max_l4_payload_len":36,"flow_tot_l4_payload_len":36,"flow_avg_l4_payload_len":36,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::406:55a8:6453:25dd","dst_ip":"ff02::1:2","src_port":546,"dst_port":547,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00467{"flow_id":9,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104376,"pkt_ts_usec":816620,"pkt_caplen":98,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":98,"pkt_l4_len":44,"pkt":"MzMAAQACcD6s8PAHht1gBWEEACwRAf6AAAAAAAAABAZVqGRTJd3\/AgAAAAAAAAAAAAAAAQACAiICIwAsiWgLJ3MdAAEADgABAAEduOb7cD6s8PAHAAYABAAXABgACAACAAA="}
00523{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":12,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1470104376816,"flow_last_seen":0,"flow_min_l4_payload_len":36,"flow_max_l4_payload_len":36,"flow_tot_l4_payload_len":36,"flow_avg_l4_payload_len":36,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::406:55a8:6453:25dd","dst_ip":"ff02::1:2","src_port":546,"dst_port":547,"l4_proto":"udp","ndpi": {"proto":"DHCPV6","breed":"Acceptable","category":"Network"}}
00807{"flow_id":4,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104377,"pkt_ts_usec":223309,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/TF4M6gNlCABFAAFIAAAAABARcfzAqHcB\/\/\/\/\/wBDAEQBNGjoAgEGAOGY7R0AAIAAwKgDVsCoA1bAqHcBAAAAAMjTo5OjcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEFNgTAqHcBMwQAAAA8AQT\/\/wAAAwTAqHcBBhCoXwEBCAgICKhfwAEICAQEKgioX8MMe8wtdP8AAAAA"}
00494{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":14,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1470104377634,"flow_last_seen":0,"flow_min_l4_payload_len":24,"flow_max_l4_payload_len":24,"flow_tot_l4_payload_len":24,"flow_avg_l4_payload_len":24,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::edf5:240a:c8c0:8312","dst_ip":"ff02::1:3","src_port":61603,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00453{"flow_id":10,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104377,"pkt_ts_usec":634231,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"MzMAAQADzD2CHu7jht1gAAAAACARAf6AAAAAAAAA7fUkCsjAgxL\/AgAAAAAAAAAAAAAAAQAD8KMU6wAgDOCgAAAAAAEAAAAAAAAGUk9fWDFDAAD\/AAE="}
00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":14,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1470104377634,"flow_last_seen":0,"flow_min_l4_payload_len":24,"flow_max_l4_payload_len":24,"flow_tot_l4_payload_len":24,"flow_avg_l4_payload_len":24,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::edf5:240a:c8c0:8312","dst_ip":"ff02::1:3","src_port":61603,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}}
00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":15,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1470104377634,"flow_last_seen":0,"flow_min_l4_payload_len":24,"flow_max_l4_payload_len":24,"flow_tot_l4_payload_len":24,"flow_avg_l4_payload_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.47","dst_ip":"224.0.0.252","src_port":61603,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00424{"flow_id":11,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104377,"pkt_ts_usec":634537,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AQBeAAD8zD2CHu7jCABFAAA0LRcAAAER5c7AqAUv4AAA\/PCjFOsAIMFmoAAAAAABAAAAAAAABlJPX1gxQwAA\/wAB"}
00512{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":15,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1470104377634,"flow_last_seen":0,"flow_min_l4_payload_len":24,"flow_max_l4_payload_len":24,"flow_tot_l4_payload_len":24,"flow_avg_l4_payload_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.47","dst_ip":"224.0.0.252","src_port":61603,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"RTP","breed":"Acceptable","category":"Media"}}
00491{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":16,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1470104377634,"flow_last_seen":0,"flow_min_l4_payload_len":137,"flow_max_l4_payload_len":137,"flow_tot_l4_payload_len":137,"flow_avg_l4_payload_len":137,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.47","dst_ip":"239.255.255.250","src_port":60267,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00582{"flow_id":12,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104377,"pkt_ts_usec":634699,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/6zD2CHu7jCABFAAClQLQAAAQRv8LAqAUv7\/\/\/+utrB2wAkWQETS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="}
00522{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":16,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1470104377634,"flow_last_seen":0,"flow_min_l4_payload_len":137,"flow_max_l4_payload_len":137,"flow_tot_l4_payload_len":137,"flow_avg_l4_payload_len":137,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.47","dst_ip":"239.255.255.250","src_port":60267,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}}
00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":17,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":1470104377720,"flow_last_seen":0,"flow_min_l4_payload_len":22,"flow_max_l4_payload_len":22,"flow_tot_l4_payload_len":22,"flow_avg_l4_payload_len":22,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"224.0.0.252","src_port":51458,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00423{"flow_id":13,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104377,"pkt_ts_usec":720702,"pkt_caplen":64,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":64,"pkt_l4_len":30,"pkt":"AQBeAAD8ABxCjnAxCABFAAAyUcEAAAERU03AqHMI4AAA\/MkCFOsAHtPcYF4AAAABAAAAAAAABHdwYWQAAAEAAQ=="}
00517{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":17,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":1470104377720,"flow_last_seen":0,"flow_min_l4_payload_len":22,"flow_max_l4_payload_len":22,"flow_tot_l4_payload_len":22,"flow_avg_l4_payload_len":22,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"224.0.0.252","src_port":51458,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}}
00423{"flow_id":13,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104377,"pkt_ts_usec":720761,"pkt_caplen":64,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":64,"pkt_l4_len":30,"pkt":"AQBeAAD8ABxCjnAxCABFAAAyUcEAAAERU03AqHMI4AAA\/MkCFOsAHtPcYF4AAAABAAAAAAAABHdwYWQAAAEAAQ=="}
00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":19,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1470104377734,"flow_last_seen":0,"flow_min_l4_payload_len":38,"flow_max_l4_payload_len":38,"flow_tot_l4_payload_len":38,"flow_avg_l4_payload_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"8.8.8.8","src_port":51024,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00443{"flow_id":14,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104377,"pkt_ts_usec":734137,"pkt_caplen":80,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":80,"pkt_l4_len":46,"pkt":"TF4M6gNlABxCjnAxCABFAABCUcIAAIARpSjAqHMICAgICMdQADUALoWI\/SwBAAABAAAAAAAAAmpwBmthbmthbgUxa3h1bgRtb2JpAAABAAE="}
00656{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":19,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1470104377734,"flow_last_seen":0,"flow_min_l4_payload_len":38,"flow_max_l4_payload_len":38,"flow_tot_l4_payload_len":38,"flow_avg_l4_payload_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"8.8.8.8","src_port":51024,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Google","breed":"Tracker\/Ads","category":"Streaming"},"dns": {"query":"jp.kankan.1kxun.mobi","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
00443{"flow_id":14,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104377,"pkt_ts_usec":734181,"pkt_caplen":80,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":80,"pkt_l4_len":46,"pkt":"TF4M6gNlABxCjnAxCABFAABCUcIAAIARpSjAqHMICAgICMdQADUALoWI\/SwBAAABAAAAAAAAAmpwBmthbmthbgUxa3h1bgRtb2JpAAABAAE="}
00489{"flow_id":14,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104377,"pkt_ts_usec":753112,"pkt_caplen":112,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":112,"pkt_l4_len":78,"pkt":"ABxCjnAxTF4M6gNlCABFAABinjgAAC4RqpIICAgIwKhzCAA1x1AATmX5\/SyBgAABAAIAAAAAAmpwBmthbmthbgUxa3h1bgRtb2JpAAABAAHADAABAAEAAAErAARquSNuwAwAAQABAAABKwAEarkjcA=="}
00684{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":21,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":3,"flow_first_seen":1470104377734,"flow_last_seen":1470104377753,"flow_min_l4_payload_len":38,"flow_max_l4_payload_len":70,"flow_tot_l4_payload_len":146,"flow_avg_l4_payload_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"8.8.8.8","src_port":51024,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Google","breed":"Tracker\/Ads","category":"Streaming"},"dns": {"query":"jp.kankan.1kxun.mobi","num_queries":1,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"106.185.35.110"}}
00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":22,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1470104377754,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"106.185.35.110","src_port":49597,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00422{"flow_id":15,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104377,"pkt_ts_usec":754759,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0UcRAAIAG5yfAqHMIarkjbsG9AFA9WFFgAAAAAIACIAA9OgAAAgQE7AEDAwgBAQQC"}
00422{"flow_id":15,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104377,"pkt_ts_usec":754800,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0UcRAAIAG5yfAqHMIarkjbsG9AFA9WFFgAAAAAIACIAA9OgAAAgQE7AEDAwgBAQQC"}
00422{"flow_id":15,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104377,"pkt_ts_usec":810946,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABxCjnAxTF4M6gNlCABFAAA0AABAADYGguxquSNuwKhzCABQwb1z6xq8PVhRYYASchBbqgAAAgQFtAEBBAIBAwMH"}
00406{"flow_id":15,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104377,"pkt_ts_usec":811088,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUcVAAIAG5zLAqHMIarkjbsG9AFA9WFFhc+savVAQAQQNiQAA"}
00406{"flow_id":15,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104377,"pkt_ts_usec":811114,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUcVAAIAG5zLAqHMIarkjbsG9AFA9WFFhc+savVAQAQQNiQAA"}
00962{"flow_id":15,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104377,"pkt_ts_usec":818917,"pkt_caplen":468,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":468,"pkt_l4_len":434,"pkt":"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"}
00845{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":27,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":6,"flow_first_seen":1470104377754,"flow_last_seen":1470104377818,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":414,"flow_tot_l4_payload_len":414,"flow_avg_l4_payload_len":69,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"106.185.35.110","src_port":49597,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Streaming"},"http": {"hostname":"jp.kankan.1kxun.mobi","url":"jp.kankan.1kxun.mobi\/api\/videos\/10410.json?callback=jQuery18306855657112319022_1470103242123&_=1470104377698","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (Windows NT 6.1) AppleWebKit\/537.22 (KHTML, like Gecko) Chrome\/25.0.1364.152 Safari\/537.22"}}
00962{"flow_id":15,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104377,"pkt_ts_usec":818966,"pkt_caplen":468,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":468,"pkt_l4_len":434,"pkt":"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"}
00423{"flow_id":13,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104377,"pkt_ts_usec":820966,"pkt_caplen":64,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":64,"pkt_l4_len":30,"pkt":"AQBeAAD8ABxCjnAxCABFAAAyUccAAAERU0fAqHMI4AAA\/MkCFOsAHtPcYF4AAAABAAAAAAAABHdwYWQAAAEAAQ=="}
00423{"flow_id":13,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104377,"pkt_ts_usec":820998,"pkt_caplen":64,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":64,"pkt_l4_len":30,"pkt":"AQBeAAD8ABxCjnAxCABFAAAyUccAAAERU0fAqHMI4AAA\/MkCFOsAHtPcYF4AAAABAAAAAAAABHdwYWQAAAEAAQ=="}
00467{"flow_id":9,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104377,"pkt_ts_usec":839257,"pkt_caplen":98,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":98,"pkt_l4_len":44,"pkt":"MzMAAQACcD6s8PAHht1gBWEEACwRAf6AAAAAAAAABAZVqGRTJd3\/AgAAAAAAAAAAAAAAAQACAiICIwAsiQQLJ3MdAAEADgABAAEduOb7cD6s8PAHAAYABAAXABgACAACAGQ="}
00809{"flow_id":4,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104377,"pkt_ts_usec":839581,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/TF4M6gNlCABFAAFIAAAAABARcfzAqHcB\/\/\/\/\/wBDAEQBNAJhAgEGADFjB6UAAAAAwKgFCcCoBQnAqHcBAAAAAHDxofgq\/QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEFNgTAqHcBMwQAAAA8AQT\/\/wAAAwTAqHcBBhCoXwEBCAgICKhfwAEICAQE\/wAAAAAAAAAAAAAAAAAA"}
00415{"flow_id":15,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104377,"pkt_ts_usec":864564,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABxCjnAxTF4M6gNlCABFAAAoOwxAADYGR+xquSNuwKhzCABQwb1z6xq9PVhS\/1AQAO0MAgAAAAAAAAAA"}
02064{"flow_id":15,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104377,"pkt_ts_usec":868739,"pkt_caplen":1272,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1272,"pkt_l4_len":1238,"pkt":"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"}
00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":35,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_first_seen":1470104377901,"flow_last_seen":0,"flow_min_l4_payload_len":34,"flow_max_l4_payload_len":34,"flow_tot_l4_payload_len":34,"flow_avg_l4_payload_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"8.8.8.8","src_port":52723,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00438{"flow_id":16,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104377,"pkt_ts_usec":901018,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"TF4M6gNlABxCjnAxCABFAAA+UcgAAIARpSbAqHMICAgICM3zADUAKlE0ceUBAAABAAAAAAAABmthbmthbgUxa3h1bgNjb20AAAEAAQ=="}
00652{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":35,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_first_seen":1470104377901,"flow_last_seen":0,"flow_min_l4_payload_len":34,"flow_max_l4_payload_len":34,"flow_tot_l4_payload_len":34,"flow_avg_l4_payload_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"8.8.8.8","src_port":52723,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Google","breed":"Tracker\/Ads","category":"Streaming"},"dns": {"query":"kankan.1kxun.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
00438{"flow_id":16,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104377,"pkt_ts_usec":901065,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"TF4M6gNlABxCjnAxCABFAAA+UcgAAIARpSbAqHMICAgICM3zADUAKlE0ceUBAAABAAAAAAAABmthbmthbgUxa3h1bgNjb20AAAEAAQ=="}
00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":37,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_first_seen":1470104378005,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"192.168.115.75","src_port":53622,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00413{"flow_id":17,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104378,"pkt_ts_usec":5826,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABAj4ACgYMVHBbyMCABFAAAol0tAAEAGqdjAqAUQwKhzS9F2AbsV1ofmvikqE1ARIAA8\/AAAAAAAAAAA"}
00412{"flow_id":17,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104378,"pkt_ts_usec":7003,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABxCjnAxABAj4ACgCABFAAAoAABAAEAGQSTAqHNLwKgFEAG70Xa+KSoTFdaH51AQAEZctgAAAAAAAAAA"}
00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":39,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_first_seen":1470104378021,"flow_last_seen":0,"flow_min_l4_payload_len":50,"flow_max_l4_payload_len":50,"flow_tot_l4_payload_len":50,"flow_avg_l4_payload_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"192.168.255.255","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00467{"flow_id":18,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104378,"pkt_ts_usec":21294,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/ABxCjnAxCABFAABOUckAAIAR9HzAqHMIwKj\/\/wCJAIkAOha6seYBEAABAAAAAAAAIEZIRkFFQkVFQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAE="}
00519{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":39,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_first_seen":1470104378021,"flow_last_seen":0,"flow_min_l4_payload_len":50,"flow_max_l4_payload_len":50,"flow_tot_l4_payload_len":50,"flow_avg_l4_payload_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"192.168.255.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","breed":"Acceptable","category":"System"}}
00467{"flow_id":18,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104378,"pkt_ts_usec":21336,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/ABxCjnAxCABFAABOUckAAIAR9HzAqHMIwKj\/\/wCJAIkAOha6seYBEAABAAAAAAAAIEZIRkFFQkVFQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAE="}
00452{"flow_id":10,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104378,"pkt_ts_usec":45036,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"MzMAAQADzD2CHu7jht1gAAAAACARAf6AAAAAAAAA7fUkCsjAgxL\/AgAAAAAAAAAAAAAAAQAD8KMU6wAgDOCgAAAAAAEAAAAAAAAGUk9fWDFDAAD\/AAE="}
00423{"flow_id":11,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104378,"pkt_ts_usec":45058,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AQBeAAD8zD2CHu7jCABFAAA0LRgAAAER5c3AqAUv4AAA\/PCjFOsAIMFmoAAAAAABAAAAAAAABlJPX1gxQwAA\/wAB"}
00494{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":43,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_first_seen":1470104378045,"flow_last_seen":0,"flow_min_l4_payload_len":30,"flow_max_l4_payload_len":30,"flow_tot_l4_payload_len":30,"flow_avg_l4_payload_len":30,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::e98f:bae2:19f7:6b0f","dst_ip":"ff02::1:3","src_port":58779,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00462{"flow_id":19,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104378,"pkt_ts_usec":45695,"pkt_caplen":92,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":92,"pkt_l4_len":38,"pkt":"MzMAAQAD\/PiuMpcsht1gAAAAACYRAf6AAAAAAAAA6Y+64hn3aw\/\/AgAAAAAAAAAAAAAAAQAD5ZsU6wAmcsn2BAAAAAEAAAAAAAAM5bCP5L2b5bCI5qmfAAD\/AAE="}
00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":43,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_first_seen":1470104378045,"flow_last_seen":0,"flow_min_l4_payload_len":30,"flow_max_l4_payload_len":30,"flow_tot_l4_payload_len":30,"flow_avg_l4_payload_len":30,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::e98f:bae2:19f7:6b0f","dst_ip":"ff02::1:3","src_port":58779,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}}
00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":44,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_first_seen":1470104378045,"flow_last_seen":0,"flow_min_l4_payload_len":30,"flow_max_l4_payload_len":30,"flow_tot_l4_payload_len":30,"flow_avg_l4_payload_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.95","dst_ip":"224.0.0.252","src_port":58779,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00432{"flow_id":20,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104378,"pkt_ts_usec":45747,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"AQBeAAD8\/PiuMpcsCABFAAA6KxQAAAER6ZvAqANf4AAA\/OWbFOsAJvTF9gQAAAABAAAAAAAADOWwj+S9m+WwiOapnwAA\/wAB"}
00516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":44,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_first_seen":1470104378045,"flow_last_seen":0,"flow_min_l4_payload_len":30,"flow_max_l4_payload_len":30,"flow_tot_l4_payload_len":30,"flow_avg_l4_payload_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.95","dst_ip":"224.0.0.252","src_port":58779,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}}
00491{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":45,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":1,"flow_first_seen":1470104378045,"flow_last_seen":0,"flow_min_l4_payload_len":133,"flow_max_l4_payload_len":133,"flow_tot_l4_payload_len":133,"flow_avg_l4_payload_len":133,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.95","dst_ip":"239.255.255.250","src_port":59468,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00578{"flow_id":21,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104378,"pkt_ts_usec":45830,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6\/PiuMpcsCABFAAChLEEAAAER2QnAqANf7\/\/\/+uhMB2wAjbUvTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="}
00522{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":45,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":1,"flow_first_seen":1470104378045,"flow_last_seen":0,"flow_min_l4_payload_len":133,"flow_max_l4_payload_len":133,"flow_tot_l4_payload_len":133,"flow_avg_l4_payload_len":133,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.95","dst_ip":"239.255.255.250","src_port":59468,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}}
00407{"flow_id":15,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104378,"pkt_ts_usec":68918,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUcpAAIAG5y3AqHMIarkjbsG9AFA9WFL\/c+sff1AQAQAHLQAA"}
00407{"flow_id":15,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104378,"pkt_ts_usec":68973,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUcpAAIAG5y3AqHMIarkjbsG9AFA9WFL\/c+sff1AQAQAHLQAA"}
00463{"flow_id":19,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104378,"pkt_ts_usec":454680,"pkt_caplen":92,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":92,"pkt_l4_len":38,"pkt":"MzMAAQAD\/PiuMpcsht1gAAAAACYRAf6AAAAAAAAA6Y+64hn3aw\/\/AgAAAAAAAAAAAAAAAQAD5ZsU6wAmcsn2BAAAAAEAAAAAAAAM5bCP5L2b5bCI5qmfAAD\/AAE="}
00433{"flow_id":20,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104378,"pkt_ts_usec":454823,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"AQBeAAD8\/PiuMpcsCABFAAA6KxYAAAER6ZnAqANf4AAA\/OWbFOsAJvTF9gQAAAABAAAAAAAADOWwj+S9m+WwiOapnwAA\/wAB"}
00494{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":50,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":1,"flow_first_seen":1470104378557,"flow_last_seen":0,"flow_min_l4_payload_len":317,"flow_max_l4_payload_len":317,"flow_tot_l4_payload_len":317,"flow_avg_l4_payload_len":317,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.125.30","dst_ip":"255.255.255.255","src_port":62976,"dst_port":62976,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00837{"flow_id":22,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104378,"pkt_ts_usec":557102,"pkt_caplen":359,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":359,"pkt_l4_len":325,"pkt":"\/\/\/\/\/\/\/\/wKC7c+tHCABFAAFZOwBAAEARwM3AqH0e\/\/\/\/\/\/YA9gABRUjM\/\/+SXaAAwKC7c+tHwKh9HgAAAgAnAURHUy0xMjEwLTEwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABTd2l0Y2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADMuMTAuMDEzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKC7c+tHQjEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABRUDBSMUQ5MDAwMDI1AAAAAAAAAAAAAAAAAAAAAAAAAERHUy0xMjEwLTEwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqH0e\/\/8AAFBvcnQgMTAAIAGwMAIUAQDCoLv\/\/nPrR0A="}
00509{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":51,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_first_seen":1470104378657,"flow_last_seen":0,"flow_min_l4_payload_len":329,"flow_max_l4_payload_len":329,"flow_tot_l4_payload_len":329,"flow_avg_l4_payload_len":329,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b030:214:100:c2a0:bbff:fe73:eb47","dst_ip":"ff02::1","src_port":62976,"dst_port":62976,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00872{"flow_id":23,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104378,"pkt_ts_usec":657181,"pkt_caplen":391,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":391,"pkt_l4_len":337,"pkt":"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"}
00468{"flow_id":18,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104378,"pkt_ts_usec":770974,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/ABxCjnAxCABFAABOUcsAAIAR9HrAqHMIwKj\/\/wCJAIkAOha6seYBEAABAAAAAAAAIEZIRkFFQkVFQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAE="}
00468{"flow_id":18,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104378,"pkt_ts_usec":771017,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/ABxCjnAxCABFAABOUcsAAIAR9HrAqHMIwKj\/\/wCJAIkAOha6seYBEAABAAAAAAAAIEZIRkFFQkVFQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAE="}
00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":54,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_first_seen":1470104378901,"flow_last_seen":0,"flow_min_l4_payload_len":34,"flow_max_l4_payload_len":34,"flow_tot_l4_payload_len":34,"flow_avg_l4_payload_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"168.95.1.1","src_port":52723,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00438{"flow_id":24,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":54,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104378,"pkt_ts_usec":901305,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"TF4M6gNlABxCjnAxCABFAAA+UcwAAIARC9LAqHMIqF8BAc3zADUAKrfjceUBAAABAAAAAAAABmthbmthbgUxa3h1bgNjb20AAAEAAQ=="}
00646{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":54,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_first_seen":1470104378901,"flow_last_seen":0,"flow_min_l4_payload_len":34,"flow_max_l4_payload_len":34,"flow_tot_l4_payload_len":34,"flow_avg_l4_payload_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"168.95.1.1","src_port":52723,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Streaming"},"dns": {"query":"kankan.1kxun.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
00438{"flow_id":24,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":55,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104378,"pkt_ts_usec":901349,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"TF4M6gNlABxCjnAxCABFAAA+UcwAAIARC9LAqHMIqF8BAc3zADUAKrfjceUBAAABAAAAAAAABmthbmthbgUxa3h1bgNjb20AAAEAAQ=="}
00481{"flow_id":24,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104378,"pkt_ts_usec":905035,"pkt_caplen":108,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":108,"pkt_l4_len":74,"pkt":"ABxCjnAxTF4M6gNlCABFAABelWIAAPgRUBuoXwEBwKhzCAA1zfMASvjnceWBgAABAAIAAAAABmthbmthbgUxa3h1bgNjb20AAAEAAcAMAAEAAQAAAjMABN5J\/qfADAABAAEAAAIzAATeSf5x"}
00674{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":56,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":3,"flow_first_seen":1470104378901,"flow_last_seen":1470104378905,"flow_min_l4_payload_len":34,"flow_max_l4_payload_len":66,"flow_tot_l4_payload_len":134,"flow_avg_l4_payload_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"168.95.1.1","src_port":52723,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Streaming"},"dns": {"query":"kankan.1kxun.com","num_queries":1,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"222.73.254.167"}}
00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":57,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":1,"flow_first_seen":1470104378906,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"222.73.254.167","src_port":49598,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00422{"flow_id":25,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":57,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104378,"pkt_ts_usec":906497,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0Uc5AAIAGmFPAqHMI3kn+p8G+AFDrM0BvAAAAAIACIABRhAAAAgQE7AEDAwgBAQQC"}
00422{"flow_id":25,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":58,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104378,"pkt_ts_usec":906535,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0Uc5AAIAGmFPAqHMI3kn+p8G+AFDrM0BvAAAAAIACIABRhAAAAgQE7AEDAwgBAQQC"}
00482{"flow_id":16,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":59,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104378,"pkt_ts_usec":954523,"pkt_caplen":108,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":108,"pkt_l4_len":74,"pkt":"ABxCjnAxTF4M6gNlCABFAABeST8AADAR\/Y8ICAgIwKhzCAA1zfMASpHwceWBgAABAAIAAAAABmthbmthbgUxa3h1bgNjb20AAAEAAcAMAAEAAQAAAlcABN5J\/nHADAABAAEAAAJXAATeSf6n"}
00680{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":59,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":3,"flow_first_seen":1470104377901,"flow_last_seen":1470104378954,"flow_min_l4_payload_len":34,"flow_max_l4_payload_len":66,"flow_tot_l4_payload_len":134,"flow_avg_l4_payload_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"8.8.8.8","src_port":52723,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Google","breed":"Tracker\/Ads","category":"Streaming"},"dns": {"query":"kankan.1kxun.com","num_queries":1,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"222.73.254.113"}}
00581{"flow_id":6,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104378,"pkt_ts_usec":967066,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/6uKxv2MGbCABFAAClQRMAAAQRv2DAqAUy7\/\/\/+vyiB2wAkVLKTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="}
00577{"flow_id":7,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":61,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104378,"pkt_ts_usec":967195,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6SNIkYwreCABFAAChfiAAAAERhWDAqAUp7\/\/\/+tgQB2wAjcOhTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="}
00422{"flow_id":25,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104378,"pkt_ts_usec":970623,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABxCjnAxTF4M6gNlCABFAAA0AABAADEGOSLeSf6nwKhzCABQwb6HB4x76zNAcIASFtBGWQAAAgQFtAEBBAIBAwMH"}
00406{"flow_id":25,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104378,"pkt_ts_usec":970825,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUdBAAIAGmF3AqHMI3kn+p8G+AFDrM0BwhweMfFAQAQSc9wAA"}
00406{"flow_id":25,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104378,"pkt_ts_usec":970860,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUdBAAIAGmF3AqHMI3kn+p8G+AFDrM0BwhweMfFAQAQSc9wAA"}
00969{"flow_id":25,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":65,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104378,"pkt_ts_usec":975363,"pkt_caplen":474,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":474,"pkt_l4_len":440,"pkt":"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"}
00848{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":65,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":6,"flow_first_seen":1470104378906,"flow_last_seen":1470104378975,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":420,"flow_tot_l4_payload_len":420,"flow_avg_l4_payload_len":70,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"222.73.254.167","src_port":49598,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Streaming"},"http": {"hostname":"kankan.1kxun.com","url":"kankan.1kxun.com\/api\/videos\/alsolikes\/10410.json?callback=jQuery18306855657112319022_1470103242123&_=1470104377899","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (Windows NT 6.1) AppleWebKit\/537.22 (KHTML, like Gecko) Chrome\/25.0.1364.152 Safari\/537.22"}}
00969{"flow_id":25,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104378,"pkt_ts_usec":975425,"pkt_caplen":474,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":474,"pkt_l4_len":440,"pkt":"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"}
00413{"flow_id":25,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":40644,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABxCjnAxTF4M6gNlCABFAAAo4LJAADEGWHveSf6nwKhzCABQwb6HB4x86zNCFFAQADacIQAAAAAAAAAA"}
01398{"flow_id":25,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":50526,"pkt_caplen":788,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":788,"pkt_l4_len":754,"pkt":"ABxCjnAxTF4M6gNlCABFAAMG4LNAADEGVZzeSf6nwKhzCABQwb6HB4x86zNCFFAYADb52QAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG9wZW5yZXN0eS8xLjkuMy4yDQpEYXRlOiBUdWUsIDAyIEF1ZyAyMDE2IDAyOjE5OjQwIEdNVA0KQ29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi9qc29uO2NoYXJzZXQ9dXRmLTgNClRyYW5zZmVyLUVuY29kaW5nOiBjaHVua2VkDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpYLVBvd2VyZWQtQnk6IFBIUC83LjAuMQ0KQWNjZXNzLUNvbnRyb2wtQWxsb3ctT3JpZ2luOiAqDQpDb250ZW50LUVuY29kaW5nOiBnemlwDQoNCjFjYw0KH4sIAAAAAAAAA62U3W7cIBCF34WrVlrvAsPvvkXvKpUqsgFv7awTt4ZuN1HevYOTCyP1zpUsbI0w3+FwmPFLjr\/uzABVRkolNWMcmKWcPzChKaPABcfSp1eypDblhZzJkr2Py0IOJLSpJedvr2QI5MwMN3AgaUjXiLNctiZAGX102QguXVZSMsD\/hqm9lDk\/UprP7uRO8+CP7PFPfjr658mdfg8hPj88tk\/4uNM6e\/mo4nsFNWN\/H+E4zhfydvgQAMLQrQBpVYFqq12WALYIaHuXtTIChSmNdSMg7FdUyE17nZdaEAdlt4IsCwyRWqAUwwC\/pen\/gyGF04w+\/azwILXZ0pUHUyyIFMdO8UI3++kF09xvL2MFF5ilLfzfYdjtfMGsUajgoFmVRBUt7lnEiHnUhrLd2AJo7mGqqEwpUR837To02QtMobQc06Y4M7vhK6e5juGlxluxOe6v7zDMWafUfiSu3QgvhO47zSle7BpNlaoNp75d94xBl2gWitHQ7pdROM2YbnXWGN4lvg2bBoPGay58GXURESIeQt8zlLWtSHSntALF94srKprbnC7v3nwviqaIbXOasTuu3VSAoW+f\/wLN0jIAdQUAAA0KMA0KDQo="}
00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":69,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":1,"flow_first_seen":1470104379066,"flow_last_seen":0,"flow_min_l4_payload_len":31,"flow_max_l4_payload_len":31,"flow_tot_l4_payload_len":31,"flow_avg_l4_payload_len":31,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"8.8.8.8","src_port":60724,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00434{"flow_id":26,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":69,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":66410,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"pkt":"TF4M6gNlABxCjnAxCABFAAA7UdIAAIARpR\/AqHMICAgICO00ADUAJ9woKZABAAABAAAAAAAAA3BpYwUxa3h1bgNjb20AAAEAAQ=="}
00649{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":69,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":1,"flow_first_seen":1470104379066,"flow_last_seen":0,"flow_min_l4_payload_len":31,"flow_max_l4_payload_len":31,"flow_tot_l4_payload_len":31,"flow_avg_l4_payload_len":31,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"8.8.8.8","src_port":60724,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Google","breed":"Tracker\/Ads","category":"Streaming"},"dns": {"query":"pic.1kxun.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
00434{"flow_id":26,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":70,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":66467,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"pkt":"TF4M6gNlABxCjnAxCABFAAA7UdIAAIARpR\/AqHMICAgICO00ADUAJ9woKZABAAABAAAAAAAAA3BpYwUxa3h1bgNjb20AAAEAAQ=="}
00522{"flow_id":26,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":71,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":115963,"pkt_caplen":137,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":137,"pkt_l4_len":103,"pkt":"ABxCjnAxTF4M6gNlCABFAAB7GLEAAC4RMAEICAgIwKhzCAA17TQAZ+zhKZCBgAABAAQAAAAAA3BpYwUxa3h1bgNjb20AAAEAAcAMAAEAAQAAAlcABGq7I\/bADAABAAEAAAJXAASAx7rowAwAAQABAAACVwAEgMdvqcAMAAEAAQAAAlcABGq6Ezo="}
00677{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":71,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":3,"flow_first_seen":1470104379066,"flow_last_seen":1470104379115,"flow_min_l4_payload_len":31,"flow_max_l4_payload_len":95,"flow_tot_l4_payload_len":157,"flow_avg_l4_payload_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"8.8.8.8","src_port":60724,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Google","breed":"Tracker\/Ads","category":"Streaming"},"dns": {"query":"pic.1kxun.com","num_queries":1,"num_answers":4,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"106.187.35.246"}}
00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":72,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":1,"flow_first_seen":1470104379117,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"106.187.35.246","src_port":49599,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00423{"flow_id":27,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":72,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":117273,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0UdRAAIAG5o3AqHMIarsj9sG\/AFBFF77fAAAAAIACIADHbwAAAgQE7AEDAwgBAQQC"}
00423{"flow_id":27,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":73,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":117309,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0UdRAAIAG5o3AqHMIarsj9sG\/AFBFF77fAAAAAIACIADHbwAAAgQE7AEDAwgBAQQC"}
00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":74,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":1,"flow_first_seen":1470104379117,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"106.187.35.246","src_port":49600,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00423{"flow_id":28,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":74,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":117772,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0UdVAAIAG5ozAqHMIarsj9sHAAFAm5\/RZAAAAAIACIACwJAAAAgQE7AEDAwgBAQQC"}
00423{"flow_id":28,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":75,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":117826,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0UdVAAIAG5ozAqHMIarsj9sHAAFAm5\/RZAAAAAIACIACwJAAAAgQE7AEDAwgBAQQC"}
00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":76,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":1,"flow_first_seen":1470104379118,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"106.187.35.246","src_port":49601,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00422{"flow_id":29,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":76,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":118171,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0UdZAAIAG5ovAqHMIarsj9sHBAFDavRsQAAAAAIACIADVlgAAAgQE7AEDAwgBAQQC"}
00422{"flow_id":29,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":77,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":118197,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0UdZAAIAG5ovAqHMIarsj9sHBAFDavRsQAAAAAIACIADVlgAAAgQE7AEDAwgBAQQC"}
00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":78,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":1,"flow_first_seen":1470104379118,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"106.187.35.246","src_port":49602,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00423{"flow_id":30,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":78,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":118544,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0UddAAIAG5orAqHMIarsj9sHCAFAX8\/CKAAAAAIACIADC5QAAAgQE7AEDAwgBAQQC"}
00423{"flow_id":30,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":79,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":118574,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0UddAAIAG5orAqHMIarsj9sHCAFAX8\/CKAAAAAIACIADC5QAAAgQE7AEDAwgBAQQC"}
00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":80,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":1,"flow_first_seen":1470104379118,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"106.187.35.246","src_port":49603,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00422{"flow_id":31,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":80,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":118972,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0UdhAAIAG5onAqHMIarsj9sHDAFDIiN5cAAAAAIACIAAkfQAAAgQE7AEDAwgBAQQC"}
00422{"flow_id":31,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":81,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":119006,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0UdhAAIAG5onAqHMIarsj9sHDAFDIiN5cAAAAAIACIAAkfQAAAgQE7AEDAwgBAQQC"}
00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":82,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":1,"flow_first_seen":1470104379119,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"106.187.35.246","src_port":49604,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00422{"flow_id":32,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":82,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":119336,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0UdlAAIAG5ojAqHMIarsj9sHEAFAS7Ia1AAAAAIACIAAxwAAAAgQE7AEDAwgBAQQC"}
00422{"flow_id":32,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":119373,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0UdlAAIAG5ojAqHMIarsj9sHEAFAS7Ia1AAAAAIACIAAxwAAAAgQE7AEDAwgBAQQC"}
00494{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":84,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":1,"flow_first_seen":1470104379169,"flow_last_seen":0,"flow_min_l4_payload_len":30,"flow_max_l4_payload_len":30,"flow_tot_l4_payload_len":30,"flow_avg_l4_payload_len":30,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::e98f:bae2:19f7:6b0f","dst_ip":"ff02::1:3","src_port":54888,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00463{"flow_id":33,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":84,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":169121,"pkt_caplen":92,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":92,"pkt_l4_len":38,"pkt":"MzMAAQAD\/PiuMpcsht1gAAAAACYRAf6AAAAAAAAA6Y+64hn3aw\/\/AgAAAAAAAAAAAAAAAQAD1mgU6wAmi+DsIAAAAAEAAAAAAAAM5bCP5L2b5bCI5qmfAAD\/AAE="}
00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":84,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":1,"flow_first_seen":1470104379169,"flow_last_seen":0,"flow_min_l4_payload_len":30,"flow_max_l4_payload_len":30,"flow_tot_l4_payload_len":30,"flow_avg_l4_payload_len":30,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::e98f:bae2:19f7:6b0f","dst_ip":"ff02::1:3","src_port":54888,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}}
00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":85,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":1,"flow_first_seen":1470104379169,"flow_last_seen":0,"flow_min_l4_payload_len":30,"flow_max_l4_payload_len":30,"flow_tot_l4_payload_len":30,"flow_avg_l4_payload_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.95","dst_ip":"224.0.0.252","src_port":54888,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00433{"flow_id":34,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":85,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":169283,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"AQBeAAD8\/PiuMpcsCABFAAA6KxkAAAER6ZbAqANf4AAA\/NZoFOsAJg3d7CAAAAABAAAAAAAADOWwj+S9m+WwiOapnwAA\/wAB"}
00516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":85,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":1,"flow_first_seen":1470104379169,"flow_last_seen":0,"flow_min_l4_payload_len":30,"flow_max_l4_payload_len":30,"flow_tot_l4_payload_len":30,"flow_avg_l4_payload_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.95","dst_ip":"224.0.0.252","src_port":54888,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}}
00422{"flow_id":28,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":86,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":169717,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABxCjnAxTF4M6gNlCABFAAA0AABAADYGgmJquyP2wKhzCABQwcB6nEL4Juf0WoASchCfpwAAAgQFtAEBBAIBAwMH"}
00407{"flow_id":28,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":87,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":169902,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUdpAAIAG5pPAqHMIarsj9sHAAFAm5\/RaepxC+VAQAQRRhgAA"}
00407{"flow_id":28,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":88,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":169934,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUdpAAIAG5pPAqHMIarsj9sHAAFAm5\/RaepxC+VAQAQRRhgAA"}
00422{"flow_id":32,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":89,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":170066,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABxCjnAxTF4M6gNlCABFAAA0AABAADYGgmJquyP2wKhzCABQwcSHsZvpEuyGtoASchC7PAAAAgQFtAEBBAIBAwMH"}
00406{"flow_id":32,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":90,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":170186,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUdtAAIAG5pLAqHMIarsj9sHEAFAS7Ia2h7Gb6lAQAQRtGwAA"}
00406{"flow_id":32,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":91,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":170212,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUdtAAIAG5pLAqHMIarsj9sHEAFAS7Ia2h7Gb6lAQAQRtGwAA"}
00422{"flow_id":29,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":92,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":170277,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABxCjnAxTF4M6gNlCABFAAA0AABAADYGgmJquyP2wKhzCABQwcHaep2g2r0bEYASchAKkwAAAgQFtAEBBAIBAwMH"}
00406{"flow_id":29,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":93,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":170422,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUdxAAIAG5pHAqHMIarsj9sHBAFDavRsR2nqdoVAQAQS8cQAA"}
00406{"flow_id":29,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":94,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":170444,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUdxAAIAG5pHAqHMIarsj9sHBAFDavRsR2nqdoVAQAQS8cQAA"}
00423{"flow_id":27,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":95,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":170482,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABxCjnAxTF4M6gNlCABFAAA0AABAADYGgmJquyP2wKhzCABQwb\/T2SVtRRe+4IASchB7QAAAAgQFtAEBBAIBAwMH"}
00407{"flow_id":27,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":96,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":170578,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUd1AAIAG5pDAqHMIarsj9sG\/AFBFF77g09klblAQAQQtHwAA"}
00407{"flow_id":27,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":97,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":170601,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUd1AAIAG5pDAqHMIarsj9sG\/AFBFF77g09klblAQAQQtHwAA"}
00423{"flow_id":30,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":98,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":173117,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABxCjnAxTF4M6gNlCABFAAA0AABAADYGgmJquyP2wKhzCABQwcLBVjGFF\/Pwi4ASchB9IQAAAgQFtAEBBAIBAwMH"}
00408{"flow_id":30,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":99,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":173286,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUd5AAIAG5o\/AqHMIarsj9sHCAFAX8\/CLwVYxhlAQAQQvAAAA"}
00409{"flow_id":30,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":100,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":173327,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUd5AAIAG5o\/AqHMIarsj9sHCAFAX8\/CLwVYxhlAQAQQvAAAA"}
00423{"flow_id":31,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":101,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":173449,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABxCjnAxTF4M6gNlCABFAAA0AABAADYGgmJquyP2wKhzCABQwcMVSXssyIjeXYASchBBHwAAAgQFtAEBBAIBAwMH"}
00408{"flow_id":31,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":102,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":173557,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUd9AAIAG5o7AqHMIarsj9sHDAFDIiN5dFUl7LVAQAQTy\/QAA"}
00408{"flow_id":31,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":103,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":173583,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUd9AAIAG5o7AqHMIarsj9sHDAFDIiN5dFUl7LVAQAQTy\/QAA"}
00895{"flow_id":28,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":104,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":175159,"pkt_caplen":416,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":416,"pkt_l4_len":382,"pkt":"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"}
00788{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":104,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":6,"flow_first_seen":1470104379117,"flow_last_seen":1470104379175,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":362,"flow_tot_l4_payload_len":362,"flow_avg_l4_payload_len":60,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"106.187.35.246","src_port":49600,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Streaming"},"http": {"hostname":"pic.1kxun.com","url":"pic.1kxun.com\/video_kankan\/images\/videos\/18283-jfyj3.jpg","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (Windows NT 6.1) AppleWebKit\/537.22 (KHTML, like Gecko) Chrome\/25.0.1364.152 Safari\/537.22"}}
00895{"flow_id":27,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":105,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":175159,"pkt_caplen":415,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":415,"pkt_l4_len":381,"pkt":"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"}
00787{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":105,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":6,"flow_first_seen":1470104379117,"flow_last_seen":1470104379175,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":361,"flow_tot_l4_payload_len":361,"flow_avg_l4_payload_len":60,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"106.187.35.246","src_port":49599,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Streaming"},"http": {"hostname":"pic.1kxun.com","url":"pic.1kxun.com\/video_kankan\/images\/videos\/13480-alps.jpg","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (Windows NT 6.1) AppleWebKit\/537.22 (KHTML, like Gecko) Chrome\/25.0.1364.152 Safari\/537.22"}}
00895{"flow_id":28,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":106,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":175212,"pkt_caplen":416,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":416,"pkt_l4_len":382,"pkt":"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"}
00895{"flow_id":27,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":107,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":175212,"pkt_caplen":415,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":415,"pkt_l4_len":381,"pkt":"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"}
00890{"flow_id":32,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":108,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":175928,"pkt_caplen":414,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":414,"pkt_l4_len":380,"pkt":"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"}
00786{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":108,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":6,"flow_first_seen":1470104379119,"flow_last_seen":1470104379175,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":360,"flow_tot_l4_payload_len":360,"flow_avg_l4_payload_len":60,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"106.187.35.246","src_port":49604,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Streaming"},"http": {"hostname":"pic.1kxun.com","url":"pic.1kxun.com\/video_kankan\/images\/videos\/4657-jfyj.jpg","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (Windows NT 6.1) AppleWebKit\/537.22 (KHTML, like Gecko) Chrome\/25.0.1364.152 Safari\/537.22"}}
00890{"flow_id":29,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":109,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":175928,"pkt_caplen":414,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":414,"pkt_l4_len":380,"pkt":"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"}
00786{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":109,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":6,"flow_first_seen":1470104379118,"flow_last_seen":1470104379175,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":360,"flow_tot_l4_payload_len":360,"flow_avg_l4_payload_len":60,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"106.187.35.246","src_port":49601,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Streaming"},"http": {"hostname":"pic.1kxun.com","url":"pic.1kxun.com\/video_kankan\/images\/videos\/3578-ywzj.jpg","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (Windows NT 6.1) AppleWebKit\/537.22 (KHTML, like Gecko) Chrome\/25.0.1364.152 Safari\/537.22"}}
00890{"flow_id":29,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":110,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":175962,"pkt_caplen":414,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":414,"pkt_l4_len":380,"pkt":"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"}
00890{"flow_id":32,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":111,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":175963,"pkt_caplen":414,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":414,"pkt_l4_len":380,"pkt":"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"}
00891{"flow_id":30,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":112,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":177479,"pkt_caplen":413,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":413,"pkt_l4_len":379,"pkt":"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"}
00785{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":112,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":6,"flow_first_seen":1470104379118,"flow_last_seen":1470104379177,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":359,"flow_tot_l4_payload_len":359,"flow_avg_l4_payload_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"106.187.35.246","src_port":49602,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Streaming"},"http": {"hostname":"pic.1kxun.com","url":"pic.1kxun.com\/video_kankan\/images\/videos\/3713-ydm.jpg","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (Windows NT 6.1) AppleWebKit\/537.22 (KHTML, like Gecko) Chrome\/25.0.1364.152 Safari\/537.22"}}
00891{"flow_id":30,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":113,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":177535,"pkt_caplen":413,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":413,"pkt_l4_len":379,"pkt":"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"}
00895{"flow_id":31,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":114,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":178474,"pkt_caplen":415,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":415,"pkt_l4_len":381,"pkt":"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"}
00787{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":114,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":6,"flow_first_seen":1470104379118,"flow_last_seen":1470104379178,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":361,"flow_tot_l4_payload_len":361,"flow_avg_l4_payload_len":60,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"106.187.35.246","src_port":49603,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Streaming"},"http": {"hostname":"pic.1kxun.com","url":"pic.1kxun.com\/video_kankan\/images\/videos\/16649-ljdz.jpg","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (Windows NT 6.1) AppleWebKit\/537.22 (KHTML, like Gecko) Chrome\/25.0.1364.152 Safari\/537.22"}}
00895{"flow_id":31,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":115,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":178519,"pkt_caplen":415,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":415,"pkt_l4_len":381,"pkt":"TF4M6gNlABxCjnAxCABFAAGRUeVAAIAG5R\/AqHMIarsj9sHDAFDIiN5dFUl7LVAYAQTaZQAAR0VUIC92aWRlb19rYW5rYW4vaW1hZ2VzL3ZpZGVvcy8xNjY0OS1samR6LmpwZyBIVFRQLzEuMQ0KSG9zdDogcGljLjFreHVuLmNvbQ0KQ29ubmVjdGlvbjoga2VlcC1hbGl2ZQ0KQWNjZXB0OiAqLyoNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wIChXaW5kb3dzIE5UIDYuMSkgQXBwbGVXZWJLaXQvNTM3LjIyIChLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzI1LjAuMTM2NC4xNTIgU2FmYXJpLzUzNy4yMg0KUmVmZXJlcjogaHR0cDovL2FkLjFreHVuLmNvbS9tYWMNCkFjY2VwdC1FbmNvZGluZzogZ3ppcCxkZWZsYXRlDQpBY2NlcHQtTGFuZ3VhZ2U6IGVuLXVzLGVuDQpBY2NlcHQtQ2hhcnNldDogaXNvLTg4NTktMSwqLHV0Zi04DQoNCg=="}
00415{"flow_id":29,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":116,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":218484,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABxCjnAxTF4M6gNlCABFAAAoCBpAADYGelRquyP2wKhzCABQwcHaep2h2r0ceVAQAO27IAAAAAAAAAAA"}
00838{"flow_id":29,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":117,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":230039,"pkt_caplen":373,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":373,"pkt_l4_len":339,"pkt":"ABxCjnAxTF4M6gNlCABFAAFnCBtAADYGeRRquyP2wKhzCABQwcHaep2h2r0ceVAYAO3V3gAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG9wZW5yZXN0eS8xLjkuNy4xDQpEYXRlOiBUdWUsIDAyIEF1ZyAyMDE2IDAyOjE5OjQwIEdNVA0KQ29udGVudC1UeXBlOiBpbWFnZS9qcGVnDQpDb250ZW50LUxlbmd0aDogMjkwMjcNCkxhc3QtTW9kaWZpZWQ6IEZyaSwgMjEgT2N0IDIwMTEgMDQ6MjY6NTkgR01UDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpFVGFnOiAiNGVhMGY0OTMtNzE2MyINCkV4cGlyZXM6IE1vbiwgMzEgT2N0IDIwMTYgMDI6MTk6NDAgR01UDQpDYWNoZS1Db250cm9sOiBtYXgtYWdlPTc3NzYwMDANCkFjY2VwdC1SYW5nZXM6IGJ5dGVzDQoNCg=="}
00415{"flow_id":28,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":118,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":230171,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABxCjnAxTF4M6gNlCABFAAAo10NAADYGqypquyP2wKhzCABQwcB6nEL5Juf1xFAQAO1QMwAAAAAAAAAA"}
00415{"flow_id":32,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":119,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":230342,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABxCjnAxTF4M6gNlCABFAAAoDlFAADYGdB1quyP2wKhzCABQwcSHsZvqEuyIHlAQAO1rygAAAAAAAAAA"}
00838{"flow_id":32,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":120,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":230447,"pkt_caplen":373,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":373,"pkt_l4_len":339,"pkt":"ABxCjnAxTF4M6gNlCABFAAFnDlJAADYGct1quyP2wKhzCABQwcSHsZvqEuyIHlAYAO1UdQAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG9wZW5yZXN0eS8xLjkuNy4xDQpEYXRlOiBUdWUsIDAyIEF1ZyAyMDE2IDAyOjE5OjQwIEdNVA0KQ29udGVudC1UeXBlOiBpbWFnZS9qcGVnDQpDb250ZW50LUxlbmd0aDogMjM1NTgNCkxhc3QtTW9kaWZpZWQ6IFR1ZSwgMjkgTm92IDIwMTEgMDE6NTM6NTQgR01UDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpFVGFnOiAiNGVkNDNiMzItNWMwNiINCkV4cGlyZXM6IE1vbiwgMzEgT2N0IDIwMTYgMDI6MTk6NDAgR01UDQpDYWNoZS1Db250cm9sOiBtYXgtYWdlPTc3NzYwMDANCkFjY2VwdC1SYW5nZXM6IGJ5dGVzDQoNCg=="}
02118{"flow_id":32,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":121,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":230517,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"ABxCjnAxTF4M6gNlCABFAAUUDlNAADYGby9quyP2wKhzCABQwcSHsZ0pEuyIHlAQAO0qvQAA\/9j\/4AAQSkZJRgABAgEASABIAAD\/2wBDAAMCAgMCAgMDAwMEAwMEBQgFBQQEBQoHBwYIDAoMDAsKCwsNDhIQDQ4RDgsLEBYQERMUFRUVDA8XGBYUGBIUFRT\/2wBDAQMEBAUEBQkFBQkUDQsNFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBT\/wAARCADwAMgDAREAAhEBAxEB\/8QAHQAAAgIDAQEBAAAAAAAAAAAABgcEBQIDCAEJAP\/EAEMQAAIBAgUCBAIIBAQGAgEFAAECAwQRAAUGEiEHMRNBUWEicQgUMkKBkaHBFSNSsWLR4fAWFzNygqJD8SQJNWOSsv\/EABwBAAEFAQEBAAAAAAAAAAAAAAQBAgMFBgAHCP\/EAD4RAAIBAgUBBQYEAwcFAQEAAAECAAMRBAUSITFBBhMiUWEHMnGBkaEUscHwQtHhFSMzUmKC8RZyorLCJET\/2gAMAwEAAhEDEQA\/APle63kYduThbRLzErtYY7iLHZpnQ+QVmQZXVyZaks00CPIzO3JtybX9fLGHxeYYqnXqIr2AJtPqns92RyHGZVhMVUw2p3VS1y3qCefMcS8j0dkUKHblFIOPNLn9cVxzDFsd6hmuHZHIaSErg0+5\/MyVBkGWU7kx5dSoTa1oV\/yxG2KruN3P1lhSyLKqD3TDJv8A6V\/UTTmOQU+ZUu2JEp5AwKywoEYgfdJ7gH1GJ6OLei\/jJI9Tf5yszHs\/h8xw9qCimQbhlXSTbbSTa4B8xOeamM09dKhFtjstvSxx6KhuAZ8Y107uq6eRI+8sqGk8U3sfX9cWdKnqlZUe0vaLJCQ+64IYWNuO9sWKULXvBGq+UtqLLWp6qWNECmNW3e9ucFomk2EHd7qDHT0q19mea6eyrTFFpwSpl5cHM2kNipJJFiLd\/LBmHdjtbYSgx2Gpq7VmfnpNHWOnqaoZdCYmDK7SbdvA4tiWuL2iYBlBJgzleXSPCBItmBsLjjDEXaGOwBuJv\/hsil0KXN\/IeWHkRmsczZJlhhKjaR74UxA95Cqst3sL7i3yxGUDSRXtKqsy1e2yxt5YiZSvEmV\/OUlZQgA3A9BiJkvCleVFRRWv248vTEDJJwwMgmDeyqt2YnaAvNz6C2IWSSgzRPQTh5k8GUPCC0qlCDGB3LC3AFx39cCMtpKDIlTQTwRQySQyxxTgtFI6ELIAbEqexAII48xbEJW8lB6yE6WOIGEmBmp0sL4iIjwYz+jmj1zDPhW1SbaLJVNbUueV323KD5fCB29TbFzgqKg624X8\/wCkpcxxBWn3acvsPhFQ5vIx7cnGel71mG74r447xwjFyLqyuS5JR0H8NM706bPEMtr8k9re+M5icm\/EVmq67XnteTe0k5RllHADDajTFr6udyeLesYWS56+o9MrXxR\/VpJkkUKDv2EXA\/tfGcrYZcLiu6JuARPactzqrn2RjHIuhnDjbexFxM6CWaRoFmukjKihWjNy1iSb+XGFqoi3Kbjc8wfAYjE1WprifCxCgAqbk2NzfpcfeLbMered0ddUQJDSL4UjJcxk9iRfvjRU8mwrIGJO4854zjPaVnlGvUoqtMaSR7p6G3nAWeqNW80rhRJI5c2HmTc40iAKgUTx2rUatVaq3LEn6wm01U0dJmkqTzrD"}
02115{"flow_id":32,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":122,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":230570,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"}
02120{"flow_id":32,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":123,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":230619,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"}
02122{"flow_id":32,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":124,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":230692,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"}
02117{"flow_id":29,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":125,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":230840,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"}
02124{"flow_id":29,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":126,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":230909,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"ABxCjnAxTF4M6gNlCABFAAUUCB1AADYGdWVquyP2wKhzCABQwcHaeqPM2r0ceVAQAO0aaQAA6WWdRWIflVaiqlmU9tIClOKC2zn3J5z8tumDWFxoysqKo6ETVbhfh1YfaKQrkLBHYggH\/XH6armFPmfo4O7ahXBHZXt9v6aiDswJEkqa5SBSaoJ\/xCaiQ2qA4yR5SiFYcS4O4ynkEe4+upEnc6AJ5sOJKUE4UDxg+30Pz134kPia1q0F6bPhtp9I3hRUecAcn\/LTOvH41gDzOu4JMtd0lsqTeV92xbURJU5OmsRvVzhG4Faj9kBR\/TXAPa2T8SLfURqB\/Wu443WfxtXFU1yd9FiVRR81PIEWEjJCfnktED57tcsIBCnwoljFQuwAHky0F02I25Z7NqoQumsoZNGqj5ytldVceelw3Vk8pLmGzu9hIUD31z0i4t5P1Lo\/0+f7S3+0WKi\/p1og9fy8f3lFJVuqh1Z1tDflBCt6UOHGDn8p+xyP00w9QVcZiPg+JkcFjeoLeR5h4bccmWelme40uKppLBUASoknJOflnJ0mVeQAPiNieJ6g3TOkNFrs5iDEW38WktqTHcWoOSd6uzadpzgcn5DnnU2oUEKJxbX7JjJtvoZUqbUUKXGhSVoQpKGEpUn1bSAojB5B5\/T20YYrINmRa\/Zi4Zg+bb1TZWkD4RxqKgFABTtJUR9srUedSqAKljAX9akS3R8jkYxqRIMrbmSqRx+XH314HXid3PBVDQlIHlIwDkDaODrw\/M6W3PFdICT\/ALsftr3U9yM8zSkAj+WnIGM7deI1OcjM004KyQkA\/TRfiRJmZp+5JBA+oI10CR3MnbfSFOJASVoShakFGDhXbH7j99d6AkzWy9zScpSELA8tPp4HHbUgvzBlyOpk1CQzJZe2JSW1pWFEdsEHU3QFSNSddunG4b3jRGm0yFNNpZbca85D6x6y2k5yflvXg\/trOka2JodwIgubnEeacIaPnuFRx6gQQP2P9deB1CAbmhd0In4Sak7g4XEY+QSobf6HvqQM6wEggVJQlS\/bjcFdiPY\/076iNbgmUgTxeKWpB2K5POD2Vn\/XXejBbm5HeKVEY2KKc4H\/AFj314HQ1OHqWQtHp1EoVn2958Zv8bqDzriw8nathtGQUnPb8o4+p049PvXNyLXU\/QgA\/qZtPUfSTg4NVbD+I5J\/kBHF0PqbfT6fdnUN47afaduTJvmEYzJeR5EZA\/xKU4rH21dzEVTwB+f8TDKCo6MRXg+6Wo6jp6h1LbJm12mUjzoMKM3vckLU4C8QCQFKCQCE++TpFkkmpu+26j70xVruW1+lXs\/z+P8AM6U0Kw19Q+jF1wagREuOe1EkvPR1b0szXEofZAJ\/N5bYYbPt+YaDQTicD9\/9PEVeoZKeoZNpXoLof18ygPVqz3qleUauGO3F\/HS68uMxlPkTWlbJjJTxtO8eYAfZeBp5l7upX7r\/AKRLigU2sP8Aym11fS3086JtLjBKanKkNtNl1KVkDJUogFXHAxnB7+2lIfiNiXzXzbuV2gdV7oiSWn485tiUzhaJLUdtLiCOwCgnI\/8AQaicixvmFWhFGgIUWh1wvr+1NJeTXHUrU6FLUWWzhOfXnKcHKc\/vrq5Fm9EyLUIVIMYd\/Wkii3RXAyUhioSEzUoQBtShSfRjB90kHH11fWv2wdHoxbZYHA+8Gm6OdvCe2vEbgpkqjc\/lOva1PTxco+ONv31Eic1NR2kkE5T214DU7PBV"}
02122{"flow_id":29,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":127,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":230968,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"}
02123{"flow_id":29,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":128,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":231017,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"}
00838{"flow_id":28,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":129,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":231048,"pkt_caplen":373,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":373,"pkt_l4_len":339,"pkt":"ABxCjnAxTF4M6gNlCABFAAFn10RAADYGqepquyP2wKhzCABQwcB6nEL5Juf1xFAYAO04IgAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG9wZW5yZXN0eS8xLjkuNy4xDQpEYXRlOiBUdWUsIDAyIEF1ZyAyMDE2IDAyOjE5OjQwIEdNVA0KQ29udGVudC1UeXBlOiBpbWFnZS9qcGVnDQpDb250ZW50LUxlbmd0aDogNTg2MDQNCkxhc3QtTW9kaWZpZWQ6IFR1ZSwgMjQgTWFyIDIwMTUgMTA6MTE6NTAgR01UDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpFVGFnOiAiNTUxMTM4NjYtZTRlYyINCkV4cGlyZXM6IE1vbiwgMzEgT2N0IDIwMTYgMDI6MTk6NDAgR01UDQpDYWNoZS1Db250cm9sOiBtYXgtYWdlPTc3NzYwMDANCkFjY2VwdC1SYW5nZXM6IGJ5dGVzDQoNCg=="}
02126{"flow_id":28,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":130,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":231079,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"}
02151{"flow_id":28,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":131,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":231119,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"}
02143{"flow_id":28,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":132,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":231182,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"}
02148{"flow_id":28,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":133,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":231222,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"}
02110{"flow_id":29,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":134,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":231290,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"}
02121{"flow_id":29,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":135,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":231327,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"ABxCjnAxTF4M6gNlCABFAAUUCCFAADYGdWFquyP2wKhzCABQwcHaerd82r0ceVAQAO06sQAAa4itc\/FZFitK82MHa70jFvdO5UEhNfuGqNmfIfjL+JKn476FFTKwMqQ5GmtKPzI+mmzYhSooo2xipM5LLeT9KPv+Qdf5kD1XotFPTi2JLsKeL0agIps6OpBQ1DUw4pIKyR61qb2DA7Ac88ajk+0MdQ\/\/AFBJ4i3G5+I\/h+d\/cw2leFi8+gcOPVr3n0GjxKoyoRUx6zHedUQcFacLAO3lJAJ\/N241UwbqzZpozyaWNRZfMNLroVLvamVKpOy4Cqezsco02DJ+IW3DQEtx2XUjkqVhZ9XqT5Kic7s6cOo0WU9TO12shFbD+cTN79Pq\/aZ\/EWadMhTKO9hyQ1GU3sG7KVcDGOeFA441Vuo9+vmojCnJ9q0AH+Utf0N6o1LxSuWyiq1aI1U7ciGLUGZRCdracrbkto4LiVnKFJB9Jx7K0hQLU\/1+NdTc05X7xjewo+snv87gR4ub2mSqTZVIXKlNwX3XZMhpUVQjBaVBtCx\/x4BV+UnV1hodTPtT7d7p8b8\/y8wMh0a1H6B\/8taDFkvOJaejzaFKSptveRuKwggYSkHjnnHfOlxs0SCu5dVE1rlNuq0Kjw4rLSLiodVXsbIDUWQoDcPyhSsE47e3Oj1gFd60ZCypVXYaXHoPwBp7kZMdttIbZisvIUT5KUJ2pAB\/MCUjJ+QH01oiSEH4mdI2xM1OsbXk9HI7DSQZE+Uy20gf3lblL\/8A4jUK3AcsfiVbV5aAiRkdVbtqdJt21KiXywsswVJeW4hw5Xg7+cHI5x9QPbSenGQ5IZT87jrLyW\/dShHxHZ138TNudH5kihsR3KxdLO1Qpnwz21SfQokLSMYCFZ79+O+iW2cWMrU0BgJWK6fH3X6jV3kRqe5RoqiAGI8FJW2nCeDuBIVwocg\/m3fTVcXnfmWziqeiplg+iXXikdaqeW0ARq0hClux0IKW8AnATuJOQBz9idX6becTZeN7f1CHNQhlJVuP6HTJImYag1UGCEL2glQBwProhXl0YEOR9Q+Im70RNu2tuSJq3JKkvMuLUVbihCNp2\/bAwD9NVPU0FWG1dfyP8zQ+h2G\/MW2yH1a6g2ZXGa27UqRLKmEsNUtUVjcl1CUhTi15I2ndlH2GdfEX9KupCoHAZuz3P0FT6g7vyK\/w5RTqJb86pXK4slLapLri2mCskoSohQT27DX0jGIroUE+BPmPqFdlmU2\/kz3oHRCsVd9mSh4l1txKlNBICt2QQBk\/IZ0vu9axq2AHzLON6I94LE+Jr1NmRD6zVSPEHrcnPoGOPzjP+unzkOAw+Yk7qtKmElGteXMqc6hxI4mVR4+UHj+Vpvbyr7f5\/TUZFhs6hNddTpPRuDCtWyJaaxftQWGp1SCAEwXFqSlDaFH0rdUDgkcI45KvywA9xgv3gXPBS0HemFi061uq9nx6jW0VWm3hTqjTp62tzamHVpdjqRuV+b+ZsIc7HJ+Wm9dK0XKN9GJL7mtoZgOwRNqp3fe3RyHHqSab+Ey1ulcBzCv9mjLiJjFpIVyfSho7vmjOuf8AECjNx8\/Esv6cLdc\/BHchI1Vq9\/Uei0ja\/uYacKW3VpbbQkqKnHV5ACcgZKlZPbGkVrlmLN5mkx6+SqijQEg13MaralGdmW\/HqNEpwcjIjx5y2Uo3LKiEtknkqUD25IPz1cDKCNL5i1y1g0DqODohRHLXoLNe"}
02120{"flow_id":32,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":138,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":231410,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"}
02126{"flow_id":32,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":139,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":231454,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"}
02147{"flow_id":28,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":142,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":231622,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"}
02147{"flow_id":28,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":143,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":231695,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"}
00416{"flow_id":27,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":149,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":232003,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABxCjnAxTF4M6gNlCABFAAAosNNAADYG0ZpquyP2wKhzCABQwb\/T2SVuRRfASVAQAO0rzQAAAAAAAAAA"}
00839{"flow_id":27,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":150,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":232043,"pkt_caplen":373,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":373,"pkt_l4_len":339,"pkt":"ABxCjnAxTF4M6gNlCABFAAFnsNRAADYG0FpquyP2wKhzCABQwb\/T2SVuRRfASVAYAO1IKAAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG9wZW5yZXN0eS8xLjkuNy4xDQpEYXRlOiBUdWUsIDAyIEF1ZyAyMDE2IDAyOjE5OjQwIEdNVA0KQ29udGVudC1UeXBlOiBpbWFnZS9qcGVnDQpDb250ZW50LUxlbmd0aDogMjc3NzINCkxhc3QtTW9kaWZpZWQ6IFNhdCwgMjggRGVjIDIwMTMgMDg6MTU6MzYgR01UDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpFVGFnOiAiNTJiZTg4YTgtNmM3YyINCkV4cGlyZXM6IE1vbiwgMzEgT2N0IDIwMTYgMDI6MTk6NDAgR01UDQpDYWNoZS1Db250cm9sOiBtYXgtYWdlPTc3NzYwMDANCkFjY2VwdC1SYW5nZXM6IGJ5dGVzDQoNCg=="}
02118{"flow_id":27,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":155,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":232336,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"}
02112{"flow_id":27,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":156,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":232393,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"}
00409{"flow_id":27,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":157,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":232489,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUehAAIAG5oXAqHMIarsj9sG\/AFBFF8BJ09kwhVAQAQQgnwAA"}
00409{"flow_id":27,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":158,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":232515,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUehAAIAG5oXAqHMIarsj9sG\/AFBFF8BJ09kwhVAQAQQgnwAA"}
02120{"flow_id":27,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":159,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":237486,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"}
02127{"flow_id":27,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":160,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":237590,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"}
00416{"flow_id":30,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":161,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":237623,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABxCjnAxTF4M6gNlCABFAAAopDtAADYG3jJquyP2wKhzCABQwcLBVjGGF\/Px8lAQAO0tsAAAAAAAAAAA"}
00839{"flow_id":30,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":162,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":237691,"pkt_caplen":373,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":373,"pkt_l4_len":339,"pkt":"ABxCjnAxTF4M6gNlCABFAAFnpDxAADYG3PJquyP2wKhzCABQwcLBVjGGF\/Px8lAYAO3lWQAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG9wZW5yZXN0eS8xLjkuNy4xDQpEYXRlOiBUdWUsIDAyIEF1ZyAyMDE2IDAyOjE5OjQwIEdNVA0KQ29udGVudC1UeXBlOiBpbWFnZS9qcGVnDQpDb250ZW50LUxlbmd0aDogMjYwMjMNCkxhc3QtTW9kaWZpZWQ6IFN1biwgMjMgT2N0IDIwMTEgMTU6NTk6MzggR01UDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpFVGFnOiAiNGVhNDM5ZWEtNjVhNyINCkV4cGlyZXM6IE1vbiwgMzEgT2N0IDIwMTYgMDI6MTk6NDAgR01UDQpDYWNoZS1Db250cm9sOiBtYXgtYWdlPTc3NzYwMDANCkFjY2VwdC1SYW5nZXM6IGJ5dGVzDQoNCg=="}
02141{"flow_id":30,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":163,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":237727,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"}
02119{"flow_id":30,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":164,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":237757,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"}
02114{"flow_id":30,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":165,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":237831,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"}
02113{"flow_id":30,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":166,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":237870,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"}
02113{"flow_id":30,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":173,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":238589,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"}
02113{"flow_id":30,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":174,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":238673,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"}
00415{"flow_id":31,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":177,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":238944,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABxCjnAxTF4M6gNlCABFAAAo7pBAADYGk91quyP2wKhzCABQwcMVSXstyIjfxlAQAO3xqwAAAAAAAAAA"}
00838{"flow_id":31,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":178,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":239014,"pkt_caplen":373,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":373,"pkt_l4_len":339,"pkt":"ABxCjnAxTF4M6gNlCABFAAFn7pFAADYGkp1quyP2wKhzCABQwcMVSXstyIjfxlAYAO1EfwAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG9wZW5yZXN0eS8xLjkuNy4xDQpEYXRlOiBUdWUsIDAyIEF1ZyAyMDE2IDAyOjE5OjQwIEdNVA0KQ29udGVudC1UeXBlOiBpbWFnZS9qcGVnDQpDb250ZW50LUxlbmd0aDogMjI2NDcNCkxhc3QtTW9kaWZpZWQ6IFdlZCwgMTcgU2VwIDIwMTQgMTQ6NTI6NTcgR01UDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpFVGFnOiAiNTQxOWEwNDktNTg3NyINCkV4cGlyZXM6IE1vbiwgMzEgT2N0IDIwMTYgMDI6MTk6NDAgR01UDQpDYWNoZS1Db250cm9sOiBtYXgtYWdlPTc3NzYwMDANCkFjY2VwdC1SYW5nZXM6IGJ5dGVzDQoNCg=="}
02114{"flow_id":31,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":179,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":239082,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"ABxCjnAxTF4M6gNlCABFAAUU7pJAADYGju9quyP2wKhzCABQwcMVSXxsyIjfxlAQAO2togAA\/9j\/4AAQSkZJRgABAQAAAQABAAD\/2wBDAAUDBAQEAwUEBAQFBQUGBwwIBwcHBw8LCwkMEQ8SEhEPERETFhwXExQaFRERGCEYGh0dHx8fExciJCIeJBweHx7\/2wBDAQUFBQcGBw4ICA4eFBEUHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh7\/wAARCADwAMgDAREAAhEBAxEB\/8QAHQAAAQUAAwEAAAAAAAAAAAAABwMEBQYIAQIJAP\/EAFEQAAIBAwIEAwUFAwUMBwkBAAECAwQFEQAGBxIhMRNBUQgUImGBIzJxkaEVQsEzUnKxsgkkJTRigpKio7PR8BZDZnN2g8IoNTc4U1R1tPHD\/8QAGgEAAgMBAQAAAAAAAAAAAAAAAwQBAgUABv\/EADURAAICAQMCBQIEBQUBAQEAAAABAhEDBBIhMUEFEyJRYTJxFCOBoQYzQpGxFcHR4fDxFqL\/2gAMAwEAAhEDEQA\/AD1SVAjl5s60JQbQjF0y0UF0p+UCR+U489JzxO+ByORIeiuppB8Ein66HtaCLImdJJ43xgjGuSIbsYVcKMeZT30aMgUojUEocBiDq\/UodaiJXAIHxeePPVov3KyjYraYWWfIBGq5JKi2OLTJapu9qopfArbnRU8wXnKSzKrAeuCe2lBu6OrXiyyFYxdaBmkwEAqF+LPbHXr2Pb01xzpkBX19rikEsF0omDAtgTr2AJJ79sA\/kdMQknwxaca5Q8tW6LK0DM14t4CY5mNSmBnoOudUyRovjlwSsV+sxUN+2LfynJB95Xrjv56FQV0LC92cMUN2oeYJzkeOuQuM579sEfmNRRWxnBvPZ8zqkO67G7v91Vr4yT0J7Z9AT9NScJ1W9doRxLJJuyxojpzqzV8QDLkrkHm6jKsPofTXHIb1e7trCp91bc9lE\/P4YiNdGH5s45eXmznPTHrqUiZNNDuV42VoycEeuiRT6g20VuZJfeSWBGD302ugq07JSnqmg5ScgZwNBlGwqlRYrdUeMnN5HS0lTDp2rHmqlj4Y89ccfa4g+1xwLxSzNM2Ry+fU9tau9JCGx2dBFWSS+FGpck4OPLUtxStlak3SHhtt1pPtDh\/kD10NZIT4L7Jx5O95uFbarZFVNAHaSVYlVm5QC3YseuB5fiRoEmk+AWs1MtNiU0rbaXt19yPfdVctHW1JtC8lEwSVHqgsgJx3Xl+ePodDv4EZ+K5VCc\/L4hw+ee3avkcUN\/ee9JbZqJIZjLJG5E3NylUVs9uoPNj6aspdg+HxFzz+RKNO2ut9FfsMBvZxC2LSGlySg8f4SgDkknHQ\/Znp8xqrmJf622uMfP37c\/HXjoLRb2mjLTw2kmFpFiikeblUtzKCGOML97Pn0B1zdl143KnKOPi0k7r268cdSYtl+t97vv7Kr7HRNUrJLHKz8suORFIIJXqDkj6aFVD+m8U87P5DjUk2nz7JP97LLJbraFj5bbRjwf5L7Bfg\/o9On01BsNexV729JbLnDRJt+3GleCafxFCgqEQl8py9uoXOevNq64MvU62eHMobbTTd37K3xX6dSG29XW2tuNH4W1aRo6mONqgLGp8AF2VTjl6gFSSTjGrSnaoT0viks84bcf1JN89Lde3PySMt5oaevmSn2lZWEVw9xjke"}
02126{"flow_id":31,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":182,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":239446,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"ABxCjnAxTF4M6gNlCABFAAUU7pNAADYGju5quyP2wKhzCABQwcMVSYFYyIjfxlAQAO1F9wAAWNDz4PxEcnwrgd9Dovk8VmpyjGCpS2\/VXPzxwhJ970jTtKdp0Rr4pOWF\/FXsviAkty5Ujwjj6a6hf\/XZU15fP3+99vgX21X7Svt+ipk2bZ4pndx4jUsRdVWJWU\/d8wxXv0xqEhrSeLx1OVY1Guv+E\/8AcuE21NryUqUsm2rM9PHkJE1DEUXJJOAVwOrMf84+uuZsIo+47jtiy7lq422TaHlpCJUq0giEvimPxAR8GR1\/ez366lGLq\/GFp808bhaj3vvV9DtJuyeodI0srGdVlacLODy+GxVinT4gO57YB0RSoD\/q8pUlj55vn2dOuOa6v4GFduKeO00tzaii5qlgFjFQCApUtktjoehGNGUmo3RGTxOUNPHO4L1PhX8X1r9hrLuuSXBSg+KIqWRpcAcxUJ1x582fprt9KqAy8YlTahyvn3art3snIOIcEcBEVrKuI45Ahm7hlct5eRUD582lpLuw\/wDr8UuIc8Pr9\/j4LptqtqLnaYa6ogigaYcypHP4o5fL4gB1+XlqrNnS55ajEsklV+zslFBGoGkjnXEM5UHOuRVlTqLcTIvhp3PUn00ysgKUPYk6Siggj+zjVM9TgdzoUpuQWMEhcwq3Y6rbLbCJ3RZqm52t6amqKaFnOHFQnNG6YIKnzHkcjrkDU2I67Sz1GF44tK+t9H8Mg6TZNetrutv\/AGlRTLWquJzEfFDDk+8Qeq\/CenqdRZnQ8HyxxZcTmnurmubVdf7D6DZ4p92Ne5Kim5Wnlk5OXDlWjVQufkQT9dSpDGLwvZq\/xNrq3801VFfm4e1iR80FzpFYg5JjbkYt4gJOD35XAH9HXWZ0vAMiXpmr+33T\/Z\/sI1exKuMl4LjSSRRvzxq8TEsOZW+MA4I+Ej8Dq0bborPwLLF+mapcq0\/jr\/YfbbsskO4Eu8s8PjAzeKEQqrc4XGPTBB+h1ecK5HNJ4dLHqfxDfPquvnp\/YuT1PhqCxJU+Y7aptvobTlRWr7bKy63OoqKS5UUUM9CaPllRi6KxJYgg46nH0GocWjJ1ejzajJKUJJJx283avq0dbDtG42y7RVMF7iNO0n2q8mJHjEjOFyOnUsQ3T8NVsFpfCc2nzKccnHfjmruv17jg7Tle\/MKistL08t0Fx8Bovt5BgjkOT1Xr06d86iy0vC5vM5Nrbv3dOfsyPm4dVwkkkprpRJM7tJytG2GJaXqcHJwsmM\/5PpqbFpeB5E3KE1fP6231\/RkptjZIst9prkbhDKacSo45cFlZVC59CCG\/PXXwM6Pwh6bNHJuur\/eq\/wAF251cZVlYDvg51U20UDd2yzc71V3B7rSUZrMIniDDYERQr36\/FynHy1KfFGFrfB5anNLKpJX\/AMVX9xKTZF1eGCnlvFGp8eWokxCQUkctnwznOCCFIPkNTZX\/AEfM4xTmurb46N30+GnTs4u2y62balHbDUW0VNHIDzRxFUZAhHVc\/eyck6tF9ic3hWXJpIYW43F+3FVX9+5WXscuKiF5kcMYA+Vz0j6HP46deJSTp9a\/YWn4dJxlG+u3\/wDn\/kkqTY3j0MMkt3o4ZiQkZfIyvI6lep6n4lPT00nkW10cvAnOKe9X2+1NV+4Rdr0VVbLNBQVbUheEcg92iMaco7dCe\/mfUnQjf0WGWHDHHOrXHCpEprhu6OQM64o2dtSQMJkDLjXBGrEl"}
02126{"flow_id":31,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":183,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":239535,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"ABxCjnAxTF4M6gNlCABFAAUU7pRAADYGju1quyP2wKhzCABQwcMVSYZEyIjfxlAQAO3svwAAjKtjmPXUt2QlQ4RAo6agtZnn+6DO8fBC3vG7IxvkIypwf5KXXIozKstLuXhTFsDfNi3TVCpv1Ka5Y15kEXJLytE\/xESKR6jzPTUlQme3xcqy78YbLZ6F5A1JYVmZEYjDM0kjdv8AJUa44k7RdpLh\/c67spndprfcBTFuY8wBrIpB1\/CTXdyb4oBz7fvm2uGW3eKNt3PVQTV9zno44YS6SQNF1Dhw3UH0wPrrjjd16qHvPswXHcdUoFbX7OkqpinQeI9KWYj06knUubfBCgkZx4L7iqKj2ROKO162VxU22nStp+Zvi8GoCEY+XMhP+dqDhK3bNtm\/OLPCnat6qK+KgrdhUssppZ\/DkLLHMwOSCO6jPTUttnJIvG9dq2\/h3x74NbZsc1bJQUSVksfvU3iOxaSSQ8xAGep9O2oRIOds8PavfnAPcnGL3zcVz4gx3kmkekld3OHiyFRQWziRjkdgoxgA54gKFor7xXe1nwpq76KiK51GyI5K6OVSjCcw1BfmU9m5s5HlriSlcTZZRv32jAJXAW20pX4j0+3pu2uIG8e1xwrouC\/EHad9vMVduWamS6U81TzwyiQRl1AAHwkOwwc+R7jXdTifptjUPGni5xkrd5XO6O22ZpKW0JBPypThTMqEDGOngjp0BLMT11xJU+G24rxf77wAmu1fPVzU92rKNZZHJZokmiKBj54DYGfIDXEFn4yyyjjzxoAlcBdiAgBjgHlpOuuRLKTdtpR8PeEvDbixtq8XiC83SriStjkqOaCTm5zgDA6YjwQSQQx1eLa5RVpPhlyp9i0HFvjZxWot311yafbqtDZaSCfk8FQXVXVSDkDlToO5kye410nudkRW1UHP2RavdMnBK2U28YLjDc6Oomp0W4Ruk\/gqQY8hwCQAcAnyA9NDaCIMWc9tQc+TtkamyKPub111nUMI3DdQc6kunZ3Kg9tQSKxL66gq+WZ1\/uhn\/wAELf8A\/nYf91LqUVMm7vsd92xtrhtuvcNyTcNouFO89vts0sgWnhilUvAf5qsW7r89SQXzjDuiw1vtZ3q7X2rNHaYrbJSo3hs\/I7W0oi4UE\/yj4+Wus4ZcNLkZfYz4pWcvn3W52+oC57eLLEv\/APlrjiN3f\/8AJ3sf\/wAS1\/8AZOuJNiRj\/wBjIn\/sIf8A9PUdzjKUyttjhvZbjgrSbz2DWW+T0appqhnU\/jyKi\/XUkE7RWLcG5OLfCW0bX3PLtm6S8P6QxXGOPnaMCOcsMZHcAjv5644vvE61Xix8euC9pv8AfJL9c6aiqlqLg6crVDZkPMRk46EDv5ak4q3Bnee\/OH\/skvuvZlHZqinor7Um5m4BmKxsIETkCspJ5m6\/LUHC+8l3LxI9oThpV27cj7Xvl52VDWPcKKMnwWZJ3cKvMDgjK9+x89cSVK42m62Kv4+Wi932a\/XGls9Mk9xmUq9Q3vNOeYjJ8iB38tcQPrnY9x7N2\/wX4g7o3Kd27f8AeKQUdlqI2jWhDIrqFw2GKhR1I7ouQQSNcSFL2egRxK9oYE5IuU3X1+Or1xwE+C3\/AL44Ff8AiGv\/AN7BriC88ZRjjzxqH\/YMf2aTXIl9SoXS27vs\/CvhNubel4p9w7B\/aMPgWOJfAeHPMQGYLl+iv1J+XnriA5cftlzHc1Rxh4Q3mifeO3h\/huhpp1kFXCoIZZEU9HCq"}
02105{"flow_id":31,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":184,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":239606,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"ABxCjnAxTF4M6gNlCABFAAUU7pVAADYGjuxquyP2wKhzCABQwcMVSYswyIjfxlAQAO2SfwAAQVOOYL0+JRnk+xIWODO9LdxJ4fW3eFBC1P70GSop2bmMEyHDpnzGeoPmCNc2zo8F2XK9AemqlrPvEGuIpnHiHU0TTGscTRpknPTUt2clRys65wddR1ocRyg6rR1UBT20dnbm31wporPtO0TXSuju0U7QxuikRiOQFssQO7D89SiGZuXgn7QG+ItrbS3HYRbLJY42p6WoqHgVKWJ2BkY8jFnboOnXsO2pKl64ZcBbzevaB3Jd+JezJG2vN709I9TMvLK3iKsRwj8wPJk9fTXEpWVPanBXivZ9hcTdtHZtby3iCkFvxNFidoaxGGPj6fZl26+Q9dccQtLwS9oS\/bctGw6zbLUNioquSphNTNTpHDJJ993ZWLt08uvyGu6EG09xbUqqL2frjsi0q9fWQbZkttMBhTPIKcxrjJwOY+p89RZwB+IHBveN79kLZe3aewzndlhqC7UIkQSBJHlDrnm5ezI3fy1JwwfZ3F3aO\/8Ah1u\/b3Due9zWPZ1NbqmneqjjVJ+SVHQnmzlecHpkfPXHFsvu3eJe+uLfCvel92PLZhQCqju8MdSki0amR1Qk5yeZcN0B7644HNLsDjlZeGG4eBlHsGGtt9dXtVR373pViMQZHwOuMsYlxnBHMQR5jjggbM4c71o+NnCy+1m36iG22fZkNvuM5kTFPUCGZTGQGySCyjoCOvfXEkNvzhbv64bw431tFtqpmp9w0FPFaXEkYFUyzQMQMt0wEY9cdtSQRybE418QrLw\/2BuHYlPtjb+15qd6i4y1iO8yxKEyFDE8xXmwoB6kZIA1HQkmLxt7i\/wx4m8RazaGxF3Za97SPNT1Mc4U0sjmQ\/Gvf4TKwwcA4B5h1GuIIc8DeJOydh8NdxWO10963Hta41FdX2lJh1ErowVWzhioTDYz1bpnGuOHcfD3ilvaq4pcQ7\/tA2O4X7b5tVrs3jq0sh+yGckjGBEOrcuSxwMDXHEhxL4Y78ufsq8OtrW\/blRUXyz10MtdRLJGHiVVmBOS3KerL2PnrjjrV2PjDwr4kcQKrZ+wRuq1b0lNRTVKTBTSyMXIEi5\/dMrAg4BwCGHXXHBc9lrh9c+G3CGh29e2j\/aks8tZVRxuGWJ3xhAw6EhVXJHTOcZGoZIUWUY1FHISdSDnXWWT7HTUljs6Y6a6yqfuNJYgpLLqSGjiKQqep1zRyYuJsjvqCeDt4mRnOuomkNqytp6WFpqiZIol+87HAH11zpK2crbpIH6catk+\/wAVFG11nkmk8OL3ehabnPMFBwhJAye5A0FaiHuMPTZEraCDZbtbrvRistlZDVwE4542zg+h8wfkdXjJSVxYvODi6aJDmHfOpKn3MPXUnHOR664mkfa45o5GfTXFWdtSQfak45Cdc6g4+IxrjjjXHFB4t8WNrcN0poLvJLUXOsUvS0MCkySAHHMT+6uemep9AcarKW1BMWN5HRAbJ4+7T3DU0lBUxS265VDCP3WRviRyCQPiC5BAyGHQ9u+hefXVB5aVrmLsLUEsU8KTQypLE6hkdDkMD5g6OueUKNVwzvjXHHx6jGuOE28hqCwi3fUosjOXGrjvvHbF+ig23brS1DNGGU1kDvKOpBJw4Hl2x+eklqbbo0sWgjKFt8l34XcVYN0bVgqL5HFR3gIviRRAiOcsSAY8kkduoPb1xq+LVxkmpdUA1Ojl"}
02116{"flow_id":31,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":187,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":239814,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"}
02114{"flow_id":31,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":188,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":239860,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"}
00408{"flow_id":25,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":194,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":251728,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUexAAIAGmEHAqHMI3kn+p8G+AFDrM0IUhwePWlAQAQGYeAAA"}
00408{"flow_id":25,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":195,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":251779,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUexAAIAGmEHAqHMI3kn+p8G+AFDrM0IUhwePWlAQAQGYeAAA"}
00578{"flow_id":2,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":196,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":271247,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6GF4PUugBCABFAAChMMsAAAER0qXAqAU57\/\/\/+toBB2wAjcGgTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="}
00578{"flow_id":3,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":197,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":271401,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6SNIkYzEACABFAAChOp0AAAERyODAqAUs7\/\/\/+si9B2wAjdLxTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="}
00464{"flow_id":33,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":198,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":271484,"pkt_caplen":92,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":92,"pkt_l4_len":38,"pkt":"MzMAAQAD\/PiuMpcsht1gAAAAACYRAf6AAAAAAAAA6Y+64hn3aw\/\/AgAAAAAAAAAAAAAAAQAD1mgU6wAmi+DsIAAAAAEAAAAAAAAM5bCP5L2b5bCI5qmfAAD\/AAE="}
00434{"flow_id":34,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":199,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":271492,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"AQBeAAD8\/PiuMpcsCABFAAA6KxsAAAER6ZTAqANf4AAA\/NZoFOsAJg3d7CAAAAABAAAAAAAADOWwj+S9m+WwiOapnwAA\/wAB"}
00469{"flow_id":18,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":387,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":520893,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/ABxCjnAxCABFAABOUgMAAIAR9ELAqHMIwKj\/\/wCJAIkAOha6seYBEAABAAAAAAAAIEZIRkFFQkVFQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAE="}
00469{"flow_id":18,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":388,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":520951,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/ABxCjnAxCABFAABOUgMAAIAR9ELAqHMIwKj\/\/wCJAIkAOha6seYBEAABAAAAAAAAIEZIRkFFQkVFQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAE="}
00489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":389,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":1,"flow_first_seen":1470104379579,"flow_last_seen":0,"flow_min_l4_payload_len":244,"flow_max_l4_payload_len":244,"flow_tot_l4_payload_len":244,"flow_avg_l4_payload_len":244,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.67","dst_ip":"192.168.255.255","src_port":138,"dst_port":138,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00733{"flow_id":35,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":389,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":579523,"pkt_caplen":286,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":286,"pkt_l4_len":252,"pkt":"\/\/\/\/\/\/\/\/jHNut5QdCABFAAEQAABAAEARs0nAqAVDwKj\/\/wCKAIoA\/P+KEQouQ8CoBUMAigDmAAAgRkRFQkVPRUtFSkNORU1FSkVHRUZFQ0VQRVBFTENOQUEAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJPAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAATAAAAAAAAAAAAAAAAAAAAAAAAABMAFYAAwABAAEAAgBdAFxNQUlMU0xPVFxCUk9XU0UAD1DgkwQAU0FOSkktTElGRUJPT0stTAQJA5qEAA8BVapzYW5qaS1MSUZFQk9PSy1MSDUzMSBzZXJ2ZXIgKFNhbWJhLCBVYnVudHUpAA=="}
00566{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":389,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":1,"flow_first_seen":1470104379579,"flow_last_seen":0,"flow_min_l4_payload_len":244,"flow_max_l4_payload_len":244,"flow_tot_l4_payload_len":244,"flow_avg_l4_payload_len":244,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.67","dst_ip":"192.168.255.255","src_port":138,"dst_port":138,"l4_proto":"udp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"NetBIOS.SMBv1","breed":"Dangerous","category":"System"}}
00700{"flow_id":35,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":390,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":579704,"pkt_caplen":263,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":263,"pkt_l4_len":229,"pkt":"\/\/\/\/\/\/\/\/jHNut5QdCABFAAD5AABAAEARs2DAqAVDwKj\/\/wCKAIoA5V88EQouRMCoBUMAigDPAAAgRkRFQkVPRUtFSkNORU1FSkVHRUZFQ0VQRVBFTENOQUEAIEFCQUNGUEZQRU5GREVDRkNFUEZIRkRFRkZQRlBBQ0FCAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAANQAAAAAAAAAAAAAAAAAAAAAAAAA1AFYAAwABAAEAAgBGAFxNQUlMU0xPVFxCUk9XU0UADFDgkwQAV09SS0dST1VQAAAAAAAAAAQJABAAgA8BVapTQU5KSS1MSUZFQk9PSy1MSDUzMQA="}
00468{"flow_id":9,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":396,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":887477,"pkt_caplen":98,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":98,"pkt_l4_len":44,"pkt":"MzMAAQACcD6s8PAHht1gBWEEACwRAf6AAAAAAAAABAZVqGRTJd3\/AgAAAAAAAAAAAAAAAQACAiICIwAsiDQLJ3MdAAEADgABAAEduOb7cD6s8PAHAAYABAAXABgACAACATQ="}
00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":397,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":1,"flow_first_seen":1470104379903,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"106.185.35.110","src_port":49605,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00423{"flow_id":36,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":397,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":903616,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0UgZAAIAG5uXAqHMIarkjbsHFAFDej0WbAAAAAIACIACnvwAAAgQE7AEDAwgBAQQC"}
00423{"flow_id":36,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":398,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":903698,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0UgZAAIAG5uXAqHMIarkjbsHFAFDej0WbAAAAAIACIACnvwAAAgQE7AEDAwgBAQQC"}
00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":399,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":1,"flow_first_seen":1470104379916,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"106.185.35.110","src_port":49606,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00423{"flow_id":37,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":399,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":916887,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0UgdAAIAG5uTAqHMIarkjbsHGAFDBDvagAAAAAIACIAAUOgAAAgQE7AEDAwgBAQQC"}
00423{"flow_id":37,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":400,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":916943,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0UgdAAIAG5uTAqHMIarkjbsHGAFDBDvagAAAAAIACIAAUOgAAAgQE7AEDAwgBAQQC"}
00423{"flow_id":36,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":401,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":940364,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABxCjnAxTF4M6gNlCABFAAA0AABAADYGguxquSNuwKhzCABQwcUqRAQo3o9FnIASchAmawAAAgQFtAEBBAIBAwMH"}
00408{"flow_id":36,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":402,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":940552,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUghAAIAG5u\/AqHMIarkjbsHFAFDej0WcKkQEKVAQAQTYSQAA"}
00408{"flow_id":36,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":403,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":940588,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUghAAIAG5u\/AqHMIarkjbsHFAFDej0WcKkQEKVAQAQTYSQAA"}
00858{"flow_id":36,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":404,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":941700,"pkt_caplen":390,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":390,"pkt_l4_len":356,"pkt":"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"}
00674{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":404,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":6,"flow_first_seen":1470104379903,"flow_last_seen":1470104379941,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":336,"flow_tot_l4_payload_len":336,"flow_avg_l4_payload_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"106.185.35.110","src_port":49605,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Streaming"},"http": {"hostname":"jp.kankan.1kxun.mobi","url":"jp.kankan.1kxun.mobi\/api\/videos\/10410.json","code":0,"content_type":"","user_agent":""}}
00858{"flow_id":36,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":405,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":941736,"pkt_caplen":390,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":390,"pkt_l4_len":356,"pkt":"TF4M6gNlABxCjnAxCABFAAF4UglAAIAG5Z7AqHMIarkjbsHFAFDej0WcKkQEKVAYAQTdGwAAR0VUIC9hcGkvdmlkZW9zLzEwNDEwLmpzb24gSFRUUC8xLjENCkNsaWVudC1WZXJzaW9uOiAxLjIuMS4wDQpDbGllbnQtVWlkOiBGMzU2QzI1NzVBNTgyMDdGQjg5OEY1MjU2RjM0RjFDOA0KQ2xpZW50LVNvdXJjZTogMWt4dW4NCkNsaWVudC1PczogTWljcm9zb2Z0IFdpbmRvd3MgTlQgNi4xLjc2MDEgU2VydmljZSBQYWNrIDENCkNsaWVudC1MYW5ndWFnZTogemgtVFcNCkNsaWVudC1SZXNvbHV0aW9uOiAxMTE2LDgzOA0KQ2xpZW50LUJyYW5kOiBXSU5ET1dTDQpDbGllbnQtRGV2aWNlOiBQQw0KSG9zdDoganAua2Fua2FuLjFreHVuLm1vYmkNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K"}
00424{"flow_id":37,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":406,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":954670,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABxCjnAxTF4M6gNlCABFAAA0AABAADYGguxquSNuwKhzCABQwcaIrnkOwQ72oYASchC\/lAAAAgQFtAEBBAIBAwMH"}
00407{"flow_id":37,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":407,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":954937,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUgpAAIAG5u3AqHMIarkjbsHGAFDBDvahiK55D1AQAQRxcwAA"}
00407{"flow_id":37,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":408,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":955007,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUgpAAIAG5u3AqHMIarkjbsHGAFDBDvahiK55D1AQAQRxcwAA"}
00886{"flow_id":37,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":409,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":956802,"pkt_caplen":411,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":411,"pkt_l4_len":377,"pkt":"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"}
00696{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":409,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":6,"flow_first_seen":1470104379916,"flow_last_seen":1470104379956,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":357,"flow_tot_l4_payload_len":357,"flow_avg_l4_payload_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"106.185.35.110","src_port":49606,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Streaming"},"http": {"hostname":"jp.kankan.1kxun.mobi","url":"jp.kankan.1kxun.mobi\/api\/movies\/mp4script\/10410?definition=true","code":0,"content_type":"","user_agent":""}}
00886{"flow_id":37,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":410,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":956860,"pkt_caplen":411,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":411,"pkt_l4_len":377,"pkt":"TF4M6gNlABxCjnAxCABFAAGNUgtAAIAG5YfAqHMIarkjbsHGAFDBDvahiK55D1AYAQRT7wAAR0VUIC9hcGkvbW92aWVzL21wNHNjcmlwdC8xMDQxMD9kZWZpbml0aW9uPXRydWUgSFRUUC8xLjENCkNsaWVudC1WZXJzaW9uOiAxLjIuMS4wDQpDbGllbnQtVWlkOiBGMzU2QzI1NzVBNTgyMDdGQjg5OEY1MjU2RjM0RjFDOA0KQ2xpZW50LVNvdXJjZTogMWt4dW4NCkNsaWVudC1PczogTWljcm9zb2Z0IFdpbmRvd3MgTlQgNi4xLjc2MDEgU2VydmljZSBQYWNrIDENCkNsaWVudC1MYW5ndWFnZTogemgtVFcNCkNsaWVudC1SZXNvbHV0aW9uOiAxMTE2LDgzOA0KQ2xpZW50LUJyYW5kOiBXSU5ET1dTDQpDbGllbnQtRGV2aWNlOiBQQw0KSG9zdDoganAua2Fua2FuLjFreHVuLm1vYmkNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K"}
00415{"flow_id":36,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":411,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":983915,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABxCjnAxTF4M6gNlCABFAAAoIBhAADYGYuBquSNuwKhzCABQwcUqRAQp3o9G7FAQAO3XEAAAAAAAAAAA"}
02103{"flow_id":36,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":412,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":989294,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"}
01384{"flow_id":36,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":413,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":989451,"pkt_caplen":782,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":782,"pkt_l4_len":748,"pkt":"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"}
00416{"flow_id":36,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":414,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":989529,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":25,"pkt":"ABxCjnAxTF4M6gNlCABFAAAtIBtAADYGYthquSNuwKhzCABQwcUqRAvt3o9G7FAYAO2LJQAAMA0KDQoA"}
00408{"flow_id":36,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":415,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":989674,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUgxAAIAG5uvAqHMIarkjbsHFAFDej0bsKkQL8lAQAQTPMAAA"}
00408{"flow_id":36,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":416,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":989707,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUgxAAIAG5uvAqHMIarkjbsHFAFDej0bsKkQL8lAQAQTPMAAA"}
00415{"flow_id":37,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":417,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":993622,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABxCjnAxTF4M6gNlCABFAAAoXTpAADYGJb5quSNuwKhzCABQwcaIrnkPwQ74BlAQAO1wJQAAAAAAAAAA"}
02095{"flow_id":37,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":418,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":103373,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"}
02094{"flow_id":37,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":419,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":103526,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"}
00408{"flow_id":37,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":420,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":103698,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUg1AAIAG5urAqHMIarkjbsHGAFDBDvgGiK6C51AQAQRmNgAA"}
00408{"flow_id":37,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":421,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":103743,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUg1AAIAG5urAqHMIarkjbsHGAFDBDvgGiK6C51AQAQRmNgAA"}
02094{"flow_id":37,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":422,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":103855,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"}
02095{"flow_id":37,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":423,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":103921,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"}
02095{"flow_id":37,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":424,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":104034,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"}
00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":458,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":1,"flow_first_seen":1470104380188,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"218.244.135.170","src_port":49607,"dst_port":9099,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00423{"flow_id":38,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":458,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":188079,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0UhRAAIAGEmDAqHMI2vSHqsHHI4t8ty1+AAAAAIACIAAqAAAAAgQE7AEDAwgBAQQC"}
00423{"flow_id":38,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":459,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":188122,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0UhRAAIAGEmDAqHMI2vSHqsHHI4t8ty1+AAAAAIACIAAqAAAAAgQE7AEDAwgBAQQC"}
00423{"flow_id":38,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":460,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":300643,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABxCjnAxTF4M6gNlCABFAAA0c30AAHAGQPfa9IeqwKhzCCOLwccogsRifLctf4ASQAAcSgAAAgQFtAEDAwABAQQC"}
00408{"flow_id":38,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":461,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":300823,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUhVAAIAGEmvAqHMI2vSHqsHHI4t8ty1\/KILEY1AQAQScEQAA"}
00408{"flow_id":38,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":462,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":300850,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUhVAAIAGEmvAqHMI2vSHqsHHI4t8ty1\/KILEY1AQAQScEQAA"}
00623{"flow_id":38,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":463,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":302072,"pkt_caplen":212,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":212,"pkt_l4_len":178,"pkt":"TF4M6gNlABxCjnAxCABFAADGUhZAAIAGEczAqHMI2vSHqsHHI4t8ty1\/KILEY1AYAQTPigAAR0VUIC9hcGkvcXFsaXZlX2NrZXkvZ2V0P3ZpZD15MDAxM3hhZWV5byZwbGF0Zm9ybT0xMDkwMiBIVFRQLzEuMQ0KQWNjZXB0OiAqLyoNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wDQpIb3N0OiAyMTguMjQ0LjEzNS4xNzA6OTA5OQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo="}
00795{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":463,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":6,"flow_first_seen":1470104380188,"flow_last_seen":1470104380302,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":158,"flow_tot_l4_payload_len":158,"flow_avg_l4_payload_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"218.244.135.170","src_port":49607,"dst_port":9099,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"218.244.135.170","url":"218.244.135.170:9099\/api\/qqlive_ckey\/get?vid=y0013xaeeyo&platform=10902","code":0,"content_type":"","user_agent":"Mozilla\/5.0"}}
00623{"flow_id":38,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":464,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":302108,"pkt_caplen":212,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":212,"pkt_l4_len":178,"pkt":"TF4M6gNlABxCjnAxCABFAADGUhZAAIAGEczAqHMI2vSHqsHHI4t8ty1\/KILEY1AYAQTPigAAR0VUIC9hcGkvcXFsaXZlX2NrZXkvZ2V0P3ZpZD15MDAxM3hhZWV5byZwbGF0Zm9ybT0xMDkwMiBIVFRQLzEuMQ0KQWNjZXB0OiAqLyoNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wDQpIb3N0OiAyMTguMjQ0LjEzNS4xNzA6OTA5OQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo="}
00936{"flow_id":38,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":467,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":419993,"pkt_caplen":446,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":446,"pkt_l4_len":412,"pkt":"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"}
00583{"flow_id":12,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":468,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":603356,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/6zD2CHu7jCABFAAClQLUAAAQRv8HAqAUv7\/\/\/+utrB2wAkWQETS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="}
00407{"flow_id":38,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":469,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":620879,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUhhAAIAGEmjAqHMI2vSHqsHHI4t8ty4dKILF61AQAQOZ7AAA"}
00408{"flow_id":38,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":470,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":620917,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUhhAAIAGEmjAqHMI2vSHqsHHI4t8ty4dKILF61AQAQOZ7AAA"}
00417{"flow_id":38,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":471,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":732533,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":25,"pkt":"ABxCjnAxTF4M6gNlCABFAAAtc91AAHAGAJ7a9IeqwKhzCCOLwccogsXrfLcuHVAY\/2FXZgAAMA0KDQoA"}
00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":472,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":39,"flow_packet_id":1,"flow_first_seen":1470104380737,"flow_last_seen":0,"flow_min_l4_payload_len":33,"flow_max_l4_payload_len":33,"flow_tot_l4_payload_len":33,"flow_avg_l4_payload_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"8.8.8.8","src_port":54420,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00435{"flow_id":39,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":472,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":737950,"pkt_caplen":75,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":75,"pkt_l4_len":41,"pkt":"TF4M6gNlABxCjnAxCABFAAA9UhkAAIARpNbAqHMICAgICNSUADUAKZhJpTgBAAABAAAAAAAAAnZ2BXZpZGVvAnFxA2NvbQAAAQAB"}
00634{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":472,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":39,"flow_packet_id":1,"flow_first_seen":1470104380737,"flow_last_seen":0,"flow_min_l4_payload_len":33,"flow_max_l4_payload_len":33,"flow_tot_l4_payload_len":33,"flow_avg_l4_payload_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"8.8.8.8","src_port":54420,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.QQ","breed":"Fun","category":"Chat"},"dns": {"query":"vv.video.qq.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
00435{"flow_id":39,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":473,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":737994,"pkt_caplen":75,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":75,"pkt_l4_len":41,"pkt":"TF4M6gNlABxCjnAxCABFAAA9UhkAAIARpNbAqHMICAgICNSUADUAKZhJpTgBAAABAAAAAAAAAnZ2BXZpZGVvAnFxA2NvbQAAAQAB"}
00493{"flow_id":39,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":474,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":772526,"pkt_caplen":116,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":116,"pkt_l4_len":82,"pkt":"ABxCjnAxTF4M6gNlCABFAABmlL4AAC4RtAgICAgIwKhzCAA11JQAUqbTpTiBgAABAAIAAAAAAnZ2BXZpZGVvAnFxA2NvbQAAAQABwAwABQABAAABKwANCnByb3h5LXNldDHAD8AtAAEAAQAAASsABMvNl+o="}
00663{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":474,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":39,"flow_packet_id":3,"flow_first_seen":1470104380737,"flow_last_seen":1470104380772,"flow_min_l4_payload_len":33,"flow_max_l4_payload_len":74,"flow_tot_l4_payload_len":140,"flow_avg_l4_payload_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"8.8.8.8","src_port":54420,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.QQ","breed":"Fun","category":"Chat"},"dns": {"query":"vv.video.qq.com","num_queries":1,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"203.205.151.234"}}
00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":475,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":40,"flow_packet_id":1,"flow_first_seen":1470104380773,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"203.205.151.234","src_port":49608,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00423{"flow_id":40,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":475,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":773662,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0UhtAAIAGEUDAqHMIy82X6sHIAFAfZnbXAAAAAIACIABgGQAAAgQE7AEDAwgBAQQC"}
00423{"flow_id":40,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":476,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":773739,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0UhtAAIAGEUDAqHMIy82X6sHIAFAfZnbXAAAAAIACIABgGQAAAgQE7AEDAwgBAQQC"}
00423{"flow_id":40,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":477,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":801749,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABxCjnAxTF4M6gNlCABFAAA0AABAADMGsFvLzZfqwKhzCABQwcglYwNrH2Z22IASFoBABAAAAgQFoAEBBAIBAwMK"}
00407{"flow_id":40,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":478,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":801884,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUhxAAIAGEUvAqHMIy82X6sHIAFAfZnbYJWMDbFAQAQSWQQAA"}
00407{"flow_id":40,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":479,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":801910,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUhxAAIAGEUvAqHMIy82X6sHIAFAfZnbYJWMDbFAQAQSWQQAA"}
00682{"flow_id":40,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":480,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":807804,"pkt_caplen":258,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":258,"pkt_l4_len":224,"pkt":"TF4M6gNlABxCjnAxCABFAAD0Uh1AAIAGEH7AqHMIy82X6sHIAFAfZnbYJWMDbFAYAQQt1AAAUE9TVCAvZ2V0dmluZm8gSFRUUC8xLjENCkFjY2VwdDogKi8qDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMA0KQ29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi94LXd3dy1mb3JtLXVybGVuY29kZWQNCkhvc3Q6IHZ2LnZpZGVvLnFxLmNvbQ0KQ29udGVudC1MZW5ndGg6IDQ0NQ0KRXhwZWN0OiAxMDAtY29udGludWUNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K"}
00653{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":480,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":40,"flow_packet_id":6,"flow_first_seen":1470104380773,"flow_last_seen":1470104380807,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":204,"flow_tot_l4_payload_len":204,"flow_avg_l4_payload_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"203.205.151.234","src_port":49608,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.QQ","breed":"Fun","category":"Chat"},"http": {"hostname":"vv.video.qq.com","url":"vv.video.qq.com\/getvinfo","code":0,"content_type":"","user_agent":"Mozilla\/5.0"}}
00682{"flow_id":40,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":481,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":807854,"pkt_caplen":258,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":258,"pkt_l4_len":224,"pkt":"TF4M6gNlABxCjnAxCABFAAD0Uh1AAIAGEH7AqHMIy82X6sHIAFAfZnbYJWMDbFAYAQQt1AAAUE9TVCAvZ2V0dmluZm8gSFRUUC8xLjENCkFjY2VwdDogKi8qDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMA0KQ29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi94LXd3dy1mb3JtLXVybGVuY29kZWQNCkhvc3Q6IHZ2LnZpZGVvLnFxLmNvbQ0KQ29udGVudC1MZW5ndGg6IDQ0NQ0KRXhwZWN0OiAxMDAtY29udGludWUNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K"}
00415{"flow_id":40,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":482,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":834864,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABxCjnAxTF4M6gNlCABFAAAoJKFAADMGi8bLzZfqwKhzCABQwcglYwNsH2Z3pFAQAAeWcgAAAAAAAAAA"}
00443{"flow_id":40,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":483,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":834923,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"ABxCjnAxTF4M6gNlCABFAABBJKJAADMGi6zLzZfqwKhzCABQwcglYwNsH2Z3pFAYAAdgPgAASFRUUC8xLjEgMTAwIENvbnRpbnVlDQoNCg=="}
01007{"flow_id":40,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":484,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":835517,"pkt_caplen":499,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":499,"pkt_l4_len":465,"pkt":"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"}
01007{"flow_id":40,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":485,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":835546,"pkt_caplen":499,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":499,"pkt_l4_len":465,"pkt":"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"}
00836{"flow_id":40,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":486,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":882764,"pkt_caplen":372,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":372,"pkt_l4_len":338,"pkt":"ABxCjnAxTF4M6gNlCABFAAFmJKNAADMGiobLzZfqwKhzCABQwcglYwOFH2Z5YVAYAAixSgAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54DQpEYXRlOiBUdWUsIDAyIEF1ZyAyMDE2IDAyOjE5OjQyIEdNVA0KQ29udGVudC1UeXBlOiB0ZXh0L3htbDsgY2hhcnNldD11dGYtOA0KQ29udGVudC1MZW5ndGg6IDE2Mw0KQ29ubmVjdGlvbjoga2VlcC1hbGl2ZQ0KDQo8P3htbCB2ZXJzaW9uPSIxLjAiIGVuY29kaW5nPSJ1dGYtOCIgIHN0YW5kYWxvbmU9Im5vIiA\/Pgo8cm9vdD48ZW0+ODA8L2VtPjxleGVtPjE8L2V4ZW0+PGV4aW5mbz7kuK3lm70t5Y+w5rm+55yBLS3mnKrnn6U8L2V4aW5mbz48bXNnPklQIGxpbWl0PC9tc2c+PHM+Zjwvcz48L3Jvb3Q+"}
00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":487,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":1,"flow_first_seen":1470104380890,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"42.120.51.152","src_port":49609,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00423{"flow_id":41,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":487,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":890420,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0Uh9AAIAGFuTAqHMIKngzmMHJH5CKzmkHAAAAAIACIADo5wAAAgQE7AEDAwgBAQQC"}
00423{"flow_id":41,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":488,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":890470,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0Uh9AAIAGFuTAqHMIKngzmMHJH5CKzmkHAAAAAIACIADo5wAAAgQE7AEDAwgBAQQC"}
00495{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":489,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":42,"flow_packet_id":1,"flow_first_seen":1470104380909,"flow_last_seen":0,"flow_min_l4_payload_len":317,"flow_max_l4_payload_len":317,"flow_tot_l4_payload_len":317,"flow_avg_l4_payload_len":317,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.10.110","dst_ip":"255.255.255.255","src_port":60480,"dst_port":62976,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00835{"flow_id":42,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":489,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":909602,"pkt_caplen":359,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":359,"pkt_l4_len":325,"pkt":"\/\/\/\/\/\/\/\/XNmY3fXzCABFAAFZAABAAEARbn7AqApu\/\/\/\/\/+xA9gABRTgx\/\/8AAKAAXNmY3fXzwKgKbgAAAgAnAUROUy0xMTAwLTA0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABOQVMAAAAAAAAAAAAAVVqvihgAAABVWsE9WwAAAFVasDEuMDJiMTAAEXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXNmY3fXzM0ExAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGRsaW5rLURERjVGMwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqApu\/\/8AAExBTjEAAAAAAAAAAAAAAAAAAAAAAAAAAAA="}
00408{"flow_id":38,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":490,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":928867,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUiBAAIAGEmDAqHMI2vSHqsHHI4t8ty4dKILF8FAQAQOZ5wAA"}
00408{"flow_id":38,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":491,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":928909,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUiBAAIAGEmDAqHMI2vSHqsHHI4t8ty4dKILF8FAQAQOZ5wAA"}
00419{"flow_id":41,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":492,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":966940,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ABxCjnAxTF4M6gNlCABFAAAwAABAADAGuQcqeDOYwKhzCB+QwcnDIL+ais5pCHASFtCCkgAAAgQFtAEBBAI="}
00410{"flow_id":41,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":493,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":967069,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUiFAAIAGFu7AqHMIKngzmMHJH5CKzmkIwyC\/m1AQ\/\/DGNQAA"}
00410{"flow_id":41,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":494,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":967094,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUiFAAIAGFu7AqHMIKngzmMHJH5CKzmkIwyC\/m1AQ\/\/DGNQAA"}
00749{"flow_id":41,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":495,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":968230,"pkt_caplen":306,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":306,"pkt_l4_len":272,"pkt":"TF4M6gNlABxCjnAxCABFAAEkUiJAAIAGFfHAqHMIKngzmMHJH5CKzmkIwyC\/m1AY\/\/C4+gAAUE9TVCAvYXBpL3Byb3h5P3VybD1odHRwJTNBJTJGJTJGdnYudmlkZW8ucXEuY29tJTJGZ2V0dmluZm8gSFRUUC8xLjENCkFjY2VwdDogKi8qDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMA0KQ29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi94LXd3dy1mb3JtLXVybGVuY29kZWQNCkhvc3Q6IDQyLjEyMC41MS4xNTI6ODA4MA0KQ29udGVudC1MZW5ndGg6IDQ0NQ0KRXhwZWN0OiAxMDAtY29udGludWUNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K"}
00791{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":495,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":6,"flow_first_seen":1470104380890,"flow_last_seen":1470104380968,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":252,"flow_tot_l4_payload_len":252,"flow_avg_l4_payload_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"42.120.51.152","src_port":49609,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"42.120.51.152","url":"42.120.51.152:8080\/api\/proxy?url=http%3A%2F%2Fvv.video.qq.com%2Fgetvinfo","code":0,"content_type":"","user_agent":"Mozilla\/5.0"}}
00749{"flow_id":41,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":496,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":968271,"pkt_caplen":306,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":306,"pkt_l4_len":272,"pkt":"TF4M6gNlABxCjnAxCABFAAEkUiJAAIAGFfHAqHMIKngzmMHJH5CKzmkIwyC\/m1AY\/\/C4+gAAUE9TVCAvYXBpL3Byb3h5P3VybD1odHRwJTNBJTJGJTJGdnYudmlkZW8ucXEuY29tJTJGZ2V0dmluZm8gSFRUUC8xLjENCkFjY2VwdDogKi8qDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMA0KQ29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi94LXd3dy1mb3JtLXVybGVuY29kZWQNCkhvc3Q6IDQyLjEyMC41MS4xNTI6ODA4MA0KQ29udGVudC1MZW5ndGg6IDQ0NQ0KRXhwZWN0OiAxMDAtY29udGludWUNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K"}
00414{"flow_id":41,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":497,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":29281,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABxCjnAxTF4M6gNlCABFAAAopEdAADAGFMgqeDOYwKhzCB+QwcnDIL+bis5qBFAQGSCsCgAAAAAAAAAA"}
00442{"flow_id":41,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":498,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":29366,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"ABxCjnAxTF4M6gNlCABFAABBpEhAADAGFK4qeDOYwKhzCB+QwcnDIL+bis5qBFAYGSB11gAASFRUUC8xLjEgMTAwIENvbnRpbnVlDQoNCg=="}
01009{"flow_id":41,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":499,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":30026,"pkt_caplen":499,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":499,"pkt_l4_len":465,"pkt":"TF4M6gNlABxCjnAxCABFAAHlUiNAAIAGFS\/AqHMIKngzmMHJH5CKzmoEwyC\/tFAY\/9fpYwAAZW5jcnlwdFZlcj01LjQmb3R5cGU9eG1sJmFwcHZlcj0zLjIuMTkuMzU4JnBsYXRmb3JtPTEwOTAyJm5ld3BsYXRmb3JtPTEwOTAyJnZpZD15MDAxM3hhZWV5byZ2aWRzPXkwMDEzeGFlZXlvJmRlZmF1bHRmbXQ9c2QmZGVmbj1zZCZjS2V5PUFteVJ4VVhyUFc4Wkt4TEFDSGlmNHZka3FSNkxpUmJFMjlYbnA2VzNsUVdjSXEwYmdjSWJlQWhnVDRPMlg5NG5zRkZNazdaZlBSQURZQ0k5QXZrZXB3ZFdSM0FOQ1c4SWl6d202ZDZjVGVyYW9nQkM1SWhUX1JvdGQydDNrWkNCcmk1RU9zT3IzVG13bDFvcUhkQzYtS2dqVEF6MzRrSUhVZEJDRHZMS2FvVnhpLXpUcmRGQ01HamRBZTNXWGVOclZBNFlTclJDYWwwSFR1QlZ0c1ltYVdzRC1tNEJzbHJ4Mk1lRjg1eEtPZHRsUVBBayZndWlkPUY1RUIwMUNDMDFBOEUwOENEODM2MzA4MjhERTE3QzJCMDIxNjJGRDgmbGlua3Zlcj0yJmRlZm5wYXl2ZXI9MQ=="}
01009{"flow_id":41,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":500,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":30073,"pkt_caplen":499,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":499,"pkt_l4_len":465,"pkt":"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"}
00407{"flow_id":40,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":501,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":84910,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUiRAAIAGEUPAqHMIy82X6sHIAFAfZnlhJWMEw1AQAQOSYgAA"}
00407{"flow_id":40,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":502,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":84957,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUiRAAIAGEUPAqHMIy82X6sHIAFAfZnlhJWMEw1AQAQOSYgAA"}
00836{"flow_id":40,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":503,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":108563,"pkt_caplen":372,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":372,"pkt_l4_len":338,"pkt":"ABxCjnAxTF4M6gNlCABFAAFmJKRAADMGioXLzZfqwKhzCABQwcglYwOFH2Z5YVAYAAixSgAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54DQpEYXRlOiBUdWUsIDAyIEF1ZyAyMDE2IDAyOjE5OjQyIEdNVA0KQ29udGVudC1UeXBlOiB0ZXh0L3htbDsgY2hhcnNldD11dGYtOA0KQ29udGVudC1MZW5ndGg6IDE2Mw0KQ29ubmVjdGlvbjoga2VlcC1hbGl2ZQ0KDQo8P3htbCB2ZXJzaW9uPSIxLjAiIGVuY29kaW5nPSJ1dGYtOCIgIHN0YW5kYWxvbmU9Im5vIiA\/Pgo8cm9vdD48ZW0+ODA8L2VtPjxleGVtPjE8L2V4ZW0+PGV4aW5mbz7kuK3lm70t5Y+w5rm+55yBLS3mnKrnn6U8L2V4aW5mbz48bXNnPklQIGxpbWl0PC9tc2c+PHM+Zjwvcz48L3Jvb3Q+"}
00580{"flow_id":21,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":506,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":115496,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6\/PiuMpcsCABFAAChLEIAAAER2QjAqANf7\/\/\/+uhMB2wAjbUvTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="}
00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":507,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":43,"flow_packet_id":1,"flow_first_seen":1470104381217,"flow_last_seen":0,"flow_min_l4_payload_len":26,"flow_max_l4_payload_len":26,"flow_tot_l4_payload_len":26,"flow_avg_l4_payload_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.37","dst_ip":"224.0.0.252","src_port":56366,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00429{"flow_id":43,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":507,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":217455,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":68,"pkt_l4_len":34,"pkt":"AQBeAAD8CJ4BzeuNCABFAAA2U68AAAERvz7AqAUl4AAA\/NwuFOsAIuU8ydMAAAABAAAAAAAACG5vdGVib29rAAD\/AAE="}
00517{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":507,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":43,"flow_packet_id":1,"flow_first_seen":1470104381217,"flow_last_seen":0,"flow_min_l4_payload_len":26,"flow_max_l4_payload_len":26,"flow_tot_l4_payload_len":26,"flow_avg_l4_payload_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.37","dst_ip":"224.0.0.252","src_port":56366,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}}
00492{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":508,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":1,"flow_first_seen":1470104381217,"flow_last_seen":0,"flow_min_l4_payload_len":133,"flow_max_l4_payload_len":133,"flow_tot_l4_payload_len":133,"flow_avg_l4_payload_len":133,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.37","dst_ip":"239.255.255.250","src_port":57325,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00580{"flow_id":44,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":508,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":217586,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6CJ4BzeuNCABFAAChFE8AAAER7zXAqAUl7\/\/\/+t\/tB2wAjbvITS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="}
00523{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":508,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":1,"flow_first_seen":1470104381217,"flow_last_seen":0,"flow_min_l4_payload_len":133,"flow_max_l4_payload_len":133,"flow_tot_l4_payload_len":133,"flow_avg_l4_payload_len":133,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.37","dst_ip":"239.255.255.250","src_port":57325,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}}
00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":509,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":45,"flow_packet_id":1,"flow_first_seen":1470104381237,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"192.168.115.75","src_port":53623,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00442{"flow_id":45,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":509,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":237806,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"ABAj4ACgYMVHBbyMCABFAABAk\/BAAEAGrRvAqAUQwKhzS9F3AbseAeEVAAAAALAC\/\/84nQAAAgQFtAEDAwUBAQgKGg8YWwAAAAAEAgAA"}
00423{"flow_id":45,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":510,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":238763,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABxCjnAxABAj4ACgCABFAAA0AABAAEAGQRjAqHNLwKgFEAG70XdE8SFWHgHhFoASFtAl8wAAAgQFtAEBBAIBAwMH"}
00415{"flow_id":45,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":511,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":238800,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABAj4ACgYMVHBbyMCABFAAAo9WxAAEAGS7fAqAUQwKhzS9F3AbseAeEWRPEhV1AQIABdlQAAcnZlcjBd"}
00705{"flow_id":45,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":512,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":239406,"pkt_caplen":271,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":271,"pkt_l4_len":237,"pkt":"ABAj4ACgYMVHBbyMCABFAAEB7MpAAEAGU4DAqAUQwKhzS9F3AbseAeEWRPEhV1AYIAC0MQAAFgMBANQBAADQAwNXoAM+DApFIVBtoVkm1YD4xHsvSlpaV1sKMPaqmp\/EYiBj+Q0TSc5VhLmmiAAqPOtufQBM8Qziz0QZmZNFeVk8eABKAP\/AJMAjwArACcAIwCjAJ8AUwBPAEsAmwCXABcAEwAPAKsApwA\/ADsANAGsAZwA5ADMAFgA9ADwANQAvAArAB8ARwALADAAFAAQBAAA9AAAAEwARAAAOMTkyLjE2OC4xMTUuNzUACgAIAAYAFwAYABkACwACAQAADQAMAAoFAQQBAgEEAwIDM3QAAA=="}
00757{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":512,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":45,"flow_packet_id":4,"flow_first_seen":1470104381237,"flow_last_seen":1470104381239,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":217,"flow_tot_l4_payload_len":217,"flow_avg_l4_payload_len":54,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"192.168.115.75","src_port":53623,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"192.168.115.75","ja3":"799135475da362592a4be9199d258726","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
00415{"flow_id":45,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":513,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":240437,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABxCjnAxABAj4ACgCABFAAAoVq1AAEAG6nbAqHNLwKgFEAG70XdE8SFXHgHh71AQADZ8hgAAAAAAAAAA"}
00632{"flow_id":45,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":514,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":243027,"pkt_caplen":215,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":215,"pkt_l4_len":181,"pkt":"ABxCjnAxABAj4ACgCABFAADJVq5AAEAG6dTAqHNLwKgFEAG70XdE8SFXHgHh71AYADbIkgAAFgMDAFECAABNAwPHJnh2qX3nfDBpSu7Df5fT0X\/Q3\/d8yCgGwlqQxOSx+CBj+Q0TSc5VhLmmiAAqPOtufQBM8Qziz0QZmZNFeVk8eAAvAAAF\/wEAAQAUAwMAAQEWAwMAQDki+Ej0RYqOg\/jDOhnO\/H7Bsu3crM8n3x+xrz81y3D6sPGZ2cIhuklKpkdgW0hBRebLLt2Gh0GfYMgr\/JhRkDE="}
00824{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":514,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":45,"flow_packet_id":6,"flow_first_seen":1470104381237,"flow_last_seen":1470104381243,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":217,"flow_tot_l4_payload_len":378,"flow_avg_l4_payload_len":63,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"192.168.115.75","src_port":53623,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"8":"Weak TLS cipher","15":"TLS (probably) not carrying HTTPS"},"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"192.168.115.75","ja3":"799135475da362592a4be9199d258726","ja3s":"573a9f3f80037fb40d481e2054def5bb","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA"}}
00416{"flow_id":45,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":515,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":243076,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABAj4ACgYMVHBbyMCABFAAAoK05AAEAGFdbAqAUQwKhzS9F3AbseAeHvRPEh+FAQH\/pcIQAAVFRQLzEu"}
00415{"flow_id":45,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":516,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":243257,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"ABAj4ACgYMVHBbyMCABFAAAuirpAAEAGtmPAqAUQwKhzS9F3AbseAeHvRPEh+FAYIABECQAAFAMDAAEB"}
00503{"flow_id":45,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":517,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":243372,"pkt_caplen":123,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":123,"pkt_l4_len":89,"pkt":"ABAj4ACgYMVHBbyMCABFAABtN7hAAEAGCSfAqAUQwKhzS9F3AbseAeH1RPEh+FAYIACL6AAAFgMDAEDGjk2WcpUh8OQ6FhASO1J68hFkVl7+33QoB\/0Tq9jEFedfIp4l4tEdJkeQk2fgJrOHJo\/QlfzdZ+FWP1+XBCJk"}
00416{"flow_id":45,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":518,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":245551,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABxCjnAxABAj4ACgCABFAAAoVq9AAEAG6nTAqHNLwKgFEAG70XdE8SH4HgHiOlAQADZ7mgAAAAAAAAAA"}
01784{"flow_id":45,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":519,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":288980,"pkt_caplen":1067,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1067,"pkt_l4_len":1033,"pkt":"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"}
01773{"flow_id":45,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":520,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":315313,"pkt_caplen":1055,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1055,"pkt_l4_len":1021,"pkt":"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"}
00416{"flow_id":45,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":521,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":315365,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABAj4ACgYMVHBbyMCABFAAAoIQZAAEAGIB7AqAUQwKhzS9F3AbseAeYvRPEl4VAQH+BUEgAAC2NoYXJt"}
01009{"flow_id":41,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":522,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":328932,"pkt_caplen":499,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":499,"pkt_l4_len":465,"pkt":"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"}
01009{"flow_id":41,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":523,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":329005,"pkt_caplen":499,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":499,"pkt_l4_len":465,"pkt":"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"}
00416{"flow_id":41,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":524,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":428365,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABxCjnAxTF4M6gNlCABFAAAopElAADAGFMYqeDOYwKhzCB+QwcnDIL+0is5rwVAQHVCmBAAAAAAAAAAA"}
02095{"flow_id":41,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":525,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":494832,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"}
00429{"flow_id":43,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":539,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":626995,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":68,"pkt_l4_len":34,"pkt":"AQBeAAD8CJ4BzeuNCABFAAA2U7AAAAERvz3AqAUl4AAA\/NwuFOsAIuU8ydMAAAABAAAAAAAACG5vdGVib29rAAD\/AAE="}
00810{"flow_id":4,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":547,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":831288,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/TF4M6gNlCABFAAFIAAAAABARcfzAqHcB\/\/\/\/\/wBDAEQBNAJhAgEGADFjB6UAAAAAwKgFCcCoBQnAqHcBAAAAAHDxofgq\/QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEFNgTAqHcBMwQAAAA8AQT\/\/wAAAwTAqHcBBhCoXwEBCAgICKhfwAEICAQE\/wAAAAAAAAAAAAAAAAAA"}
00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":552,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":46,"flow_packet_id":1,"flow_first_seen":1470104381895,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"183.131.48.145","src_port":49612,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00423{"flow_id":46,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":552,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":895304,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0Ui5AAIAGjNDAqHMIt4MwkcHMAFBbXvEQAAAAAIACIAAlhwAAAgQE7AEDAwgBAQQC"}
00423{"flow_id":46,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":553,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":895349,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0Ui5AAIAGjNDAqHMIt4MwkcHMAFBbXvEQAAAAAIACIAAlhwAAAgQE7AEDAwgBAQQC"}
00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":554,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":47,"flow_packet_id":1,"flow_first_seen":1470104381935,"flow_last_seen":0,"flow_min_l4_payload_len":27,"flow_max_l4_payload_len":27,"flow_tot_l4_payload_len":27,"flow_avg_l4_payload_len":27,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.101.33","dst_ip":"224.0.0.252","src_port":58456,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00429{"flow_id":47,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":554,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":935187,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"AQBeAAD8uKxvwfbSCABFAAA3J0MAAAERi63AqGUh4AAA\/ORYFOsAI152CJsAAAABAAAAAAAACUpvYW5uYS1QQwAA\/wAB"}
00519{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":554,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":47,"flow_packet_id":1,"flow_first_seen":1470104381935,"flow_last_seen":0,"flow_min_l4_payload_len":27,"flow_max_l4_payload_len":27,"flow_tot_l4_payload_len":27,"flow_avg_l4_payload_len":27,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.101.33","dst_ip":"224.0.0.252","src_port":58456,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}}
00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":555,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":48,"flow_packet_id":1,"flow_first_seen":1470104381935,"flow_last_seen":0,"flow_min_l4_payload_len":27,"flow_max_l4_payload_len":27,"flow_tot_l4_payload_len":27,"flow_avg_l4_payload_len":27,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.9","dst_ip":"224.0.0.252","src_port":58456,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00429{"flow_id":48,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":555,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":935396,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"AQBeAAD8cPGh+Cr9CABFAAA3fUIAAAERlcbAqAUJ4AAA\/ORYFOsAI76OCJsAAAABAAAAAAAACUpvYW5uYS1QQwAA\/wAB"}
00516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":555,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":48,"flow_packet_id":1,"flow_first_seen":1470104381935,"flow_last_seen":0,"flow_min_l4_payload_len":27,"flow_max_l4_payload_len":27,"flow_tot_l4_payload_len":27,"flow_avg_l4_payload_len":27,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.9","dst_ip":"224.0.0.252","src_port":58456,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}}
00583{"flow_id":6,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":556,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":935810,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/6uKxv2MGbCABFAAClQRQAAAQRv1\/AqAUy7\/\/\/+vyiB2wAkVLKTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="}
00579{"flow_id":7,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":557,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":935961,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6SNIkYwreCABFAAChfiEAAAERhV\/AqAUp7\/\/\/+tgQB2wAjcOhTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="}
00415{"flow_id":46,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":558,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":968167,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":24,"pkt":"ABxCjnAxTF4M6gNlCABFAAAsAABAADEGLge3gzCRwKhzCABQwcyPbNg5W17xEWASOQjNFQAAAgQFtAAA"}
00409{"flow_id":46,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":559,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":968358,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUi9AAIAGjNvAqHMIt4MwkcHMAFBbXvERj2zYOlAQ\/\/Ad6gAA"}
00409{"flow_id":46,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":560,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":968391,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUi9AAIAGjNvAqHMIt4MwkcHMAFBbXvERj2zYOlAQ\/\/Ad6gAA"}
00988{"flow_id":46,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":561,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":978984,"pkt_caplen":486,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":486,"pkt_l4_len":452,"pkt":"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"}
01019{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":561,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":46,"flow_packet_id":6,"flow_first_seen":1470104381895,"flow_last_seen":1470104381978,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":432,"flow_tot_l4_payload_len":432,"flow_avg_l4_payload_len":72,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"183.131.48.145","src_port":49612,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"183.131.48.145","url":"183.131.48.145\/vlive.qqvideo.tc.qq.com\/u0020mkrnds.p1203.1.mp4?vkey=7AB139BF6B32F53747E8FF192E6FE557B3A3D644C034E34BF6EAEB4E0774F2A92EF3AC5C007520BB925E5C8A18E6D302C2DAE0A295B26AA8FD1DC8069D47CE1B4A16A56870BD1ACA3E86ABE4C079659DB2182FC71217AB68CCD344CE65694457E3F53549CD617D5C9F671A26C70DC68F93F1D7BCD017762F&guid=F5EB01CC01A8E08CD83630828DE17C2B02162FD8","code":0,"content_type":"","user_agent":""}}
00988{"flow_id":46,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":562,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":979038,"pkt_caplen":486,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":486,"pkt_l4_len":452,"pkt":"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"}
00428{"flow_id":47,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":563,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104382,"pkt_ts_usec":36037,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"AQBeAAD8uKxvwfbSCABFAAA3J0UAAAERi6vAqGUh4AAA\/ORYFOsAI152CJsAAAABAAAAAAAACUpvYW5uYS1QQwAA\/wAB"}
00428{"flow_id":48,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":564,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104382,"pkt_ts_usec":38651,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"AQBeAAD8cPGh+Cr9CABFAAA3fUUAAAERlcPAqAUJ4AAA\/ORYFOsAI76OCJsAAAABAAAAAAAACUpvYW5uYS1QQwAA\/wAB"}
00415{"flow_id":46,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":565,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104382,"pkt_ts_usec":51854,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABxCjnAxTF4M6gNlCABFAAAo2exAADEGVB63gzCRwKhzCABQwcyPbNg6W17ywVAQK\/jwMgAAAAAAAAAA"}
01255{"flow_id":46,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":566,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104382,"pkt_ts_usec":51994,"pkt_caplen":687,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":687,"pkt_l4_len":653,"pkt":"ABxCjnAxTF4M6gNlCABFAAKh2e1AADEGUaS3gzCRwKhzCABQwcyPbNg6W17ywVAYK\/hyfgAASFRUUC8xLjEgMzAyIE1vdmVkIFRlbXBvcmFyaWx5DQpTZXJ2ZXI6IGh0dHBzZXJ2ZXINCkxvY2F0aW9uOiBodHRwOi8vMTgzLjEzMS40OC4xNDQvdmxpdmUucXF2aWRlby50Yy5xcS5jb20vdTAwMjBta3JuZHMucDEyMDMuMS5tcDQ\/dmtleT03QUIxMzlCRjZCMzJGNTM3NDdFOEZGMTkyRTZGRTU1N0IzQTNENjQ0QzAzNEUzNEJGNkVBRUI0RTA3NzRGMkE5MkVGM0FDNUMwMDc1MjBCQjkyNUU1QzhBMThFNkQzMDJDMkRBRTBBMjk1QjI2QUE4RkQxREM4MDY5RDQ3Q0UxQjRBMTZBNTY4NzBCRDFBQ0EzRTg2QUJFNEMwNzk2NTlEQjIxODJGQzcxMjE3QUI2OENDRDM0NENFNjU2OTQ0NTdFM0Y1MzU0OUNENjE3RDVDOUY2NzFBMjZDNzBEQzY4RjkzRjFEN0JDRDAxNzc2MkYmZ3VpZD1GNUVCMDFDQzAxQThFMDhDRDgzNjMwODI4REUxN0MyQjAyMTYyRkQ4JmxvY2lkPWEwNmY5OGZkLWZhMjYtNDRlNS1hY2M1LTBkODNmOWRmMDNhZiZzaXplPTk0MTg2NTUmb2NpZD0yNTM1NjQzMzINCkNhY2hlLUNvbnRyb2w6IG1heC1hZ2U9NzIwMA0KQ29ubmVjdGlvbjogY2xvc2UNCkNvbnRlbnQtTGVuZ3RoOiAwDQpYLVNlcnZlcklwOiAxODMuMTMxLjQ4LjE0NQ0KWC1SZXNwVGltZTogMDIvQXVnLzIwMTY6MTA6MTk6NDQgKzA4MDANCg0K"}
00408{"flow_id":46,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":567,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104382,"pkt_ts_usec":53359,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUjFAAIAGjNnAqHMIt4MwkcHMAFBbXvLBj2zas1AR\/XccOQAA"}
00408{"flow_id":46,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":568,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104382,"pkt_ts_usec":53397,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUjFAAIAGjNnAqHMIt4MwkcHMAFBbXvLBj2zas1AR\/XccOQAA"}
00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":569,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":49,"flow_packet_id":1,"flow_first_seen":1470104382053,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"183.131.48.144","src_port":49613,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00422{"flow_id":49,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":569,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104382,"pkt_ts_usec":53678,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0UjJAAIAGjM3AqHMIt4MwkMHNAFBSJ8A7AAAAAIACIABfkwAAAgQE7AEDAwgBAQQC"}
00422{"flow_id":49,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":570,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104382,"pkt_ts_usec":53709,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0UjJAAIAGjM3AqHMIt4MwkMHNAFBSJ8A7AAAAAIACIABfkwAAAgQE7AEDAwgBAQQC"}
00415{"flow_id":49,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":573,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104382,"pkt_ts_usec":122949,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":24,"pkt":"ABxCjnAxTF4M6gNlCABFAAAsAABAADEGLgi3gzCQwKhzCABQwc0rYeLSUifAPGASOQhglAAAAgQFtAAA"}
00409{"flow_id":49,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":574,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104382,"pkt_ts_usec":123077,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUjRAAIAGjNfAqHMIt4MwkMHNAFBSJ8A8K2Hi01AQ\/\/CxaAAA"}
00409{"flow_id":49,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":575,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104382,"pkt_ts_usec":123103,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUjRAAIAGjNfAqHMIt4MwkMHNAFBSJ8A8K2Hi01AQ\/\/CxaAAA"}
00417{"flow_id":46,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":576,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104382,"pkt_ts_usec":124370,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABxCjnAxTF4M6gNlCABFAAAo2e5AADEGVBy3gzCRwKhzCABQwcyPbNqzW17ywlARK\/jttwAAAAAAAAAA"}
01085{"flow_id":49,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":577,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104382,"pkt_ts_usec":125031,"pkt_caplen":557,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":557,"pkt_l4_len":523,"pkt":"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"}
01090{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":577,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":49,"flow_packet_id":6,"flow_first_seen":1470104382053,"flow_last_seen":1470104382125,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":503,"flow_tot_l4_payload_len":503,"flow_avg_l4_payload_len":83,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"183.131.48.144","src_port":49613,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"183.131.48.144","url":"183.131.48.144\/vlive.qqvideo.tc.qq.com\/u0020mkrnds.p1203.1.mp4?vkey=7AB139BF6B32F53747E8FF192E6FE557B3A3D644C034E34BF6EAEB4E0774F2A92EF3AC5C007520BB925E5C8A18E6D302C2DAE0A295B26AA8FD1DC8069D47CE1B4A16A56870BD1ACA3E86ABE4C079659DB2182FC71217AB68CCD344CE65694457E3F53549CD617D5C9F671A26C70DC68F93F1D7BCD017762F&guid=F5EB01CC01A8E08CD83630828DE17C2B02162FD8&locid=a06f98fd-fa26-44e5-acc5-0d83f9df03af&size=9418655&ocid=253564332","code":0,"content_type":"","user_agent":""}}
01085{"flow_id":49,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":578,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104382,"pkt_ts_usec":125065,"pkt_caplen":557,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":557,"pkt_l4_len":523,"pkt":"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"}
00409{"flow_id":46,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":579,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104382,"pkt_ts_usec":125348,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUjZAAIAGjNTAqHMIt4MwkcHMAFBbXvLCj2zatFAQ\/XccOAAA"}
00409{"flow_id":46,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":580,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104382,"pkt_ts_usec":125381,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUjZAAIAGjNTAqHMIt4MwkcHMAFBbXvLCj2zatFAQ\/XccOAAA"}
00416{"flow_id":49,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":581,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104382,"pkt_ts_usec":190889,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABxCjnAxTF4M6gNlCABFAAAostlAADEGezK3gzCQwKhzCABQwc0rYeLTUifCM1AQK\/iDagAAAAAAAAAA"}
00787{"flow_id":49,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":582,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104382,"pkt_ts_usec":192288,"pkt_caplen":335,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":335,"pkt_l4_len":301,"pkt":"ABxCjnAxTF4M6gNlCABFAAFBstpAADEGehi3gzCQwKhzCABQwc0rYeLTUifCM1AYK\/jSYgAASFRUUC8xLjEgMjA2IFBhcnRpYWwgQ29udGVudA0KQ29udGVudC1SYW5nZTogYnl0ZXMgMC05NDE4NjU0Lzk0MTg2NTUNCkFjY2Vzcy1Db250cm9sLUFsbG93LU9yaWdpbjogKg0KQ29udGVudC1MZW5ndGg6IDk0MTg2NTUNCkFjY2VwdC1SYW5nZXM6IGJ5dGVzDQpEYXRlOiBUdWUsIDAyIEF1ZyAyMDE2IDAyOjE5OjQ1IEdNVA0KQ29udGVudC1UeXBlOiB2aWRlby9tcDQNClgtU2VydmVySXA6IDE4My4xMzEuNDguMTQ0DQpYLVJlc3BUaW1lOiAwMi9BdWcvMjAxNjoxMDoxOTo0NSArMDgwMA0KDQo="}
01114{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":582,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":49,"flow_packet_id":9,"flow_first_seen":1470104382053,"flow_last_seen":1470104382192,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":503,"flow_tot_l4_payload_len":1287,"flow_avg_l4_payload_len":143,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"183.131.48.144","src_port":49613,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Media"},"http": {"hostname":"183.131.48.144","url":"183.131.48.144\/vlive.qqvideo.tc.qq.com\/u0020mkrnds.p1203.1.mp4?vkey=7AB139BF6B32F53747E8FF192E6FE557B3A3D644C034E34BF6EAEB4E0774F2A92EF3AC5C007520BB925E5C8A18E6D302C2DAE0A295B26AA8FD1DC8069D47CE1B4A16A56870BD1ACA3E86ABE4C079659DB2182FC71217AB68CCD344CE65694457E3F53549CD617D5C9F671A26C70DC68F93F1D7BCD017762F&guid=F5EB01CC01A8E08CD83630828DE17C2B02162FD8&locid=a06f98fd-fa26-44e5-acc5-0d83f9df03af&size=9418655&ocid=253564332","code":206,"content_type":"video\/mp4","user_agent":""}}
01792{"flow_id":49,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":583,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104382,"pkt_ts_usec":198371,"pkt_caplen":1078,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1078,"pkt_l4_len":1044,"pkt":"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"}
01783{"flow_id":49,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":584,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104382,"pkt_ts_usec":198662,"pkt_caplen":1078,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1078,"pkt_l4_len":1044,"pkt":"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"}
00410{"flow_id":49,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":585,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104382,"pkt_ts_usec":199024,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUjdAAIAGjNTAqHMIt4MwkMHNAFBSJ8IzK2Hr7FAQ\/\/CmWAAA"}
00410{"flow_id":49,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":586,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104382,"pkt_ts_usec":199061,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUjdAAIAGjNTAqHMIt4MwkMHNAFBSJ8IzK2Hr7FAQ\/\/CmWAAA"}
00494{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":587,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":50,"flow_packet_id":1,"flow_first_seen":1470104382241,"flow_last_seen":0,"flow_min_l4_payload_len":133,"flow_max_l4_payload_len":133,"flow_tot_l4_payload_len":133,"flow_avg_l4_payload_len":133,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.101.33","dst_ip":"239.255.255.250","src_port":55485,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00579{"flow_id":50,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":587,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104382,"pkt_ts_usec":241911,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6uKxvwfbSCABFAAChJ0YAAAERfELAqGUh7\/\/\/+ti9B2wAjWL8TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="}
00525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":587,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":50,"flow_packet_id":1,"flow_first_seen":1470104382241,"flow_last_seen":0,"flow_min_l4_payload_len":133,"flow_max_l4_payload_len":133,"flow_tot_l4_payload_len":133,"flow_avg_l4_payload_len":133,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.101.33","dst_ip":"239.255.255.250","src_port":55485,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}}
00491{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":588,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":51,"flow_packet_id":1,"flow_first_seen":1470104382242,"flow_last_seen":0,"flow_min_l4_payload_len":133,"flow_max_l4_payload_len":133,"flow_tot_l4_payload_len":133,"flow_avg_l4_payload_len":133,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.9","dst_ip":"239.255.255.250","src_port":55484,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00579{"flow_id":51,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":588,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104382,"pkt_ts_usec":242882,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6cPGh+Cr9CABFAAChfYYAAAERhhrAqAUJ7\/\/\/+ti8B2wAjcMVTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="}
00522{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":588,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":51,"flow_packet_id":1,"flow_first_seen":1470104382242,"flow_last_seen":0,"flow_min_l4_payload_len":133,"flow_max_l4_payload_len":133,"flow_tot_l4_payload_len":133,"flow_avg_l4_payload_len":133,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.9","dst_ip":"239.255.255.250","src_port":55484,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}}
00579{"flow_id":2,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":589,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104382,"pkt_ts_usec":243140,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6GF4PUugBCABFAAChMNEAAAER0p\/AqAU57\/\/\/+toBB2wAjcGgTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="}
00810{"flow_id":4,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":590,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104382,"pkt_ts_usec":243529,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/TF4M6gNlCABFAAFIAAAAABARcfzAqHcB\/\/\/\/\/wBDAEQBNN4pAgEGAP54u0wAAAAAwKgFMcCoBTHAqHcBAAAAAOix\/Kv7sgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEFNgTAqHcBMwQAAAA8AQT\/\/wAAAwTAqHcBBhCoXwEBCAgICKhfwAEICAQE\/wAAAAAAAAAAAAAAAAAA"}
00578{"flow_id":3,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":591,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104382,"pkt_ts_usec":345385,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6SNIkYzEACABFAAChOq0AAAERyNDAqAUs7\/\/\/+si9B2wAjdLxTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="}
00494{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":592,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":52,"flow_packet_id":1,"flow_first_seen":1470104382448,"flow_last_seen":0,"flow_min_l4_payload_len":33,"flow_max_l4_payload_len":33,"flow_tot_l4_payload_len":33,"flow_avg_l4_payload_len":33,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::9bd:81dd:2fdc:5750","dst_ip":"ff02::1:3","src_port":61548,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00469{"flow_id":52,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":592,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104382,"pkt_ts_usec":448550,"pkt_caplen":95,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":95,"pkt_l4_len":41,"pkt":"MzMAAQAD6LH8q\/uyht1gAAAAACkRAf6AAAAAAAAACb2B3S\/cV1D\/AgAAAAAAAAAAAAAAAQAD8GwU6wApG1\/NkQAAAAEAAAAAAAAPY2Flc2FyLXRoaW5rcGFkAAD\/AAE="}
00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":592,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":52,"flow_packet_id":1,"flow_first_seen":1470104382448,"flow_last_seen":0,"flow_min_l4_payload_len":33,"flow_max_l4_payload_len":33,"flow_tot_l4_payload_len":33,"flow_avg_l4_payload_len":33,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::9bd:81dd:2fdc:5750","dst_ip":"ff02::1:3","src_port":61548,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}}
00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":593,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":53,"flow_packet_id":1,"flow_first_seen":1470104382448,"flow_last_seen":0,"flow_min_l4_payload_len":33,"flow_max_l4_payload_len":33,"flow_tot_l4_payload_len":33,"flow_avg_l4_payload_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.49","dst_ip":"224.0.0.252","src_port":61548,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00438{"flow_id":53,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":593,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104382,"pkt_ts_usec":448739,"pkt_caplen":75,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":75,"pkt_l4_len":41,"pkt":"AQBeAAD86LH8q\/uyCABFAAA9ed0AAAERmP3AqAUx4AAA\/PBsFOsAKYTXzZEAAAABAAAAAAAAD2NhZXNhci10aGlua3BhZAAA\/wAB"}
00517{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":593,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":53,"flow_packet_id":1,"flow_first_seen":1470104382448,"flow_last_seen":0,"flow_min_l4_payload_len":33,"flow_max_l4_payload_len":33,"flow_tot_l4_payload_len":33,"flow_avg_l4_payload_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.49","dst_ip":"224.0.0.252","src_port":61548,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}}
00492{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":594,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":54,"flow_packet_id":1,"flow_first_seen":1470104382448,"flow_last_seen":0,"flow_min_l4_payload_len":137,"flow_max_l4_payload_len":137,"flow_tot_l4_payload_len":137,"flow_avg_l4_payload_len":137,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.49","dst_ip":"239.255.255.250","src_port":51704,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00584{"flow_id":54,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":594,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104382,"pkt_ts_usec":448863,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/66LH8q\/uyCABFAAClCesAAAQR9onAqAUx7\/\/\/+sn4B2wAkYV1TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="}
00523{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":594,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":54,"flow_packet_id":1,"flow_first_seen":1470104382448,"flow_last_seen":0,"flow_min_l4_payload_len":137,"flow_max_l4_payload_len":137,"flow_tot_l4_payload_len":137,"flow_avg_l4_payload_len":137,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.49","dst_ip":"239.255.255.250","src_port":51704,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}}
00469{"flow_id":52,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":595,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104382,"pkt_ts_usec":857884,"pkt_caplen":95,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":95,"pkt_l4_len":41,"pkt":"MzMAAQAD6LH8q\/uyht1gAAAAACkRAf6AAAAAAAAACb2B3S\/cV1D\/AgAAAAAAAAAAAAAAAQAD8GwU6wApG1\/NkQAAAAEAAAAAAAAPY2Flc2FyLXRoaW5rcGFkAAD\/AAE="}
00438{"flow_id":53,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":596,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104382,"pkt_ts_usec":858294,"pkt_caplen":75,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":75,"pkt_l4_len":41,"pkt":"AQBeAAD86LH8q\/uyCABFAAA9ed8AAAERmPvAqAUx4AAA\/PBsFOsAKYTXzZEAAAABAAAAAAAAD2NhZXNhci10aGlua3BhZAAA\/wAB"}
01783{"flow_id":49,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":597,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104382,"pkt_ts_usec":864520,"pkt_caplen":1078,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1078,"pkt_l4_len":1044,"pkt":"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"}
00493{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":598,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":1,"flow_first_seen":1470104381217,"flow_last_seen":0,"flow_min_l4_payload_len":133,"flow_max_l4_payload_len":133,"flow_tot_l4_payload_len":133,"flow_avg_l4_payload_len":133,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.37","dst_ip":"239.255.255.250","src_port":57325,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00482{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":598,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1470104376301,"flow_last_seen":0,"flow_min_l4_payload_len":300,"flow_max_l4_payload_len":300,"flow_tot_l4_payload_len":300,"flow_avg_l4_payload_len":300,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00492{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":598,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":51,"flow_packet_id":1,"flow_first_seen":1470104382242,"flow_last_seen":0,"flow_min_l4_payload_len":133,"flow_max_l4_payload_len":133,"flow_tot_l4_payload_len":133,"flow_avg_l4_payload_len":133,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.9","dst_ip":"239.255.255.250","src_port":55484,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00495{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":598,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":50,"flow_packet_id":1,"flow_first_seen":1470104382241,"flow_last_seen":0,"flow_min_l4_payload_len":133,"flow_max_l4_payload_len":133,"flow_tot_l4_payload_len":133,"flow_avg_l4_payload_len":133,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.101.33","dst_ip":"239.255.255.250","src_port":55485,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00525{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":598,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_first_seen":1470104378657,"flow_last_seen":0,"flow_min_l4_payload_len":329,"flow_max_l4_payload_len":329,"flow_tot_l4_payload_len":329,"flow_avg_l4_payload_len":329,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b030:214:100:c2a0:bbff:fe73:eb47","dst_ip":"ff02::1","src_port":62976,"dst_port":62976,"l4_proto":"udp","ndpi": {"proto":"Unknown","breed":"Unrated"}}
00511{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":598,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_first_seen":1470104378657,"flow_last_seen":0,"flow_min_l4_payload_len":329,"flow_max_l4_payload_len":329,"flow_tot_l4_payload_len":329,"flow_avg_l4_payload_len":329,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b030:214:100:c2a0:bbff:fe73:eb47","dst_ip":"ff02::1","src_port":62976,"dst_port":62976,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00493{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":598,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":54,"flow_packet_id":1,"flow_first_seen":1470104382448,"flow_last_seen":0,"flow_min_l4_payload_len":137,"flow_max_l4_payload_len":137,"flow_tot_l4_payload_len":137,"flow_avg_l4_payload_len":137,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.49","dst_ip":"239.255.255.250","src_port":51704,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00510{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":598,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":42,"flow_packet_id":1,"flow_first_seen":1470104380909,"flow_last_seen":0,"flow_min_l4_payload_len":317,"flow_max_l4_payload_len":317,"flow_tot_l4_payload_len":317,"flow_avg_l4_payload_len":317,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.10.110","dst_ip":"255.255.255.255","src_port":60480,"dst_port":62976,"l4_proto":"udp","ndpi": {"proto":"Unknown","breed":"Unrated"}}
00496{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":598,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":42,"flow_packet_id":1,"flow_first_seen":1470104380909,"flow_last_seen":0,"flow_min_l4_payload_len":317,"flow_max_l4_payload_len":317,"flow_tot_l4_payload_len":317,"flow_avg_l4_payload_len":317,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.10.110","dst_ip":"255.255.255.255","src_port":60480,"dst_port":62976,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00518{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":598,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1470104375419,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"68.233.253.133","src_port":53605,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}}
00480{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":598,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1470104375419,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"68.233.253.133","src_port":53605,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00510{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":598,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":1,"flow_first_seen":1470104378557,"flow_last_seen":0,"flow_min_l4_payload_len":317,"flow_max_l4_payload_len":317,"flow_tot_l4_payload_len":317,"flow_avg_l4_payload_len":317,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.125.30","dst_ip":"255.255.255.255","src_port":62976,"dst_port":62976,"l4_proto":"udp","ndpi": {"proto":"Unknown","breed":"Unrated"}}
00496{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":598,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":1,"flow_first_seen":1470104378557,"flow_last_seen":0,"flow_min_l4_payload_len":317,"flow_max_l4_payload_len":317,"flow_tot_l4_payload_len":317,"flow_avg_l4_payload_len":317,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.125.30","dst_ip":"255.255.255.255","src_port":62976,"dst_port":62976,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00408{"flow_id":49,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":598,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104383,"pkt_ts_usec":61826,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUjhAAIAGjNPAqHMIt4MwkMHNAFBSJ8IzK2Hv7FAQ+\/CmWAAA"}
00583{"flow_id":12,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":604,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104383,"pkt_ts_usec":675559,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/6zD2CHu7jCABFAAClQLYAAAQRv8DAqAUv7\/\/\/+utrB2wAkWQETS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="}
00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":607,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":55,"flow_packet_id":1,"flow_first_seen":1470104383810,"flow_last_seen":0,"flow_min_l4_payload_len":300,"flow_max_l4_payload_len":300,"flow_tot_l4_payload_len":300,"flow_avg_l4_payload_len":300,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"192.168.119.1","src_port":68,"dst_port":67,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00796{"flow_id":55,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":607,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104383,"pkt_ts_usec":810371,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"TF4M6gNlYMVHBbyMCABFAAFI+0MAAEARgP\/AqAUQwKh3AQBEAEMBNFvxAQEGABeXwMwAAAAAwKgFEAAAAAAAAAAAAAAAAGDFRwW8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEDNwkBAwYPd1\/8LC45AgXcPQcBYMVHBbyMMwQAdqcADAtNYWNCb29rLUFpcv8AAAAAAAAAAAAAAAAA"}
00569{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":607,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":55,"flow_packet_id":1,"flow_first_seen":1470104383810,"flow_last_seen":0,"flow_min_l4_payload_len":300,"flow_max_l4_payload_len":300,"flow_tot_l4_payload_len":300,"flow_avg_l4_payload_len":300,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"192.168.119.1","src_port":68,"dst_port":67,"l4_proto":"udp","ndpi": {"proto":"DHCP","breed":"Acceptable","category":"Network"},"dhcp": {"fingerprint":"1,3,6,15,119,95,252,44,46"}}
00797{"flow_id":55,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":608,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104383,"pkt_ts_usec":815221,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"ABxCjnAxTF4M6gNlCABFAAFIAAAAABARrEPAqHcBwKgFEABDAEQBNHbOAgEGABeXwMwAAAAAwKgFEMCoBRDAqHcBAAAAAGDFRwW8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEFNgTAqHcBMwQAAAA8AQT\/\/wAAAwTAqHcBBhCoXwEBCAgICKhfwAEICAQE\/wAAAAAAAAAAAAAAAAAA"}
00579{"flow_id":21,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":612,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104384,"pkt_ts_usec":85549,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6\/PiuMpcsCABFAAChLEMAAAER2QfAqANf7\/\/\/+uhMB2wAjbUvTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="}
00467{"flow_id":9,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":613,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104384,"pkt_ts_usec":85672,"pkt_caplen":98,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":98,"pkt_l4_len":44,"pkt":"MzMAAQACcD6s8PAHht1gBWEEACwRAf6AAAAAAAAABAZVqGRTJd3\/AgAAAAAAAAAAAAAAAQACAiICIwAshosLJ3MdAAEADgABAAEduOb7cD6s8PAHAAYABAAXABgACAACAt0="}
00492{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":618,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":56,"flow_packet_id":1,"flow_first_seen":1470104384289,"flow_last_seen":0,"flow_min_l4_payload_len":133,"flow_max_l4_payload_len":133,"flow_tot_l4_payload_len":133,"flow_avg_l4_payload_len":133,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.37","dst_ip":"239.255.255.250","src_port":57325,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00580{"flow_id":56,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":618,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104384,"pkt_ts_usec":289461,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6CJ4BzeuNCABFAAChFFAAAAER7zTAqAUl7\/\/\/+t\/tB2wAjbvITS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="}
00523{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":618,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":56,"flow_packet_id":1,"flow_first_seen":1470104384289,"flow_last_seen":0,"flow_min_l4_payload_len":133,"flow_max_l4_payload_len":133,"flow_tot_l4_payload_len":133,"flow_avg_l4_payload_len":133,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.37","dst_ip":"239.255.255.250","src_port":57325,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}}
00809{"flow_id":4,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":620,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104384,"pkt_ts_usec":802618,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/TF4M6gNlCABFAAFIAAAAABARcfzAqHcB\/\/\/\/\/wBDAEQBNEsMAgEGAENEXMgAAAAAwKgFLcCoBS3AqHcBAAAAAOCsy3Hh0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEFNgTAqHcBMwQAAAA8AQT\/\/wAAAwTAqHcBBhCoXwEBCAgICKhfwAEICAQE\/wAAAAAAAAAAAAAAAAAA"}
00580{"flow_id":6,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":623,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104385,"pkt_ts_usec":5874,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/6uKxv2MGbCABFAAClQRUAAAQRv17AqAUy7\/\/\/+vyiB2wAkVLKTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="}
00494{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":625,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":57,"flow_packet_id":1,"flow_first_seen":1470104385211,"flow_last_seen":0,"flow_min_l4_payload_len":133,"flow_max_l4_payload_len":133,"flow_tot_l4_payload_len":133,"flow_avg_l4_payload_len":133,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.101.33","dst_ip":"239.255.255.250","src_port":55485,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00579{"flow_id":57,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":625,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104385,"pkt_ts_usec":211573,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6uKxvwfbSCABFAAChJ0oAAAERfD7AqGUh7\/\/\/+ti9B2wAjWL8TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="}
00525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":625,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":57,"flow_packet_id":1,"flow_first_seen":1470104385211,"flow_last_seen":0,"flow_min_l4_payload_len":133,"flow_max_l4_payload_len":133,"flow_tot_l4_payload_len":133,"flow_avg_l4_payload_len":133,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.101.33","dst_ip":"239.255.255.250","src_port":55485,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}}
00491{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":626,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":58,"flow_packet_id":1,"flow_first_seen":1470104385211,"flow_last_seen":0,"flow_min_l4_payload_len":133,"flow_max_l4_payload_len":133,"flow_tot_l4_payload_len":133,"flow_avg_l4_payload_len":133,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.9","dst_ip":"239.255.255.250","src_port":55484,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00579{"flow_id":58,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":626,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104385,"pkt_ts_usec":211727,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6cPGh+Cr9CABFAAChfwAAAAERhKDAqAUJ7\/\/\/+ti8B2wAjcMVTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="}
00522{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":626,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":58,"flow_packet_id":1,"flow_first_seen":1470104385211,"flow_last_seen":0,"flow_min_l4_payload_len":133,"flow_max_l4_payload_len":133,"flow_tot_l4_payload_len":133,"flow_avg_l4_payload_len":133,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.9","dst_ip":"239.255.255.250","src_port":55484,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}}
00578{"flow_id":2,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":627,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104385,"pkt_ts_usec":212104,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6GF4PUugBCABFAAChMOQAAAER0ozAqAU57\/\/\/+toBB2wAjcGgTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="}
00578{"flow_id":3,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":628,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104385,"pkt_ts_usec":313558,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6SNIkYzEACABFAAChOr0AAAERyMDAqAUs7\/\/\/+si9B2wAjdLxTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="}
00492{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":631,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":59,"flow_packet_id":1,"flow_first_seen":1470104385418,"flow_last_seen":0,"flow_min_l4_payload_len":137,"flow_max_l4_payload_len":137,"flow_tot_l4_payload_len":137,"flow_avg_l4_payload_len":137,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.49","dst_ip":"239.255.255.250","src_port":51704,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00584{"flow_id":59,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":631,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104385,"pkt_ts_usec":418800,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/66LH8q\/uyCABFAAClCewAAAQR9ojAqAUx7\/\/\/+sn4B2wAkYV1TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="}
00523{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":631,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":59,"flow_packet_id":1,"flow_first_seen":1470104385418,"flow_last_seen":0,"flow_min_l4_payload_len":137,"flow_max_l4_payload_len":137,"flow_tot_l4_payload_len":137,"flow_avg_l4_payload_len":137,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.49","dst_ip":"239.255.255.250","src_port":51704,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}}
00490{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":636,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":60,"flow_packet_id":1,"flow_first_seen":1470104385827,"flow_last_seen":0,"flow_min_l4_payload_len":40,"flow_max_l4_payload_len":40,"flow_tot_l4_payload_len":40,"flow_avg_l4_payload_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"59.120.208.218","dst_ip":"255.255.255.255","src_port":50151,"dst_port":1947,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00460{"flow_id":60,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":636,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104385,"pkt_ts_usec":827777,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"\/\/\/\/\/\/\/\/rCILUFkxCABFAABEAABAAEARLlc7eNDa\/\/\/\/\/8PnB5sAMKByU3Uyb1ZTdDRBQUJIWlc1MGNtbGpaVjlCVUVOZlozVmxjM1FBYldVQQ=="}
00584{"flow_id":12,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":643,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104386,"pkt_ts_usec":645103,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/6zD2CHu7jCABFAAClQLcAAAQRv7\/AqAUv7\/\/\/+utrB2wAkWQETS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="}
00483{"flow_id":45,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":645,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104386,"pkt_ts_usec":937728,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"ABxCjnAxABAj4ACgCABFAABdVrFAAEAG6j3AqHNLwKgFEAG70XdE8SXhHgHmL1AYAEa9yAAAFQMDADAL2rIa718l782i9dkDIcqQtKzDEyHxDKXTvidj58VEqE5kb1BH\/HnLnTzyrYBe4U4="}
00417{"flow_id":45,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":646,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104386,"pkt_ts_usec":937789,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABAj4ACgYMVHBbyMCABFAAAor95AAEAGkUXAqAUQwKhzS9F3AbseAeYvRPEmFlAQH\/5TvwAAC1ZFUzE2"}
00579{"flow_id":21,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":651,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104387,"pkt_ts_usec":54000,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6\/PiuMpcsCABFAAChLEQAAAER2QbAqANf7\/\/\/+uhMB2wAjbUvTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="}
00580{"flow_id":56,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":653,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104387,"pkt_ts_usec":260032,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6CJ4BzeuNCABFAAChFFEAAAER7zPAqAUl7\/\/\/+t\/tB2wAjbvITS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="}
00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":662,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":61,"flow_packet_id":1,"flow_first_seen":1470104388033,"flow_last_seen":0,"flow_min_l4_payload_len":1,"flow_max_l4_payload_len":1,"flow_tot_l4_payload_len":1,"flow_avg_l4_payload_len":1,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"203.66.182.87","src_port":49596,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00410{"flow_id":61,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":662,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104388,"pkt_ts_usec":33892,"pkt_caplen":55,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":55,"pkt_l4_len":21,"pkt":"TF4M6gNlABxCjnAxCABFAAApUkZAAIAG8z3AqHMIy0K2V8G8AbsrwEGmNGHnvFAQAQOsiQAAAA=="}
00410{"flow_id":61,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":663,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104388,"pkt_ts_usec":33946,"pkt_caplen":55,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":55,"pkt_l4_len":21,"pkt":"TF4M6gNlABxCjnAxCABFAAApUkZAAIAG8z3AqHMIy0K2V8G8AbsrwEGmNGHnvFAQAQOsiQAAAA=="}
00422{"flow_id":61,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":664,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104388,"pkt_ts_usec":37933,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABxCjnAxTF4M6gNlCABFAAA0ZvMAAD0GYYbLQrZXwKhzCAG7wbw0Yee8K8BBp4AQAO2bugAAAQEFCivAQaYrwEGn"}
00579{"flow_id":57,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":665,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104388,"pkt_ts_usec":182619,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6uKxvwfbSCABFAAChJ0wAAAERfDzAqGUh7\/\/\/+ti9B2wAjWL8TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="}
00579{"flow_id":58,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":666,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104388,"pkt_ts_usec":182845,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6cPGh+Cr9CABFAAChfzUAAAERhGvAqAUJ7\/\/\/+ti8B2wAjcMVTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="}
00578{"flow_id":2,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":669,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104388,"pkt_ts_usec":284599,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6GF4PUugBCABFAAChMOoAAAER0obAqAU57\/\/\/+toBB2wAjcGgTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="}
00578{"flow_id":3,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":670,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104388,"pkt_ts_usec":284786,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6SNIkYzEACABFAAChOtwAAAERyKHAqAUs7\/\/\/+si9B2wAjdLxTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="}
00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":680,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":62,"flow_packet_id":1,"flow_first_seen":1470104389597,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"68.233.253.133","src_port":53613,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00423{"flow_id":62,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":680,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104389,"pkt_ts_usec":597943,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlYMVHBbyMCABFAAA0ErtAAEAGH+LAqAUQROn9hdFtAFBAFGHVDj7nf4AREAH2GQAAAQEIChoPOPTPHNz0"}
00583{"flow_id":12,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":681,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104389,"pkt_ts_usec":616162,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/6zD2CHu7jCABFAAClQLgAAAQRv77AqAUv7\/\/\/+utrB2wAkWQETS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="}
00579{"flow_id":21,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":687,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104390,"pkt_ts_usec":23643,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6\/PiuMpcsCABFAAChLEUAAAER2QXAqANf7\/\/\/+uhMB2wAjbUvTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="}
00580{"flow_id":56,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":692,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104390,"pkt_ts_usec":229888,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6CJ4BzeuNCABFAAChFFIAAAER7zLAqAUl7\/\/\/+t\/tB2wAjbvITS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="}
00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":693,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":63,"flow_packet_id":1,"flow_first_seen":1470104390443,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"68.233.253.133","src_port":53624,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00441{"flow_id":63,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":693,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104390,"pkt_ts_usec":443500,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"TF4M6gNlYMVHBbyMCABFAABAN95AAEAG+rLAqAUQROn9hdF4AFAesUW4AAAAALAC\/\/+iVAAAAgQFtAEDAwUBAQgKGg88QAAAAAAEAgAA"}
00435{"flow_id":63,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":694,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104390,"pkt_ts_usec":640525,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABxCjnAxTF4M6gNlCABFAAA8AABAADUGPZVE6f2FwKgFEABQ0Xh2OO96HrFFuaASFqBImwAAAgQFtAQCCArPHh84Gg88QAEDAwg="}
00424{"flow_id":63,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":695,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104390,"pkt_ts_usec":640578,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlYMVHBbyMCABFAAA0PI1AAEAG9g\/AqAUQROn9hdF4AFAesUW5djjve4AQEBV9LwAAAQEIChoPPQTPHh84"}
00782{"flow_id":63,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":696,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104390,"pkt_ts_usec":642049,"pkt_caplen":331,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":331,"pkt_l4_len":297,"pkt":"TF4M6gNlYMVHBbyMCABFAAE9+GJAAEAGOTHAqAUQROn9hdF4AFAesUW5djjve4AYEBVNJgAAAQEIChoPPQXPHh84R0VUIC9jb21NYWdpY2FuQXBpL2NvbXBvc2l0ZS9hcHAucGhwL0dsb2JhbC9JbmRleC9pcCBIVFRQLzEuMQ0KSG9zdDogYXBpLm1hZ2ljYW5zb2Z0LmNvbQ0KQWNjZXB0OiAqLyoNCkFjY2VwdC1MYW5ndWFnZTogemgtdHcNCkNvbm5lY3Rpb246IGtlZXAtYWxpdmUNCkFjY2VwdC1FbmNvZGluZzogZ3ppcCwgZGVmbGF0ZQ0KVXNlci1BZ2VudDogTWFnaWNhbiAodW5rbm93biB2ZXJzaW9uKSBDRk5ldHdvcmsvNzIwLjUuNyBEYXJ3aW4vMTQuNS4wICh4ODZfNjQpDQoNCg=="}
00762{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":696,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":63,"flow_packet_id":4,"flow_first_seen":1470104390443,"flow_last_seen":1470104390642,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":265,"flow_tot_l4_payload_len":265,"flow_avg_l4_payload_len":66,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"68.233.253.133","src_port":53624,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"api.magicansoft.com","url":"api.magicansoft.com\/comMagicanApi\/composite\/app.php\/Global\/Index\/ip","code":0,"content_type":"","user_agent":"Magican (unknown version) CFNetwork\/720.5.7 Darwin\/14.5.0 (x86_64)"}}
00495{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":697,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":64,"flow_packet_id":1,"flow_first_seen":1470104390741,"flow_last_seen":0,"flow_min_l4_payload_len":123,"flow_max_l4_payload_len":123,"flow_tot_l4_payload_len":123,"flow_avg_l4_payload_len":123,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::4e5e:cff:fe9a:ec54","dst_ip":"ff02::1","src_port":5678,"dst_port":5678,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00592{"flow_id":64,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":697,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104390,"pkt_ts_usec":741932,"pkt_caplen":185,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":185,"pkt_l4_len":131,"pkt":"MzMAAAABTF4MmuxUht1gAAAAAIMRAf6AAAAAAAAATl4M\/\/6a7FT\/AgAAAAAAAAAAAAAAAAABFi4WLgCDan0ABGg\/AAEABkxeDJrsVAAFAAAABwAPNi4zNS4xIChzdGFibGUpAAgACE1pa3JvVGlrAAoABHzzfwAACwAJM0RYWS1LSEdEAAwADUNSUzEyNS0yNEctMVMADgABAQAPABD+gAAAAAAAAE5eDP\/+muxUABAAB2JyaWRnZTE="}
00424{"flow_id":63,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":699,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104390,"pkt_ts_usec":838554,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABxCjnAxTF4M6gNlCABFAAA08IZAADUGTRZE6f2FwKgFEABQ0Xh2OO97HrFGwoAQABuLWQAAAQEICs8eH\/4aDz0F"}
00859{"flow_id":63,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":700,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104390,"pkt_ts_usec":846598,"pkt_caplen":390,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":390,"pkt_l4_len":356,"pkt":"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"}
00425{"flow_id":63,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":701,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104390,"pkt_ts_usec":846680,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlYMVHBbyMCABFAAA0TlJAAEAG5ErAqAUQROn9hdF4AFAesUbCdjjwv4AQEAt5WQAAAQEIChoPPdDPHh\/\/"}
00495{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":702,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":65,"flow_packet_id":1,"flow_first_seen":1470104390945,"flow_last_seen":0,"flow_min_l4_payload_len":317,"flow_max_l4_payload_len":317,"flow_tot_l4_payload_len":317,"flow_avg_l4_payload_len":317,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.10.110","dst_ip":"255.255.255.255","src_port":60480,"dst_port":62976,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00835{"flow_id":65,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":702,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104390,"pkt_ts_usec":945416,"pkt_caplen":359,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":359,"pkt_l4_len":325,"pkt":"\/\/\/\/\/\/\/\/XNmY3fXzCABFAAFZAABAAEARbn7AqApu\/\/\/\/\/+xA9gABRTgx\/\/8AAKAAXNmY3fXzwKgKbgAAAgAnAUROUy0xMTAwLTA0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABOQVMAAAAAAAAAAAAAVVqvihgAAABVWsE9WwAAAFVasDEuMDJiMTAAEXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXNmY3fXzM0ExAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGRsaW5rLURERjVGMwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqApu\/\/8AAExBTjEAAAAAAAAAAAAAAAAAAAAAAAAAAAA="}
00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":706,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":66,"flow_packet_id":1,"flow_first_seen":1470104391199,"flow_last_seen":0,"flow_min_l4_payload_len":1,"flow_max_l4_payload_len":1,"flow_tot_l4_payload_len":1,"flow_avg_l4_payload_len":1,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"64.233.189.128","src_port":49581,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00411{"flow_id":66,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":706,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104391,"pkt_ts_usec":199899,"pkt_caplen":55,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":55,"pkt_l4_len":21,"pkt":"TF4M6gNlABxCjnAxCABFAAApUk5AAIAGdmbAqHMIQOm9gMGtAFD1eICMR0KJzlAQAXpzKwAAAA=="}
00411{"flow_id":66,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":707,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104391,"pkt_ts_usec":199954,"pkt_caplen":55,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":55,"pkt_l4_len":21,"pkt":"TF4M6gNlABxCjnAxCABFAAApUk5AAIAGdmbAqHMIQOm9gMGtAFD1eICMR0KJzlAQAXpzKwAAAA=="}
00423{"flow_id":66,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":708,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104391,"pkt_ts_usec":208758,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABxCjnAxTF4M6gNlCABFAAA0a70AAC4G7uxA6b2AwKhzCABQwa1HQonO9XiAjYAQAVdRKwAAAQEFCvV4gIz1eICN"}
00579{"flow_id":58,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":709,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104391,"pkt_ts_usec":253292,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6cPGh+Cr9CABFAAChARUAAAERAozAqAUJ7\/\/\/+ti8B2wAjcMVTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="}
00579{"flow_id":57,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":710,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104391,"pkt_ts_usec":254355,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6uKxvwfbSCABFAAChJ1IAAAERfDbAqGUh7\/\/\/+ti9B2wAjWL8TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="}
00495{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":711,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":67,"flow_packet_id":1,"flow_first_seen":1470104391254,"flow_last_seen":0,"flow_min_l4_payload_len":24,"flow_max_l4_payload_len":24,"flow_tot_l4_payload_len":24,"flow_avg_l4_payload_len":24,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::5d92:62a8:ebde:1319","dst_ip":"ff02::1:3","src_port":63659,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00453{"flow_id":67,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":711,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104391,"pkt_ts_usec":254477,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"MzMAAQADPKn0WgOEht1gAAAAACARAf6AAAAAAAAAXZJiqOveExn\/AgAAAAAAAAAAAAAAAQAD+KsU6wAgEMLGawAAAAEAAAAAAAAGaXNhdGFwAAABAAE="}
00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":711,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":67,"flow_packet_id":1,"flow_first_seen":1470104391254,"flow_last_seen":0,"flow_min_l4_payload_len":24,"flow_max_l4_payload_len":24,"flow_tot_l4_payload_len":24,"flow_avg_l4_payload_len":24,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::5d92:62a8:ebde:1319","dst_ip":"ff02::1:3","src_port":63659,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}}
00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":712,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":68,"flow_packet_id":1,"flow_first_seen":1470104391254,"flow_last_seen":0,"flow_min_l4_payload_len":24,"flow_max_l4_payload_len":24,"flow_tot_l4_payload_len":24,"flow_avg_l4_payload_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.236","dst_ip":"224.0.0.252","src_port":51714,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00424{"flow_id":68,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":712,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104391,"pkt_ts_usec":254588,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AQBeAAD8PKn0WgOECABFAAA0HuAAAAER9UjAqAPs4AAA\/MoCFOsAIFaUxmsAAAABAAAAAAAABmlzYXRhcAAAAQAB"}
00518{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":712,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":68,"flow_packet_id":1,"flow_first_seen":1470104391254,"flow_last_seen":0,"flow_min_l4_payload_len":24,"flow_max_l4_payload_len":24,"flow_tot_l4_payload_len":24,"flow_avg_l4_payload_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.236","dst_ip":"224.0.0.252","src_port":51714,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}}
00578{"flow_id":2,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":713,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104391,"pkt_ts_usec":254843,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6GF4PUugBCABFAAChMO8AAAER0oHAqAU57\/\/\/+toBB2wAjcGgTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="}
00453{"flow_id":67,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":714,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104391,"pkt_ts_usec":361874,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"MzMAAQADPKn0WgOEht1gAAAAACARAf6AAAAAAAAAXZJiqOveExn\/AgAAAAAAAAAAAAAAAQAD+KsU6wAgEMLGawAAAAEAAAAAAAAGaXNhdGFwAAABAAE="}
00424{"flow_id":68,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":715,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104391,"pkt_ts_usec":362039,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AQBeAAD8PKn0WgOECABFAAA0HuEAAAER9UfAqAPs4AAA\/MoCFOsAIFaUxmsAAAABAAAAAAAABmlzYXRhcAAAAQAB"}
00584{"flow_id":59,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":718,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104391,"pkt_ts_usec":458729,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/66LH8q\/uyCABFAAClCe4AAAQR9obAqAUx7\/\/\/+sn4B2wAkYV1TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="}
00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":720,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":69,"flow_packet_id":1,"flow_first_seen":1470104391564,"flow_last_seen":0,"flow_min_l4_payload_len":50,"flow_max_l4_payload_len":50,"flow_tot_l4_payload_len":50,"flow_avg_l4_payload_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.236","dst_ip":"192.168.255.255","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00469{"flow_id":69,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":720,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104391,"pkt_ts_usec":564386,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/PKn0WgOECABFAABOHugAAIARlnrAqAPswKj\/\/wCJAIkAOqdmilEBEAABAAAAAAAAIEVKRkRFQkZFRUJGQUNBQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAE="}
00520{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":720,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":69,"flow_packet_id":1,"flow_first_seen":1470104391564,"flow_last_seen":0,"flow_min_l4_payload_len":50,"flow_max_l4_payload_len":50,"flow_tot_l4_payload_len":50,"flow_avg_l4_payload_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.236","dst_ip":"192.168.255.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","breed":"Acceptable","category":"System"}}
00496{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":726,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":70,"flow_packet_id":1,"flow_first_seen":1470104392072,"flow_last_seen":0,"flow_min_l4_payload_len":317,"flow_max_l4_payload_len":317,"flow_tot_l4_payload_len":317,"flow_avg_l4_payload_len":317,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.140.140","dst_ip":"255.255.255.255","src_port":62976,"dst_port":62976,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00839{"flow_id":70,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":726,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104392,"pkt_ts_usec":72031,"pkt_caplen":359,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":359,"pkt_l4_len":325,"pkt":"\/\/\/\/\/\/\/\/wKC7c+tXCABFAAFZOwBAAEARsV\/AqIyM\/\/\/\/\/\/YA9gABRQTx\/\/\/Z1aAAwKC7c+tXwKiMjAAAAgAnAURHUy0xMjEwLTEwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABTd2l0Y2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADMuMTAuMDEzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKC7c+tXQjEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABRUDBSMUQ5MDAwMDI2AAAAAAAAAAAAAAAAAAAAAAAAAERHUy0xMjEwLTEwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqIyM\/\/8AAFBvcnQgOAAAIAGwIAAGAADCoLv\/\/nPrV0A="}
00505{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":727,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":71,"flow_packet_id":1,"flow_first_seen":1470104392072,"flow_last_seen":0,"flow_min_l4_payload_len":329,"flow_max_l4_payload_len":329,"flow_tot_l4_payload_len":329,"flow_avg_l4_payload_len":329,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b020:6::c2a0:bbff:fe73:eb57","dst_ip":"ff02::1","src_port":62976,"dst_port":62976,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00872{"flow_id":71,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":727,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104392,"pkt_ts_usec":72989,"pkt_caplen":391,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":391,"pkt_l4_len":337,"pkt":"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"}
00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":730,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":72,"flow_packet_id":1,"flow_first_seen":1470104392380,"flow_last_seen":0,"flow_min_l4_payload_len":50,"flow_max_l4_payload_len":50,"flow_tot_l4_payload_len":50,"flow_avg_l4_payload_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.45","dst_ip":"192.168.255.255","src_port":59789,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00469{"flow_id":72,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":730,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104392,"pkt_ts_usec":380243,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/4KzLceHQCABFAABOckUAAEARgdzAqAUtwKj\/\/+mNAIkAOs9OABUBEAABAAAAAAAAIEZERUJFT0VLRUpDTkVNRUpFR0VGRUNFUEVQRUxDTkNBAAAgAAE="}
00521{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":730,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":72,"flow_packet_id":1,"flow_first_seen":1470104392380,"flow_last_seen":0,"flow_min_l4_payload_len":50,"flow_max_l4_payload_len":50,"flow_tot_l4_payload_len":50,"flow_avg_l4_payload_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.45","dst_ip":"192.168.255.255","src_port":59789,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","breed":"Acceptable","category":"System"}}
00468{"flow_id":9,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":731,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104392,"pkt_ts_usec":380425,"pkt_caplen":98,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":98,"pkt_l4_len":44,"pkt":"MzMAAQACcD6s8PAHht1gBWEEACwRAf6AAAAAAAAABAZVqGRTJd3\/AgAAAAAAAAAAAAAAAQACAiICIwAsg0sLJ3MdAAEADgABAAEduOb7cD6s8PAHAAYABAAXABgACAACBh0="}
00583{"flow_id":12,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":734,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104392,"pkt_ts_usec":584849,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/6zD2CHu7jCABFAAClQLkAAAQRv73AqAUv7\/\/\/+utrB2wAkWQETS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="}
00520{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":738,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":71,"flow_packet_id":1,"flow_first_seen":1470104392072,"flow_last_seen":0,"flow_min_l4_payload_len":329,"flow_max_l4_payload_len":329,"flow_tot_l4_payload_len":329,"flow_avg_l4_payload_len":329,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b020:6::c2a0:bbff:fe73:eb57","dst_ip":"ff02::1","src_port":62976,"dst_port":62976,"l4_proto":"udp","ndpi": {"proto":"Unknown","breed":"Unrated"}}
00506{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":738,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":71,"flow_packet_id":1,"flow_first_seen":1470104392072,"flow_last_seen":0,"flow_min_l4_payload_len":329,"flow_max_l4_payload_len":329,"flow_tot_l4_payload_len":329,"flow_avg_l4_payload_len":329,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b020:6::c2a0:bbff:fe73:eb57","dst_ip":"ff02::1","src_port":62976,"dst_port":62976,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":738,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":69,"flow_packet_id":1,"flow_first_seen":1470104391564,"flow_last_seen":0,"flow_min_l4_payload_len":50,"flow_max_l4_payload_len":50,"flow_tot_l4_payload_len":50,"flow_avg_l4_payload_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.236","dst_ip":"192.168.255.255","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00510{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":738,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":65,"flow_packet_id":1,"flow_first_seen":1470104390945,"flow_last_seen":0,"flow_min_l4_payload_len":317,"flow_max_l4_payload_len":317,"flow_tot_l4_payload_len":317,"flow_avg_l4_payload_len":317,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.10.110","dst_ip":"255.255.255.255","src_port":60480,"dst_port":62976,"l4_proto":"udp","ndpi": {"proto":"Unknown","breed":"Unrated"}}
00496{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":738,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":65,"flow_packet_id":1,"flow_first_seen":1470104390945,"flow_last_seen":0,"flow_min_l4_payload_len":317,"flow_max_l4_payload_len":317,"flow_tot_l4_payload_len":317,"flow_avg_l4_payload_len":317,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.10.110","dst_ip":"255.255.255.255","src_port":60480,"dst_port":62976,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":738,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":72,"flow_packet_id":1,"flow_first_seen":1470104392380,"flow_last_seen":0,"flow_min_l4_payload_len":50,"flow_max_l4_payload_len":50,"flow_tot_l4_payload_len":50,"flow_avg_l4_payload_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.45","dst_ip":"192.168.255.255","src_port":59789,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00519{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":738,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":62,"flow_packet_id":1,"flow_first_seen":1470104389597,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"68.233.253.133","src_port":53613,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}}
00481{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":738,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":62,"flow_packet_id":1,"flow_first_seen":1470104389597,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"68.233.253.133","src_port":53613,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00505{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":738,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":60,"flow_packet_id":1,"flow_first_seen":1470104385827,"flow_last_seen":0,"flow_min_l4_payload_len":40,"flow_max_l4_payload_len":40,"flow_tot_l4_payload_len":40,"flow_avg_l4_payload_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"59.120.208.218","dst_ip":"255.255.255.255","src_port":50151,"dst_port":1947,"l4_proto":"udp","ndpi": {"proto":"Unknown","breed":"Unrated"}}
00491{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":738,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":60,"flow_packet_id":1,"flow_first_seen":1470104385827,"flow_last_seen":0,"flow_min_l4_payload_len":40,"flow_max_l4_payload_len":40,"flow_tot_l4_payload_len":40,"flow_avg_l4_payload_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"59.120.208.218","dst_ip":"255.255.255.255","src_port":50151,"dst_port":1947,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00511{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":738,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":70,"flow_packet_id":1,"flow_first_seen":1470104392072,"flow_last_seen":0,"flow_min_l4_payload_len":317,"flow_max_l4_payload_len":317,"flow_tot_l4_payload_len":317,"flow_avg_l4_payload_len":317,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.140.140","dst_ip":"255.255.255.255","src_port":62976,"dst_port":62976,"l4_proto":"udp","ndpi": {"proto":"Unknown","breed":"Unrated"}}
00497{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":738,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":70,"flow_packet_id":1,"flow_first_seen":1470104392072,"flow_last_seen":0,"flow_min_l4_payload_len":317,"flow_max_l4_payload_len":317,"flow_tot_l4_payload_len":317,"flow_avg_l4_payload_len":317,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.140.140","dst_ip":"255.255.255.255","src_port":62976,"dst_port":62976,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00510{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":738,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":64,"flow_packet_id":1,"flow_first_seen":1470104390741,"flow_last_seen":0,"flow_min_l4_payload_len":123,"flow_max_l4_payload_len":123,"flow_tot_l4_payload_len":123,"flow_avg_l4_payload_len":123,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::4e5e:cff:fe9a:ec54","dst_ip":"ff02::1","src_port":5678,"dst_port":5678,"l4_proto":"udp","ndpi": {"proto":"Unknown","breed":"Unrated"}}
00496{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":738,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":64,"flow_packet_id":1,"flow_first_seen":1470104390741,"flow_last_seen":0,"flow_min_l4_payload_len":123,"flow_max_l4_payload_len":123,"flow_tot_l4_payload_len":123,"flow_avg_l4_payload_len":123,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::4e5e:cff:fe9a:ec54","dst_ip":"ff02::1","src_port":5678,"dst_port":5678,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":738,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":73,"flow_packet_id":1,"flow_first_seen":1470104393097,"flow_last_seen":0,"flow_min_l4_payload_len":50,"flow_max_l4_payload_len":50,"flow_tot_l4_payload_len":50,"flow_avg_l4_payload_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.236","dst_ip":"192.168.255.255","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00468{"flow_id":73,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":738,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104393,"pkt_ts_usec":97082,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/PKn0WgOECABFAABOHxQAAIARlk7AqAPswKj\/\/wCJAIkAOqdmilEBEAABAAAAAAAAIEVKRkRFQkZFRUJGQUNBQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAE="}
00520{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":738,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":73,"flow_packet_id":1,"flow_first_seen":1470104393097,"flow_last_seen":0,"flow_min_l4_payload_len":50,"flow_max_l4_payload_len":50,"flow_tot_l4_payload_len":50,"flow_avg_l4_payload_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.236","dst_ip":"192.168.255.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","breed":"Acceptable","category":"System"}}
00579{"flow_id":21,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":739,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104393,"pkt_ts_usec":97241,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6\/PiuMpcsCABFAAChLEYAAAER2QTAqANf7\/\/\/+uhMB2wAjbUvTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="}
00580{"flow_id":56,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":741,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104393,"pkt_ts_usec":302618,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6CJ4BzeuNCABFAAChFFMAAAER7zHAqAUl7\/\/\/+t\/tB2wAjbvITS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="}
00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":745,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":74,"flow_packet_id":1,"flow_first_seen":1470104393610,"flow_last_seen":0,"flow_min_l4_payload_len":50,"flow_max_l4_payload_len":50,"flow_tot_l4_payload_len":50,"flow_avg_l4_payload_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.45","dst_ip":"192.168.255.255","src_port":59461,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00469{"flow_id":74,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":745,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104393,"pkt_ts_usec":610238,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/4KzLceHQCABFAABOGrEAAEAR2XDAqAUtwKj\/\/+hFAIkAOjOmABcBEAABAAAAAAAAIEVIRUdFSkVNRUZDQUNBQ0FDQUNBQ0FDQUNBQ0FDQUNBAAAgAAE="}
00521{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":745,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":74,"flow_packet_id":1,"flow_first_seen":1470104393610,"flow_last_seen":0,"flow_min_l4_payload_len":50,"flow_max_l4_payload_len":50,"flow_tot_l4_payload_len":50,"flow_avg_l4_payload_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.45","dst_ip":"192.168.255.255","src_port":59461,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","breed":"Acceptable","category":"System"}}
00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":746,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":75,"flow_packet_id":1,"flow_first_seen":1470104393610,"flow_last_seen":0,"flow_min_l4_payload_len":50,"flow_max_l4_payload_len":50,"flow_tot_l4_payload_len":50,"flow_avg_l4_payload_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.45","dst_ip":"192.168.255.255","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00469{"flow_id":75,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":746,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104393,"pkt_ts_usec":610386,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/4KzLceHQCABFAABOnJgAAEARV4nAqAUtwKj\/\/wCJAIkAOr16RfsBEAABAAAAAAAAIEVPRUJGREVHRUpFTUVGQ0FDQUNBQ0FDQUNBQ0FDQUJOAAAgAAE="}
00519{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":746,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":75,"flow_packet_id":1,"flow_first_seen":1470104393610,"flow_last_seen":0,"flow_min_l4_payload_len":50,"flow_max_l4_payload_len":50,"flow_tot_l4_payload_len":50,"flow_avg_l4_payload_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.45","dst_ip":"192.168.255.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","breed":"Acceptable","category":"System"}}
00489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":747,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":76,"flow_packet_id":1,"flow_first_seen":1470104393610,"flow_last_seen":0,"flow_min_l4_payload_len":174,"flow_max_l4_payload_len":174,"flow_tot_l4_payload_len":174,"flow_avg_l4_payload_len":174,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.45","dst_ip":"192.168.255.255","src_port":138,"dst_port":138,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00636{"flow_id":76,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":747,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104393,"pkt_ts_usec":610555,"pkt_caplen":216,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":216,"pkt_l4_len":182,"pkt":"\/\/\/\/\/\/\/\/4KzLceHQCABFAADKO0kAAEARuFzAqAUtwKj\/\/wCKAIoAtoWlEQJF7sCoBS0AAACgAAAgRU5FQkVERUNFUEVQRUxFQkVKRkNDTkVGREJFRURBQUEAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJOAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAA1TQAAO1FEQAABgAAAAAAAAACAAAAAAAAAAAAAAAGAFYAAwABAAEAAgAXAFxNQUlMU0xPVFxCUk9XU0UACQTsRQAA"}
00566{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":747,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":76,"flow_packet_id":1,"flow_first_seen":1470104393610,"flow_last_seen":0,"flow_min_l4_payload_len":174,"flow_max_l4_payload_len":174,"flow_tot_l4_payload_len":174,"flow_avg_l4_payload_len":174,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.45","dst_ip":"192.168.255.255","src_port":138,"dst_port":138,"l4_proto":"udp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"NetBIOS.SMBv1","breed":"Dangerous","category":"System"}}
00636{"flow_id":76,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":748,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104393,"pkt_ts_usec":610744,"pkt_caplen":216,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":216,"pkt_l4_len":182,"pkt":"\/\/\/\/\/\/\/\/4KzLceHQCABFAADK5DUAAEARD3DAqAUtwKj\/\/wCKAIoAtoasEQJF8cCoBS0AAACgAAAgRU5FQkVERUNFUEVQRUxFQkVKRkNDTkVGREJFRURBQUEAIEVORkRFSUVQRU5FRkNBQ0FDQUNBQ0FDQUNBQ0FDQUJOAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAA1TQAAPBFEQAABgAAAAAAAAACAAAAAAAAAAAAAAAGAFYAAwABAAEAAgAXAFxNQUlMU0xPVFxCUk9XU0UACQTvRQAA"}
00636{"flow_id":76,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":749,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104393,"pkt_ts_usec":611090,"pkt_caplen":216,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":216,"pkt_l4_len":182,"pkt":"\/\/\/\/\/\/\/\/4KzLceHQCABFAADKOS4AAEARunfAqAUtwKj\/\/wCKAIoAtoChEQJF98CoBS0AAACgAAAgRU5FQkVERUNFUEVQRUxFQkVKRkNDTkVGREJFRURBQUEAIEVORkpFSEZDRVBGRkZBQ0FDQUNBQ0FDQUNBQ0FDQUJOAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAA1TQAAPZFEQAABgAAAAAAAAACAAAAAAAAAAAAAAAGAFYAAwABAAEAAgAXAFxNQUlMU0xPVFxCUk9XU0UACQT1RQAA"}
00469{"flow_id":73,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":753,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104393,"pkt_ts_usec":813792,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/PKn0WgOECABFAABOHxcAAIARlkvAqAPswKj\/\/wCJAIkAOqdiilUBEAABAAAAAAAAIEVKRkRFQkZFRUJGQUNBQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAE="}
00579{"flow_id":58,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":758,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104394,"pkt_ts_usec":223876,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6cPGh+Cr9CABFAAChAc0AAAERAdTAqAUJ7\/\/\/+ti8B2wAjcMVTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="}
00578{"flow_id":2,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":759,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104394,"pkt_ts_usec":224091,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6GF4PUugBCABFAAChMQIAAAER0m7AqAU57\/\/\/+toBB2wAjcGgTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="}
00469{"flow_id":73,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":762,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104394,"pkt_ts_usec":531875,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/PKn0WgOECABFAABOHxoAAIARlkjAqAPswKj\/\/wCJAIkAOqdiilUBEAABAAAAAAAAIEVKRkRFQkZFRUJGQUNBQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAE="}
00469{"flow_id":75,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":763,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104394,"pkt_ts_usec":635803,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/4KzLceHQCABFAABOipYAAEARaYvAqAUtwKj\/\/wCJAIkAOr16RfsBEAABAAAAAAAAIEVPRUJGREVHRUpFTUVGQ0FDQUNBQ0FDQUNBQ0FDQUJOAAAgAAE="}
00469{"flow_id":73,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":768,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104395,"pkt_ts_usec":351449,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/PKn0WgOECABFAABOHysAAIARljfAqAPswKj\/\/wCJAIkAOqdiilUBEAABAAAAAAAAIEVKRkRFQkZFRUJGQUNBQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAE="}
00493{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":772,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":77,"flow_packet_id":1,"flow_first_seen":1470104395656,"flow_last_seen":0,"flow_min_l4_payload_len":317,"flow_max_l4_payload_len":317,"flow_tot_l4_payload_len":317,"flow_avg_l4_payload_len":317,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.10.7","dst_ip":"255.255.255.255","src_port":62976,"dst_port":62976,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00836{"flow_id":77,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":772,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104395,"pkt_ts_usec":656981,"pkt_caplen":359,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":359,"pkt_l4_len":325,"pkt":"\/\/\/\/\/\/\/\/wKC7c+snCABFAAFZOwBAAEARM+XAqAoH\/\/\/\/\/\/YA9gABRUQe\/\/+eLaAAwKC7c+snwKgKBwAAAgAnAURHUy0xMjEwLTEwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABTd2l0Y2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADMuMTAuMDEzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKC7c+snQjEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABRUDBSMUQ5MDAwMDIzAAAAAAAAAAAAAAAAAAAAAAAAAERHUy0xMjEwLTEwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqAoH\/\/8AAFBvcnQgOAAAAAAAAAAAAAAAAAAAAAAAAAA="}
00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":773,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":78,"flow_packet_id":1,"flow_first_seen":1470104395657,"flow_last_seen":0,"flow_min_l4_payload_len":300,"flow_max_l4_payload_len":300,"flow_tot_l4_payload_len":300,"flow_avg_l4_payload_len":300,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00808{"flow_id":78,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":773,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104395,"pkt_ts_usec":657061,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/TF4M6gNlCABFAAFIAAAAABARqaYAAAAA\/\/\/\/\/wBEAEMBNLOUAQEGALkL8pMAEIAAAAAAAAAAAAAAAAAAAAAAAExeDOoDZQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBPQcBTF4M6gNlNwYBAwYPLCH\/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"}
00555{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":773,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":78,"flow_packet_id":1,"flow_first_seen":1470104395657,"flow_last_seen":0,"flow_min_l4_payload_len":300,"flow_max_l4_payload_len":300,"flow_tot_l4_payload_len":300,"flow_avg_l4_payload_len":300,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","ndpi": {"proto":"DHCP","breed":"Acceptable","category":"Network"},"dhcp": {"fingerprint":"1,3,6,15,44,33"}}
00495{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":784,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":79,"flow_packet_id":1,"flow_first_seen":1470104396888,"flow_last_seen":0,"flow_min_l4_payload_len":26,"flow_max_l4_payload_len":26,"flow_tot_l4_payload_len":26,"flow_avg_l4_payload_len":26,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::4568:efbc:40b1:1346","dst_ip":"ff02::1:3","src_port":50194,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00457{"flow_id":79,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":784,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104396,"pkt_ts_usec":888586,"pkt_caplen":88,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":88,"pkt_l4_len":34,"pkt":"MzMAAQADSNIkYwreht1gAAAAACIRAf6AAAAAAAAARWjvvECxE0b\/AgAAAAAAAAAAAAAAAQADxBIU6wAiAfRVcwAAAAEAAAAAAAAIa2V2aW4tUEMAAP8AAQ=="}
00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":784,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":79,"flow_packet_id":1,"flow_first_seen":1470104396888,"flow_last_seen":0,"flow_min_l4_payload_len":26,"flow_max_l4_payload_len":26,"flow_tot_l4_payload_len":26,"flow_avg_l4_payload_len":26,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::4568:efbc:40b1:1346","dst_ip":"ff02::1:3","src_port":50194,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}}
00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":785,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":80,"flow_packet_id":1,"flow_first_seen":1470104396889,"flow_last_seen":0,"flow_min_l4_payload_len":26,"flow_max_l4_payload_len":26,"flow_tot_l4_payload_len":26,"flow_avg_l4_payload_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.41","dst_ip":"224.0.0.252","src_port":54470,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00429{"flow_id":80,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":785,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104396,"pkt_ts_usec":889494,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":68,"pkt_l4_len":34,"pkt":"AQBeAAD8SNIkYwreCABFAAA2fi0AAAERlLzAqAUp4AAA\/NTGFOsAItEVVXMAAAABAAAAAAAACGtldmluLVBDAAD\/AAE="}
00517{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":785,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":80,"flow_packet_id":1,"flow_first_seen":1470104396889,"flow_last_seen":0,"flow_min_l4_payload_len":26,"flow_max_l4_payload_len":26,"flow_tot_l4_payload_len":26,"flow_avg_l4_payload_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.41","dst_ip":"224.0.0.252","src_port":54470,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}}
00457{"flow_id":79,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":786,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104396,"pkt_ts_usec":987090,"pkt_caplen":88,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":88,"pkt_l4_len":34,"pkt":"MzMAAQADSNIkYwreht1gAAAAACIRAf6AAAAAAAAARWjvvECxE0b\/AgAAAAAAAAAAAAAAAQADxBIU6wAiAfRVcwAAAAEAAAAAAAAIa2V2aW4tUEMAAP8AAQ=="}
00429{"flow_id":80,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":787,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104396,"pkt_ts_usec":987104,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":68,"pkt_l4_len":34,"pkt":"AQBeAAD8SNIkYwreCABFAAA2fi4AAAERlLvAqAUp4AAA\/NTGFOsAItEVVXMAAAABAAAAAAAACGtldmluLVBDAAD\/AAE="}
00577{"flow_id":7,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":790,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104397,"pkt_ts_usec":90815,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6SNIkYwreCABFAAChfi8AAAERhVHAqAUp7\/\/\/+tgQB2wAjcOhTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="}
00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":791,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":81,"flow_packet_id":1,"flow_first_seen":1470104397091,"flow_last_seen":0,"flow_min_l4_payload_len":300,"flow_max_l4_payload_len":300,"flow_tot_l4_payload_len":300,"flow_avg_l4_payload_len":300,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.9","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00808{"flow_id":81,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":791,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104397,"pkt_ts_usec":91815,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/cPGh+Cr9CABFAAFIAzMAAIARcMHAqAUJ\/\/\/\/\/wBEAEMBND1aAQEGAPwPedgAAIAAwKgFCQAAAAAAAAAAAAAAAHDxofgq\/QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEIPQcBcPGh+Cr9DAlKb2FubmEtUEM8CE1TRlQgNS4wNw0BDwMGLC4vHyF5+Sv8\/wAAAAAAAAAAAAAA"}
00583{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":791,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":81,"flow_packet_id":1,"flow_first_seen":1470104397091,"flow_last_seen":0,"flow_min_l4_payload_len":300,"flow_max_l4_payload_len":300,"flow_tot_l4_payload_len":300,"flow_avg_l4_payload_len":300,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.9","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","ndpi": {"proto":"DHCP","breed":"Acceptable","category":"Network"},"dhcp": {"fingerprint":"1,15,3,6,44,46,47,31,33,121,249,43,252"}}
00809{"flow_id":4,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":792,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104397,"pkt_ts_usec":92033,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/TF4M6gNlCABFAAFIAAAAABARcfzAqHcB\/\/\/\/\/wBDAEQBNEtlAgEGAPwPedgAAIAAwKgFCQAAAADAqHcBAAAAAHDxofgq\/QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEFNgTAqHcBAQT\/\/wAAAwTAqHcBBhCoXwEBCAgICKhfwAEICAQE\/wAAAAAAAAAAAAAAAAAAAAAAAAAA"}
00579{"flow_id":57,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":793,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104397,"pkt_ts_usec":192245,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6uKxvwfbSCABFAAChJ1QAAAERfDTAqGUh7\/\/\/+ti9B2wAjWL8TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="}
00579{"flow_id":58,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":794,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104397,"pkt_ts_usec":193096,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6cPGh+Cr9CABFAAChAzcAAAERAGrAqAUJ7\/\/\/+ti8B2wAjcMVTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="}
00584{"flow_id":59,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":798,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104397,"pkt_ts_usec":396994,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/66LH8q\/uyCABFAAClCfAAAAQR9oTAqAUx7\/\/\/+sn4B2wAkYV1TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="}
00492{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":803,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":82,"flow_packet_id":1,"flow_first_seen":1470104397807,"flow_last_seen":0,"flow_min_l4_payload_len":137,"flow_max_l4_payload_len":137,"flow_tot_l4_payload_len":137,"flow_avg_l4_payload_len":137,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.48","dst_ip":"239.255.255.250","src_port":49701,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00583{"flow_id":82,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":803,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104397,"pkt_ts_usec":807877,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/6bEAIlAI6CABFAAClrzIAAAERVEPAqAUw7\/\/\/+sIlB2wAkY1JTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="}
00523{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":803,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":82,"flow_packet_id":1,"flow_first_seen":1470104397807,"flow_last_seen":0,"flow_min_l4_payload_len":137,"flow_max_l4_payload_len":137,"flow_tot_l4_payload_len":137,"flow_avg_l4_payload_len":137,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.48","dst_ip":"239.255.255.250","src_port":49701,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}}
00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":810,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":83,"flow_packet_id":1,"flow_first_seen":1470104398314,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"68.233.253.133","src_port":53605,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00415{"flow_id":83,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":810,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104398,"pkt_ts_usec":314933,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"TF4M6gNlYMVHBbyMCABFAAAoA95AAEAGLsvAqAUQROn9hdFlAFAG4xw4xV6fSlAUEAE+LgAA8Q52cgJF"}
00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":812,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":84,"flow_packet_id":1,"flow_first_seen":1470104398832,"flow_last_seen":0,"flow_min_l4_payload_len":40,"flow_max_l4_payload_len":40,"flow_tot_l4_payload_len":40,"flow_avg_l4_payload_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.64","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00448{"flow_id":84,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":812,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104398,"pkt_ts_usec":832807,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"AQBeAAD7ZMwunDzJCABFAABEo69AAP8RMRXAqAVA4AAA+xTpFOkAMOS\/AAAAAAABAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQ=="}
00559{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":812,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":84,"flow_packet_id":1,"flow_first_seen":1470104398832,"flow_last_seen":0,"flow_min_l4_payload_len":40,"flow_max_l4_payload_len":40,"flow_tot_l4_payload_len":40,"flow_avg_l4_payload_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.64","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","breed":"Acceptable","category":"Network"},"mdns": {"answer":"_googlecast._tcp.local"}}
00489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":813,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":85,"flow_packet_id":1,"flow_first_seen":1470104398932,"flow_last_seen":0,"flow_min_l4_payload_len":40,"flow_max_l4_payload_len":40,"flow_tot_l4_payload_len":40,"flow_avg_l4_payload_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.186","dst_ip":"255.255.255.255","src_port":32768,"dst_port":1947,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00460{"flow_id":85,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":813,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104398,"pkt_ts_usec":932814,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"\/\/\/\/\/\/\/\/AAK2Qbs6CABFAABEAABAAEARd0fAqAK6\/\/\/\/\/4AAB5sAMBr8aWNSVlNvVTlBQUJYWldKRFlXeHNBSFZ0Ukc5c2IzSlRhWFJCYldVQQ=="}
00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":820,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":86,"flow_packet_id":1,"flow_first_seen":1470104399652,"flow_last_seen":0,"flow_min_l4_payload_len":28,"flow_max_l4_payload_len":28,"flow_tot_l4_payload_len":28,"flow_avg_l4_payload_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.48","dst_ip":"224.0.0.252","src_port":59797,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00432{"flow_id":86,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":820,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104399,"pkt_ts_usec":652689,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"AQBeAAD8bEAIlAI6CABFAAA4QZsAAAER0UXAqAUw4AAA\/OmVFOsAJO3eTL0AAAABAAAAAAAACkthc3Blci1tYWMAAP8AAQ=="}
00517{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":820,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":86,"flow_packet_id":1,"flow_first_seen":1470104399652,"flow_last_seen":0,"flow_min_l4_payload_len":28,"flow_max_l4_payload_len":28,"flow_tot_l4_payload_len":28,"flow_avg_l4_payload_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.48","dst_ip":"224.0.0.252","src_port":59797,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}}
00493{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":824,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":87,"flow_packet_id":1,"flow_first_seen":1470104399854,"flow_last_seen":0,"flow_min_l4_payload_len":100,"flow_max_l4_payload_len":100,"flow_tot_l4_payload_len":100,"flow_avg_l4_payload_len":100,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.100","dst_ip":"255.255.255.255","src_port":50925,"dst_port":5678,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00543{"flow_id":87,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":824,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104399,"pkt_ts_usec":854544,"pkt_caplen":142,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":142,"pkt_l4_len":108,"pkt":"\/\/\/\/\/\/\/\/TF4M6gOICABFAACAAABAAEAReWHAqABk\/\/\/\/\/8btFi4AbOgXAACpHQABAAZMXgzqA4gABQAFNE1OQVQABwAPNi4zNS4xIChzdGFibGUpAAgACE1pa3JvVGlrAAoABIOWJAAACwAJTjUzOC1HMDRVAAwABlJCNDUwRwAOAAEAABAABmV0aGVyMg=="}
00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":825,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":88,"flow_packet_id":1,"flow_first_seen":1470104399958,"flow_last_seen":0,"flow_min_l4_payload_len":26,"flow_max_l4_payload_len":26,"flow_tot_l4_payload_len":26,"flow_avg_l4_payload_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.57","dst_ip":"224.0.0.252","src_port":65150,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00429{"flow_id":88,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":825,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104399,"pkt_ts_usec":958731,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":68,"pkt_l4_len":34,"pkt":"AQBeAAD8GF4PUugBCABFAAA2MRAAAAER4cnAqAU54AAA\/P5+FOsAIr4lNLsAAAABAAAAAAAACFVzaGVyLVBDAAD\/AAE="}
00517{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":825,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":88,"flow_packet_id":1,"flow_first_seen":1470104399958,"flow_last_seen":0,"flow_min_l4_payload_len":26,"flow_max_l4_payload_len":26,"flow_tot_l4_payload_len":26,"flow_avg_l4_payload_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.57","dst_ip":"224.0.0.252","src_port":65150,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}}
00494{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":826,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":89,"flow_packet_id":1,"flow_first_seen":1470104399959,"flow_last_seen":0,"flow_min_l4_payload_len":29,"flow_max_l4_payload_len":29,"flow_tot_l4_payload_len":29,"flow_avg_l4_payload_len":29,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::e034:7be:d8f9:6197","dst_ip":"ff02::1:3","src_port":62756,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00461{"flow_id":89,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":826,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104399,"pkt_ts_usec":959547,"pkt_caplen":91,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":91,"pkt_l4_len":37,"pkt":"MzMAAQADuKxv2MGbht1gAAAAACURAf6AAAAAAAAA4DQHvtj5YZf\/AgAAAAAAAAAAAAAAAQAD9SQU6wAlorgrvQAAAAEAAAAAAAALY2hhcm1pbmctUEMAAP8AAQ=="}
00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":826,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":89,"flow_packet_id":1,"flow_first_seen":1470104399959,"flow_last_seen":0,"flow_min_l4_payload_len":29,"flow_max_l4_payload_len":29,"flow_tot_l4_payload_len":29,"flow_avg_l4_payload_len":29,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::e034:7be:d8f9:6197","dst_ip":"ff02::1:3","src_port":62756,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}}
00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":827,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":90,"flow_packet_id":1,"flow_first_seen":1470104399959,"flow_last_seen":0,"flow_min_l4_payload_len":29,"flow_max_l4_payload_len":29,"flow_tot_l4_payload_len":29,"flow_avg_l4_payload_len":29,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.50","dst_ip":"224.0.0.252","src_port":62756,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00433{"flow_id":90,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":827,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104399,"pkt_ts_usec":959775,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"AQBeAAD8uKxv2MGbCABFAAA5S7YAAAERxyfAqAUy4AAA\/PUkFOsAJRvtK70AAAABAAAAAAAAC2NoYXJtaW5nLVBDAAD\/AAE="}
00517{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":827,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":90,"flow_packet_id":1,"flow_first_seen":1470104399959,"flow_last_seen":0,"flow_min_l4_payload_len":29,"flow_max_l4_payload_len":29,"flow_tot_l4_payload_len":29,"flow_avg_l4_payload_len":29,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.50","dst_ip":"224.0.0.252","src_port":62756,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}}
00582{"flow_id":6,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":828,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104399,"pkt_ts_usec":959814,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/6uKxv2MGbCABFAAClQRYAAAQRv13AqAUy7\/\/\/+vyiB2wAkVLKTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="}
00428{"flow_id":88,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":831,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104400,"pkt_ts_usec":59244,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":68,"pkt_l4_len":34,"pkt":"AQBeAAD8GF4PUugBCABFAAA2MRIAAAER4cfAqAU54AAA\/P5+FOsAIr4lNLsAAAABAAAAAAAACFVzaGVyLVBDAAD\/AAE="}
00431{"flow_id":86,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":832,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104400,"pkt_ts_usec":59395,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"AQBeAAD8bEAIlAI6CABFAAA4rMMAAAERZh3AqAUw4AAA\/OmVFOsAJO3eTL0AAAABAAAAAAAACkthc3Blci1tYWMAAP8AAQ=="}
00578{"flow_id":7,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":833,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104400,"pkt_ts_usec":59456,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6SNIkYwreCABFAAChfjEAAAERhU\/AqAUp7\/\/\/+tgQB2wAjcOhTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="}
00491{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":834,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":91,"flow_packet_id":1,"flow_first_seen":1470104400162,"flow_last_seen":0,"flow_min_l4_payload_len":520,"flow_max_l4_payload_len":520,"flow_tot_l4_payload_len":520,"flow_avg_l4_payload_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.49","dst_ip":"239.255.255.250","src_port":1900,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
01096{"flow_id":91,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":834,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104400,"pkt_ts_usec":162264,"pkt_caplen":562,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":562,"pkt_l4_len":528,"pkt":"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"}
00522{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":834,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":91,"flow_packet_id":1,"flow_first_seen":1470104400162,"flow_last_seen":0,"flow_min_l4_payload_len":520,"flow_max_l4_payload_len":520,"flow_tot_l4_payload_len":520,"flow_avg_l4_payload_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.49","dst_ip":"239.255.255.250","src_port":1900,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}}
00495{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":835,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":92,"flow_packet_id":1,"flow_first_seen":1470104400162,"flow_last_seen":0,"flow_min_l4_payload_len":528,"flow_max_l4_payload_len":528,"flow_tot_l4_payload_len":528,"flow_avg_l4_payload_len":528,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::9bd:81dd:2fdc:5750","dst_ip":"ff02::c","src_port":1900,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
01131{"flow_id":92,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":835,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104400,"pkt_ts_usec":162411,"pkt_caplen":590,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":590,"pkt_l4_len":536,"pkt":"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"}
00526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":835,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":92,"flow_packet_id":1,"flow_first_seen":1470104400162,"flow_last_seen":0,"flow_min_l4_payload_len":528,"flow_max_l4_payload_len":528,"flow_tot_l4_payload_len":528,"flow_avg_l4_payload_len":528,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::9bd:81dd:2fdc:5750","dst_ip":"ff02::c","src_port":1900,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}}
00578{"flow_id":2,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":838,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104400,"pkt_ts_usec":264969,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6GF4PUugBCABFAAChMRMAAAER0l3AqAU57\/\/\/+toBB2wAjcGgTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="}
00433{"flow_id":90,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":839,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104400,"pkt_ts_usec":366719,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"AQBeAAD8uKxv2MGbCABFAAA5S7cAAAERxybAqAUy4AAA\/PUkFOsAJRvtK70AAAABAAAAAAAAC2NoYXJtaW5nLVBDAAD\/AAE="}
01076{"flow_id":91,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":840,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104400,"pkt_ts_usec":366790,"pkt_caplen":548,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":548,"pkt_l4_len":514,"pkt":"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"}
01110{"flow_id":92,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":841,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104400,"pkt_ts_usec":366956,"pkt_caplen":576,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":576,"pkt_l4_len":522,"pkt":"MzMAAAAM6LH8q\/uyht1gAAAAAgoRBP6AAAAAAAAACb2B3S\/cV1D\/AgAAAAAAAAAAAAAAAAAMB2wHbAIKzRJOT1RJRlkgKiBIVFRQLzEuMQ0KSG9zdDogW0ZGMDI6OkNdOjE5MDANCk5UOiB1cm46c2NoZW1hcy11cG5wLW9yZzpzZXJ2aWNlOkNvbm5lY3Rpb25NYW5hZ2VyOjENCk5UUzogc3NkcDphbGl2ZQ0KTG9jYXRpb246IGh0dHA6Ly9bZmU4MDo6OWJkOjgxZGQ6MmZkYzo1NzUwXToyODY5L3VwbnBob3N0L3VkaGlzYXBpLmRsbD9jb250ZW50PXV1aWQ6OTMxOTM5NWEtNGQwMy00NzUwLWJiMWItNDY2MzkzM2FiODEyDQpVU046IHV1aWQ6OTMxOTM5NWEtNGQwMy00NzUwLWJiMWItNDY2MzkzM2FiODEyOjp1cm46c2NoZW1hcy11cG5wLW9yZzpzZXJ2aWNlOkNvbm5lY3Rpb25NYW5hZ2VyOjENCkNhY2hlLUNvbnRyb2w6IG1heC1hZ2U9OTAwDQpTZXJ2ZXI6IE1pY3Jvc29mdC1XaW5kb3dzLzEwLjAgVVBuUC8xLjAgVVBuUC1EZXZpY2UtSG9zdC8xLjANCk9QVDoiaHR0cDovL3NjaGVtYXMudXBucC5vcmcvdXBucC8xLzAvIjsgbnM9MDENCjAxLU5MUzogZDA3YjQzNWQyOTliNDE3ODRjYTNkMmFlMmI5NTk5NDgNCg0K"}
01073{"flow_id":91,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":844,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104400,"pkt_ts_usec":571720,"pkt_caplen":546,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":546,"pkt_l4_len":512,"pkt":"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"}
01110{"flow_id":92,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":845,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104400,"pkt_ts_usec":571911,"pkt_caplen":574,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":574,"pkt_l4_len":520,"pkt":"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"}
00583{"flow_id":82,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":847,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104400,"pkt_ts_usec":878902,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/6bEAIlAI6CABFAACl66AAAAERF9XAqAUw7\/\/\/+sIlB2wAkY1JTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="}
00495{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":848,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":93,"flow_packet_id":1,"flow_first_seen":1470104400983,"flow_last_seen":0,"flow_min_l4_payload_len":317,"flow_max_l4_payload_len":317,"flow_tot_l4_payload_len":317,"flow_avg_l4_payload_len":317,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.10.110","dst_ip":"255.255.255.255","src_port":60480,"dst_port":62976,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00835{"flow_id":93,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":848,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104400,"pkt_ts_usec":983874,"pkt_caplen":359,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":359,"pkt_l4_len":325,"pkt":"\/\/\/\/\/\/\/\/XNmY3fXzCABFAAFZAABAAEARbn7AqApu\/\/\/\/\/+xA9gABRTgx\/\/8AAKAAXNmY3fXzwKgKbgAAAgAnAUROUy0xMTAwLTA0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABOQVMAAAAAAAAAAAAAVVqvihgAAABVWsE9WwAAAFVasDEuMDJiMTAAEXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXNmY3fXzM0ExAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGRsaW5rLURERjVGMwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqApu\/\/8AAExBTjEAAAAAAAAAAAAAAAAAAAAAAAAAAAA="}
00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":851,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":94,"flow_packet_id":1,"flow_first_seen":1470104401187,"flow_last_seen":0,"flow_min_l4_payload_len":29,"flow_max_l4_payload_len":29,"flow_tot_l4_payload_len":29,"flow_avg_l4_payload_len":29,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.50","dst_ip":"224.0.0.252","src_port":50030,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00433{"flow_id":94,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":851,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104401,"pkt_ts_usec":187549,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"AQBeAAD8uKxv2MGbCABFAAA5S70AAAERxyDAqAUy4AAA\/MNuFOsAJYAi+T0AAAABAAAAAAAAC2NoYXJtaW5nLVBDAAD\/AAE="}
00517{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":851,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":94,"flow_packet_id":1,"flow_first_seen":1470104401187,"flow_last_seen":0,"flow_min_l4_payload_len":29,"flow_max_l4_payload_len":29,"flow_tot_l4_payload_len":29,"flow_avg_l4_payload_len":29,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.50","dst_ip":"224.0.0.252","src_port":50030,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}}
01057{"flow_id":91,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":853,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104401,"pkt_ts_usec":288363,"pkt_caplen":534,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":534,"pkt_l4_len":500,"pkt":"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"}
01094{"flow_id":92,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":854,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104401,"pkt_ts_usec":288517,"pkt_caplen":562,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":562,"pkt_l4_len":508,"pkt":"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"}
00808{"flow_id":78,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":861,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104401,"pkt_ts_usec":902520,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/vO57DLPeCABFAAFIg+0AAEAR9bgAAAAA\/\/\/\/\/wBEAEMBNDMlAQEGANPiBnoAAAAAAAAAAAAAAAAAAAAAAAAAALzuewyz3gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBOQIF3DwMZGhjcGNkLTUuNS42DBhhbmRyb2lkLWY3Y2EwZjU3MTI3MGM1MmQ3CQEhAwYPHDM6O\/8A"}
00490{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":862,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":95,"flow_packet_id":1,"flow_first_seen":1470104401904,"flow_last_seen":0,"flow_min_l4_payload_len":40,"flow_max_l4_payload_len":40,"flow_tot_l4_payload_len":40,"flow_avg_l4_payload_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"59.120.208.212","dst_ip":"255.255.255.255","src_port":32768,"dst_port":1947,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00460{"flow_id":95,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":862,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104401,"pkt_ts_usec":904977,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"\/\/\/\/\/\/\/\/ABNyFooyCABFAABEAABAAEARLl07eNDU\/\/\/\/\/4AAB5sAMADiZERZY1RjNFBBQUJQY0dWdVluUnpBSFZ0Ukc5c2IzSlRhWFJCYldVQQ=="}
00772{"flow_id":63,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":871,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104402,"pkt_ts_usec":198930,"pkt_caplen":323,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":323,"pkt_l4_len":289,"pkt":"TF4M6gNlYMVHBbyMCABFAAE1hLZAAEAGrOXAqAUQROn9hdF4AFAesUbCdjjwv4AYEAu4KQAAAQEIChoPahbPHh\/\/R0VUIC9jb21NYWdpY2FuQXBpL2luZGV4LnBocC9Ub29sQm94L3ZlcnNpb24gSFRUUC8xLjENCkhvc3Q6IGFwaS5tYWdpY2Fuc29mdC5jb20NCkFjY2VwdDogKi8qDQpBY2NlcHQtTGFuZ3VhZ2U6IHpoLXR3DQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXAsIGRlZmxhdGUNClVzZXItQWdlbnQ6IE1hZ2ljYW4gKHVua25vd24gdmVyc2lvbikgQ0ZOZXR3b3JrLzcyMC41LjcgRGFyd2luLzE0LjUuMCAoeDg2XzY0KQ0KDQo="}
00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":872,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":96,"flow_packet_id":1,"flow_first_seen":1470104402238,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"192.168.115.75","src_port":53625,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00442{"flow_id":96,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":872,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104402,"pkt_ts_usec":238628,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"ABAj4ACgYMVHBbyMCABFAABAGihAAEAGJuTAqAUQwKhzS9F5AbtwBJ91AAAAALAC\/\/\/WVQAAAgQFtAEDAwUBAQgKGg9qPQAAAAAEAgAA"}
00423{"flow_id":96,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":873,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104402,"pkt_ts_usec":239704,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABxCjnAxABAj4ACgCABFAAA0AABAAEAGQRjAqHNLwKgFEAG70XnKmfzXcASfdoASFtC0YwAAAgQFtAEBBAIBAwMH"}
00415{"flow_id":96,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":874,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104402,"pkt_ts_usec":239746,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABAj4ACgYMVHBbyMCABFAAAosclAAEAGj1rAqAUQwKhzS9F5AbtwBJ92ypn82FAQIADsBQAAyQ4pxaWW"}
00696{"flow_id":96,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":875,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104402,"pkt_ts_usec":240297,"pkt_caplen":267,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":267,"pkt_l4_len":233,"pkt":"ABAj4ACgYMVHBbyMCABFAAD9ruNAAEAGkWvAqAUQwKhzS9F5AbtwBJ92ypn82FAYIADtEAAAFgMBANABAADMAwNXoANTJYxftKgXimtNLVWTzYxskkMb8dtmAzVqLh4pryBj+Q0TSc5VhLmmiAAqPOtufQBM8Qziz0QZmZNFeVk8eABKAP\/AJMAjwArACcAIwCjAJ8AUwBPAEsAmwCXABcAEwAPAKsApwA\/ADsANAGsAZwA5ADMAFgA9ADwANQAvAArAB8ARwALADAAFAAQBAAA5AAAAEwARAAAOMTkyLjE2OC4xMTUuNzUACgAIAAYAFwAYABkACwACAQAADQAMAAoFAQQBAgEEAwID"}
00757{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":875,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":96,"flow_packet_id":4,"flow_first_seen":1470104402238,"flow_last_seen":1470104402240,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":213,"flow_tot_l4_payload_len":213,"flow_avg_l4_payload_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"192.168.115.75","src_port":53625,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"192.168.115.75","ja3":"618ee2509ef52bf0b8216e1564eea909","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
00415{"flow_id":96,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":876,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104402,"pkt_ts_usec":241217,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABxCjnAxABAj4ACgCABFAAAofPZAAEAGxC3AqHNLwKgFEAG70XnKmfzYcASgS1AQADYK+wAAAAAAAAAA"}
00630{"flow_id":96,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":877,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104402,"pkt_ts_usec":243893,"pkt_caplen":215,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":215,"pkt_l4_len":181,"pkt":"ABxCjnAxABAj4ACgCABFAADJfPdAAEAGw4vAqHNLwKgFEAG70XnKmfzYcASgS1AYADbicAAAFgMDAFECAABNAwN7H4yPHjLYw\/e9aBqw+\/vV2u50xsHUyfu8US38EyE+VyBj+Q0TSc5VhLmmiAAqPOtufQBM8Qziz0QZmZNFeVk8eAAvAAAF\/wEAAQAUAwMAAQEWAwMAQJPGwpXm49Wpwm5+RRNIxmh0PMa1TfmfP4GkpjQdMkON0UW5xEoBecyOhOQdSe0vc5PC\/LsmCtxUJlkP4zkaysY="}
00824{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":877,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":96,"flow_packet_id":6,"flow_first_seen":1470104402238,"flow_last_seen":1470104402243,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":213,"flow_tot_l4_payload_len":374,"flow_avg_l4_payload_len":62,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"192.168.115.75","src_port":53625,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"8":"Weak TLS cipher","15":"TLS (probably) not carrying HTTPS"},"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"192.168.115.75","ja3":"618ee2509ef52bf0b8216e1564eea909","ja3s":"573a9f3f80037fb40d481e2054def5bb","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA"}}
00416{"flow_id":96,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":878,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104402,"pkt_ts_usec":243923,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABAj4ACgYMVHBbyMCABFAAAoHZZAAEAGI47AqAUQwKhzS9F5AbtwBKBLypn9eVAQH\/rqlQAAWvP2rXCB"}
00415{"flow_id":96,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":879,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104402,"pkt_ts_usec":244101,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"ABAj4ACgYMVHBbyMCABFAAAuBZhAAEAGO4bAqAUQwKhzS9F5AbtwBKBLypn9eVAYIADSfQAAFAMDAAEB"}
00501{"flow_id":96,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":880,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104402,"pkt_ts_usec":244129,"pkt_caplen":123,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":123,"pkt_l4_len":89,"pkt":"ABAj4ACgYMVHBbyMCABFAABtWB1AAEAG6MHAqAUQwKhzS9F5AbtwBKBRypn9eVAYIACxqgAAFgMDAED8EEpWqJk4r6WtGIr5vsgJsNnUnmvrFtYoejYQeOu8kyDFXZMIixibwwXGCt9sigWwD0DjmEGXkF2UN2M7Ecgb"}
00416{"flow_id":96,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":881,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104402,"pkt_ts_usec":246502,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABxCjnAxABAj4ACgCABFAAAofPhAAEAGxCvAqHNLwKgFEAG70XnKmf15cASgllAQADYKDwAAAAAAAAAA"}
01790{"flow_id":96,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":882,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104402,"pkt_ts_usec":286260,"pkt_caplen":1067,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1067,"pkt_l4_len":1033,"pkt":"ABAj4ACgYMVHBbyMCABFAAQdpDtAAEAGmPPAqAUQwKhzS9F5AbtwBKCWypn9eVAYIACVpwAAFwMDA\/B6BgcjP2PVKZQtz8MJhne7YIP24L3UojYgYZS42z7GWQaO4tllBR9ED168aNnSy435kT+WUEY53rq0MCIT8ePGss1ZcevnOMUI8gYtDpEPHZ1hL\/1\/mlTYvtxf8SQyDvnDre1HirzJJdNgjbfiNk8E9FAZtRrooy7f3k7grJFdGbmPA8X1Nvl\/M6vpnJ\/HdRjRsHdDQGMJJ7M31UTQat9KFMbgGgyh5SGmtzojqNVtCP4xeFhr\/qJqGf7zFm2Gtil69B5Sgi8jk6qRHJNQ5VvvYUB+g\/T\/jlD1dBguoBBmnhl8Bwi72cpdKhS8dTKadpwmoBi1vcICDt0NoSGNO\/0jX+UaM4VDCppq8j6Ad\/IVwh9ozmpyLJej6Mp3nGP+mCoudJhCSFS+2Pid7BejnI3r\/HP1KKv\/67NNexhfhx80zBvNH38Ni+QMOsVeqNaSNF1EHBkCqB2zYcDSDlXYKgDV\/Bdut9kKelbFIDQTR+jT7NkEWnxAb2OsMQitHdhIY7oir0akgd6rbQee8HvkUiJ7Cpepnju638XyIn1amDptSbDccuL7jojyQyYucwup8LcBzZGAzVPw26NU1e1WsdzohtzeGNz648GjvKrJrpQXQ05LcHDbMSr5NbmicGRAOsGrfgs3IMZ8nGMKwLqMJ4bFCJK1OHZzasrkR9UkqVUb395LzsjoZsTmK2JGZiSYKMYwHPzSJO+lvpAEdSkOVDw1cADDNhOTFCrSLgbB6fW5\/\/VFaVpCclafI9LgU4lqSswaVJvg9CmwE6h1b7BD7IhdS7HloDHvDC0ZqFG7i20FzwNdaTj3xz+aARRceSpArtfGgJnNNXubN\/SiT0HolGNwODw6HCX0DGo3RoJ0DjxpffZNUNgvu9a7wOwIg0TpUWNNHGDec60JLnwIDl9DkQmaEdLm6+z7FvGezvZTfhvOnaT6vATzB3IzJ6s6RIgPLPkK6vdK\/yFtpZ4qyYhM2i+TSB9BGoQQk1pqSr6E55BE+ILdIoqNj4v6SV+TByr3XyEXpdDsiHFpG3eFKaEOkxiq2lz4D1xN4bVRFQZkA0\/ondE0RRpdohNDR4rLQFFHQsab6Gns5vjb2yFn0JR8SFr8ttWiWTqFrucIH6fqB0QiNH\/vr3itLW2NJmiRrCDpgc6PUDNoAprvNwjuD+jxa7dgYQv5dhXN\/BdOerhCT0E60hoaeexCAfo89vHQnN0YQzVzHkjckzb9WMCr3N9+O8iBOWav\/uXxq2v7U9DyA5QzrXCZ4RfuIgrviGbwW64haBRon7m\/X3CYzGoorOYBG8EcFfTrG\/tKAEfspgbEX\/+0+HpD9J0xDr3dkBpuHfUSW48="}
01771{"flow_id":96,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":883,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104402,"pkt_ts_usec":321439,"pkt_caplen":1055,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1055,"pkt_l4_len":1021,"pkt":"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"}
00416{"flow_id":96,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":884,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104402,"pkt_ts_usec":321490,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABAj4ACgYMVHBbyMCABFAAAo7r1AAEAGUmbAqAUQwKhzS9F5AbtwBKSLypoBYlAQH+DihgAAtolxFcMt"}
00859{"flow_id":63,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":885,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104402,"pkt_ts_usec":398464,"pkt_caplen":390,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":390,"pkt_l4_len":356,"pkt":"ABxCjnAxTF4M6gNlCABFAAF48IhAADUGS9BE6f2FwKgFEABQ0Xh2OPC\/HrFHw4AYAB8klwAAAQEICs8eTSUaD2oWSFRUUC8xLjEgNTAyIEJhZCBHYXRld2F5DQpTZXJ2ZXI6IE1TZXJ2ZXIgMS4yLjINCkRhdGU6IFR1ZSwgMDIgQXVnIDIwMTYgMDE6NTg6NDYgR01UDQpDb250ZW50LVR5cGU6IHRleHQvaHRtbA0KQ29udGVudC1MZW5ndGg6IDE2Ng0KQ29ubmVjdGlvbjoga2VlcC1hbGl2ZQ0KDQo8aHRtbD4NCjxoZWFkPjx0aXRsZT41MDIgQmFkIEdhdGV3YXk8L3RpdGxlPjwvaGVhZD4NCjxib2R5IGJnY29sb3I9IndoaXRlIj4NCjxjZW50ZXI+PGgxPjUwMiBCYWQgR2F0ZXdheTwvaDE+PC9jZW50ZXI+DQo8aHI+PGNlbnRlcj5uZ2lueDwvY2VudGVyPg0KPC9ib2R5Pg0KPC9odG1sPg0K"}
00424{"flow_id":63,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":886,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104402,"pkt_ts_usec":398523,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlYMVHBbyMCABFAAA015FAAEAGWwvAqAUQROn9hdF4AFAesUfDdjjyA4AQEAEc7wAAAQEIChoPatnPHk0l"}
00493{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":887,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":97,"flow_packet_id":1,"flow_first_seen":1470104402518,"flow_last_seen":0,"flow_min_l4_payload_len":135,"flow_max_l4_payload_len":135,"flow_tot_l4_payload_len":135,"flow_avg_l4_payload_len":135,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.119.1","dst_ip":"255.255.255.255","src_port":56861,"dst_port":5678,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00588{"flow_id":97,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":887,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104402,"pkt_ts_usec":518151,"pkt_caplen":177,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":177,"pkt_l4_len":143,"pkt":"\/\/\/\/\/\/\/\/TF4M6gNlCABFAACjAABAAEARAqHAqHcB\/\/\/\/\/94dFi4Aj\/bjAAFSEAABAAZMXgzqA2UABQAHMzAwTU5BVAAHAA82LjM1LjEgKHN0YWJsZSkACAAITWlrcm9UaWsACgAEf5YkAAALAAlBWFJKLVg2U0cADAAGUkI0NTBHAA4AAQEADwAQIAGwMAIUAQAAAAAAAAAAAQAQABNldGhlcjItbWFzdGVyLWxvY2Fs"}
00494{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":888,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":98,"flow_packet_id":1,"flow_first_seen":1470104402518,"flow_last_seen":0,"flow_min_l4_payload_len":135,"flow_max_l4_payload_len":135,"flow_tot_l4_payload_len":135,"flow_avg_l4_payload_len":135,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::4e5e:cff:feea:365","dst_ip":"ff02::1","src_port":5678,"dst_port":5678,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00607{"flow_id":98,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":888,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104402,"pkt_ts_usec":518258,"pkt_caplen":197,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":197,"pkt_l4_len":143,"pkt":"MzMAAAABTF4M6gNlht1gAAAAAI8RAf6AAAAAAAAATl4M\/\/7qA2X\/AgAAAAAAAAAAAAAAAAABFi4WLgCPm0oAAVIRAAEABkxeDOoDZQAFAAczMDBNTkFUAAcADzYuMzUuMSAoc3RhYmxlKQAIAAhNaWtyb1RpawAKAAR\/liQAAAsACUFYUkotWDZTRwAMAAZSQjQ1MEcADgABAQAPABAgAbAwAhQBAAAAAAAAAAABABAAE2V0aGVyMi1tYXN0ZXItbG9jYWw="}
01001{"flow_id":91,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":889,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104402,"pkt_ts_usec":518736,"pkt_caplen":491,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":491,"pkt_l4_len":457,"pkt":"AQBef\/\/66LH8q\/uyCABFAAHdCfUAAAQR9UfAqAUx7\/\/\/+gdsB2wByURxTk9USUZZICogSFRUUC8xLjENCkhvc3Q6IDIzOS4yNTUuMjU1LjI1MDoxOTAwDQpOVDogdXVpZDo5MzE5Mzk1YS00ZDAzLTQ3NTAtYmIxYi00NjYzOTMzYWI4MTINCk5UUzogc3NkcDphbGl2ZQ0KTG9jYXRpb246IGh0dHA6Ly8xOTIuMTY4LjUuNDk6Mjg2OS91cG5waG9zdC91ZGhpc2FwaS5kbGw\/Y29udGVudD11dWlkOjkzMTkzOTVhLTRkMDMtNDc1MC1iYjFiLTQ2NjM5MzNhYjgxMg0KVVNOOiB1dWlkOjkzMTkzOTVhLTRkMDMtNDc1MC1iYjFiLTQ2NjM5MzNhYjgxMg0KQ2FjaGUtQ29udHJvbDogbWF4LWFnZT05MDANClNlcnZlcjogTWljcm9zb2Z0LVdpbmRvd3MvMTAuMCBVUG5QLzEuMCBVUG5QLURldmljZS1Ib3N0LzEuMA0KT1BUOiJodHRwOi8vc2NoZW1hcy51cG5wLm9yZy91cG5wLzEvMC8iOyBucz0wMQ0KMDEtTkxTOiBkMDdiNDM1ZDI5OWI0MTc4NGNhM2QyYWUyYjk1OTk0OA0KDQo="}
01034{"flow_id":92,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":890,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104402,"pkt_ts_usec":518845,"pkt_caplen":519,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":519,"pkt_l4_len":465,"pkt":"MzMAAAAM6LH8q\/uyht1gAAAAAdERBP6AAAAAAAAACb2B3S\/cV1D\/AgAAAAAAAAAAAAAAAAAMB2wHbAHR82ROT1RJRlkgKiBIVFRQLzEuMQ0KSG9zdDogW0ZGMDI6OkNdOjE5MDANCk5UOiB1dWlkOjkzMTkzOTVhLTRkMDMtNDc1MC1iYjFiLTQ2NjM5MzNhYjgxMg0KTlRTOiBzc2RwOmFsaXZlDQpMb2NhdGlvbjogaHR0cDovL1tmZTgwOjo5YmQ6ODFkZDoyZmRjOjU3NTBdOjI4NjkvdXBucGhvc3QvdWRoaXNhcGkuZGxsP2NvbnRlbnQ9dXVpZDo5MzE5Mzk1YS00ZDAzLTQ3NTAtYmIxYi00NjYzOTMzYWI4MTINClVTTjogdXVpZDo5MzE5Mzk1YS00ZDAzLTQ3NTAtYmIxYi00NjYzOTMzYWI4MTINCkNhY2hlLUNvbnRyb2w6IG1heC1hZ2U9OTAwDQpTZXJ2ZXI6IE1pY3Jvc29mdC1XaW5kb3dzLzEwLjAgVVBuUC8xLjAgVVBuUC1EZXZpY2UtSG9zdC8xLjANCk9QVDoiaHR0cDovL3NjaGVtYXMudXBucC5vcmcvdXBucC8xLzAvIjsgbnM9MDENCjAxLU5MUzogZDA3YjQzNWQyOTliNDE3ODRjYTNkMmFlMmI5NTk5NDgNCg0K"}
00495{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":891,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":99,"flow_packet_id":1,"flow_first_seen":1470104402624,"flow_last_seen":0,"flow_min_l4_payload_len":27,"flow_max_l4_payload_len":27,"flow_tot_l4_payload_len":27,"flow_avg_l4_payload_len":27,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::5d92:62a8:ebde:1319","dst_ip":"ff02::1:3","src_port":49735,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00458{"flow_id":99,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":891,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104402,"pkt_ts_usec":624102,"pkt_caplen":89,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":89,"pkt_l4_len":35,"pkt":"MzMAAQADPKn0WgOEht1gAAAAACMRAf6AAAAAAAAAXZJiqOveExn\/AgAAAAAAAAAAAAAAAQADwkcU6wAjpJ6zfgAAAAEAAAAAAAAJV0FOR1MtTFRXAAD\/AAE="}
00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":891,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":99,"flow_packet_id":1,"flow_first_seen":1470104402624,"flow_last_seen":0,"flow_min_l4_payload_len":27,"flow_max_l4_payload_len":27,"flow_tot_l4_payload_len":27,"flow_avg_l4_payload_len":27,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::5d92:62a8:ebde:1319","dst_ip":"ff02::1:3","src_port":49735,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}}
00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":892,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":100,"flow_packet_id":1,"flow_first_seen":1470104402624,"flow_last_seen":0,"flow_min_l4_payload_len":27,"flow_max_l4_payload_len":27,"flow_tot_l4_payload_len":27,"flow_avg_l4_payload_len":27,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.236","dst_ip":"224.0.0.252","src_port":62069,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00430{"flow_id":100,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":892,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104402,"pkt_ts_usec":624153,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"AQBeAAD8PKn0WgOECABFAAA3H1kAAAER9MzAqAPs4AAA\/PJ1FOsAI4uZs34AAAABAAAAAAAACVdBTkdTLUxUVwAA\/wAB"}
00519{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":892,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":100,"flow_packet_id":1,"flow_first_seen":1470104402624,"flow_last_seen":0,"flow_min_l4_payload_len":27,"flow_max_l4_payload_len":27,"flow_tot_l4_payload_len":27,"flow_avg_l4_payload_len":27,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.236","dst_ip":"224.0.0.252","src_port":62069,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}}
00583{"flow_id":82,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":893,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104402,"pkt_ts_usec":624418,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/6bEAIlAI6CABFAACl1ocAAAERLO7AqAUw7\/\/\/+sIlB2wAkY1JTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="}
00458{"flow_id":99,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":894,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104402,"pkt_ts_usec":724346,"pkt_caplen":89,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":89,"pkt_l4_len":35,"pkt":"MzMAAQADPKn0WgOEht1gAAAAACMRAf6AAAAAAAAAXZJiqOveExn\/AgAAAAAAAAAAAAAAAQADwkcU6wAjpJ6zfgAAAAEAAAAAAAAJV0FOR1MtTFRXAAD\/AAE="}
00430{"flow_id":100,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":895,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104402,"pkt_ts_usec":724804,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"AQBeAAD8PKn0WgOECABFAAA3H1wAAAER9MnAqAPs4AAA\/PJ1FOsAI4uZs34AAAABAAAAAAAACVdBTkdTLUxUVwAA\/wAB"}
00581{"flow_id":6,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":899,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104403,"pkt_ts_usec":29310,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/6uKxv2MGbCABFAAClQRcAAAQRv1zAqAUy7\/\/\/+vyiB2wAkVLKTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="}
00988{"flow_id":91,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":900,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104403,"pkt_ts_usec":29533,"pkt_caplen":482,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":482,"pkt_l4_len":448,"pkt":"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"}
01021{"flow_id":92,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":901,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104403,"pkt_ts_usec":29586,"pkt_caplen":510,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":510,"pkt_l4_len":456,"pkt":"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"}
00808{"flow_id":4,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":902,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104403,"pkt_ts_usec":29748,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/TF4M6gNlCABFAAFIAAAAABARcfzAqHcB\/\/\/\/\/wBDAEQBNH4fAgEGAEL4Gb0AAAAAwKgFLMCoBSzAqHcBAAAAAEjSJGMxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEFNgTAqHcBMwQAAAA8AQT\/\/wAAAwTAqHcBBhCoXwEBCAgICKhfwAEICAQE\/wAAAAAAAAAAAAAAAAAA"}
00577{"flow_id":7,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":903,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104403,"pkt_ts_usec":29956,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6SNIkYwreCABFAAChfjIAAAERhU7AqAUp7\/\/\/+tgQB2wAjcOhTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="}
00504{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":904,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":85,"flow_packet_id":1,"flow_first_seen":1470104398932,"flow_last_seen":0,"flow_min_l4_payload_len":40,"flow_max_l4_payload_len":40,"flow_tot_l4_payload_len":40,"flow_avg_l4_payload_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.186","dst_ip":"255.255.255.255","src_port":32768,"dst_port":1947,"l4_proto":"udp","ndpi": {"proto":"Unknown","breed":"Unrated"}}
00490{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":904,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":85,"flow_packet_id":1,"flow_first_seen":1470104398932,"flow_last_seen":0,"flow_min_l4_payload_len":40,"flow_max_l4_payload_len":40,"flow_tot_l4_payload_len":40,"flow_avg_l4_payload_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.186","dst_ip":"255.255.255.255","src_port":32768,"dst_port":1947,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":904,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":81,"flow_packet_id":1,"flow_first_seen":1470104397091,"flow_last_seen":0,"flow_min_l4_payload_len":300,"flow_max_l4_payload_len":300,"flow_tot_l4_payload_len":300,"flow_avg_l4_payload_len":300,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.9","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":904,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":94,"flow_packet_id":1,"flow_first_seen":1470104401187,"flow_last_seen":0,"flow_min_l4_payload_len":29,"flow_max_l4_payload_len":29,"flow_tot_l4_payload_len":29,"flow_avg_l4_payload_len":29,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.50","dst_ip":"224.0.0.252","src_port":50030,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":904,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":74,"flow_packet_id":1,"flow_first_seen":1470104393610,"flow_last_seen":0,"flow_min_l4_payload_len":50,"flow_max_l4_payload_len":50,"flow_tot_l4_payload_len":50,"flow_avg_l4_payload_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.45","dst_ip":"192.168.255.255","src_port":59461,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00495{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":904,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":89,"flow_packet_id":1,"flow_first_seen":1470104399959,"flow_last_seen":0,"flow_min_l4_payload_len":29,"flow_max_l4_payload_len":29,"flow_tot_l4_payload_len":29,"flow_avg_l4_payload_len":29,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::e034:7be:d8f9:6197","dst_ip":"ff02::1:3","src_port":62756,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00510{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":904,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":93,"flow_packet_id":1,"flow_first_seen":1470104400983,"flow_last_seen":0,"flow_min_l4_payload_len":317,"flow_max_l4_payload_len":317,"flow_tot_l4_payload_len":317,"flow_avg_l4_payload_len":317,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.10.110","dst_ip":"255.255.255.255","src_port":60480,"dst_port":62976,"l4_proto":"udp","ndpi": {"proto":"Unknown","breed":"Unrated"}}
00496{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":904,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":93,"flow_packet_id":1,"flow_first_seen":1470104400983,"flow_last_seen":0,"flow_min_l4_payload_len":317,"flow_max_l4_payload_len":317,"flow_tot_l4_payload_len":317,"flow_avg_l4_payload_len":317,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.10.110","dst_ip":"255.255.255.255","src_port":60480,"dst_port":62976,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":904,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":84,"flow_packet_id":1,"flow_first_seen":1470104398832,"flow_last_seen":0,"flow_min_l4_payload_len":40,"flow_max_l4_payload_len":40,"flow_tot_l4_payload_len":40,"flow_avg_l4_payload_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.64","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00519{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":904,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":83,"flow_packet_id":1,"flow_first_seen":1470104398314,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"68.233.253.133","src_port":53605,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}}
00481{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":904,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":83,"flow_packet_id":1,"flow_first_seen":1470104398314,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"68.233.253.133","src_port":53605,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00508{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":904,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":77,"flow_packet_id":1,"flow_first_seen":1470104395656,"flow_last_seen":0,"flow_min_l4_payload_len":317,"flow_max_l4_payload_len":317,"flow_tot_l4_payload_len":317,"flow_avg_l4_payload_len":317,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.10.7","dst_ip":"255.255.255.255","src_port":62976,"dst_port":62976,"l4_proto":"udp","ndpi": {"proto":"Unknown","breed":"Unrated"}}
00494{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":904,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":77,"flow_packet_id":1,"flow_first_seen":1470104395656,"flow_last_seen":0,"flow_min_l4_payload_len":317,"flow_max_l4_payload_len":317,"flow_tot_l4_payload_len":317,"flow_avg_l4_payload_len":317,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.10.7","dst_ip":"255.255.255.255","src_port":62976,"dst_port":62976,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00508{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":904,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":97,"flow_packet_id":1,"flow_first_seen":1470104402518,"flow_last_seen":0,"flow_min_l4_payload_len":135,"flow_max_l4_payload_len":135,"flow_tot_l4_payload_len":135,"flow_avg_l4_payload_len":135,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.119.1","dst_ip":"255.255.255.255","src_port":56861,"dst_port":5678,"l4_proto":"udp","ndpi": {"proto":"Unknown","breed":"Unrated"}}
00494{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":904,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":97,"flow_packet_id":1,"flow_first_seen":1470104402518,"flow_last_seen":0,"flow_min_l4_payload_len":135,"flow_max_l4_payload_len":135,"flow_tot_l4_payload_len":135,"flow_avg_l4_payload_len":135,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.119.1","dst_ip":"255.255.255.255","src_port":56861,"dst_port":5678,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00508{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":904,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":87,"flow_packet_id":1,"flow_first_seen":1470104399854,"flow_last_seen":0,"flow_min_l4_payload_len":100,"flow_max_l4_payload_len":100,"flow_tot_l4_payload_len":100,"flow_avg_l4_payload_len":100,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.100","dst_ip":"255.255.255.255","src_port":50925,"dst_port":5678,"l4_proto":"udp","ndpi": {"proto":"Unknown","breed":"Unrated"}}
00494{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":904,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":87,"flow_packet_id":1,"flow_first_seen":1470104399854,"flow_last_seen":0,"flow_min_l4_payload_len":100,"flow_max_l4_payload_len":100,"flow_tot_l4_payload_len":100,"flow_avg_l4_payload_len":100,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.100","dst_ip":"255.255.255.255","src_port":50925,"dst_port":5678,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00509{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":904,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":98,"flow_packet_id":1,"flow_first_seen":1470104402518,"flow_last_seen":0,"flow_min_l4_payload_len":135,"flow_max_l4_payload_len":135,"flow_tot_l4_payload_len":135,"flow_avg_l4_payload_len":135,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::4e5e:cff:feea:365","dst_ip":"ff02::1","src_port":5678,"dst_port":5678,"l4_proto":"udp","ndpi": {"proto":"Unknown","breed":"Unrated"}}
00495{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":904,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":98,"flow_packet_id":1,"flow_first_seen":1470104402518,"flow_last_seen":0,"flow_min_l4_payload_len":135,"flow_max_l4_payload_len":135,"flow_tot_l4_payload_len":135,"flow_avg_l4_payload_len":135,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::4e5e:cff:feea:365","dst_ip":"ff02::1","src_port":5678,"dst_port":5678,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00505{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":904,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":95,"flow_packet_id":1,"flow_first_seen":1470104401904,"flow_last_seen":0,"flow_min_l4_payload_len":40,"flow_max_l4_payload_len":40,"flow_tot_l4_payload_len":40,"flow_avg_l4_payload_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"59.120.208.212","dst_ip":"255.255.255.255","src_port":32768,"dst_port":1947,"l4_proto":"udp","ndpi": {"proto":"Unknown","breed":"Unrated"}}
00491{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":904,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":95,"flow_packet_id":1,"flow_first_seen":1470104401904,"flow_last_seen":0,"flow_min_l4_payload_len":40,"flow_max_l4_payload_len":40,"flow_tot_l4_payload_len":40,"flow_avg_l4_payload_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"59.120.208.212","dst_ip":"255.255.255.255","src_port":32768,"dst_port":1947,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":904,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":101,"flow_packet_id":1,"flow_first_seen":1470104403134,"flow_last_seen":0,"flow_min_l4_payload_len":26,"flow_max_l4_payload_len":26,"flow_tot_l4_payload_len":26,"flow_avg_l4_payload_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.44","dst_ip":"224.0.0.252","src_port":58702,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00430{"flow_id":101,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":904,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104403,"pkt_ts_usec":134617,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":68,"pkt_l4_len":34,"pkt":"AQBeAAD8SNIkYzEACABFAAA2Ow0AAAER19nAqAUs4AAA\/OVOFOsAIo78hQUAAAABAAAAAAAACGphc29uLVBDAAD\/AAE="}
00518{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":904,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":101,"flow_packet_id":1,"flow_first_seen":1470104403134,"flow_last_seen":0,"flow_min_l4_payload_len":26,"flow_max_l4_payload_len":26,"flow_tot_l4_payload_len":26,"flow_avg_l4_payload_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.44","dst_ip":"224.0.0.252","src_port":58702,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}}
01096{"flow_id":91,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":905,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104403,"pkt_ts_usec":137697,"pkt_caplen":562,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":562,"pkt_l4_len":528,"pkt":"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"}
01131{"flow_id":92,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":906,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104403,"pkt_ts_usec":137870,"pkt_caplen":590,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":590,"pkt_l4_len":536,"pkt":"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"}
00430{"flow_id":101,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":908,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104403,"pkt_ts_usec":234152,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":68,"pkt_l4_len":34,"pkt":"AQBeAAD8SNIkYzEACABFAAA2Ow8AAAER19fAqAUs4AAA\/OVOFOsAIo78hQUAAAABAAAAAAAACGphc29uLVBDAAD\/AAE="}
00579{"flow_id":2,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":909,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104403,"pkt_ts_usec":234226,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6GF4PUugBCABFAAChMRUAAAER0lvAqAU57\/\/\/+toBB2wAjcGgTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="}
00578{"flow_id":3,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":910,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104403,"pkt_ts_usec":341213,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6SNIkYzEACABFAAChOxIAAAERyGvAqAUs7\/\/\/+si9B2wAjdLxTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="}
01076{"flow_id":91,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":913,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104403,"pkt_ts_usec":438825,"pkt_caplen":548,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":548,"pkt_l4_len":514,"pkt":"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"}
01110{"flow_id":92,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":914,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104403,"pkt_ts_usec":438989,"pkt_caplen":576,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":576,"pkt_l4_len":522,"pkt":"MzMAAAAM6LH8q\/uyht1gAAAAAgoRBP6AAAAAAAAACb2B3S\/cV1D\/AgAAAAAAAAAAAAAAAAAMB2wHbAIKzRJOT1RJRlkgKiBIVFRQLzEuMQ0KSG9zdDogW0ZGMDI6OkNdOjE5MDANCk5UOiB1cm46c2NoZW1hcy11cG5wLW9yZzpzZXJ2aWNlOkNvbm5lY3Rpb25NYW5hZ2VyOjENCk5UUzogc3NkcDphbGl2ZQ0KTG9jYXRpb246IGh0dHA6Ly9bZmU4MDo6OWJkOjgxZGQ6MmZkYzo1NzUwXToyODY5L3VwbnBob3N0L3VkaGlzYXBpLmRsbD9jb250ZW50PXV1aWQ6OTMxOTM5NWEtNGQwMy00NzUwLWJiMWItNDY2MzkzM2FiODEyDQpVU046IHV1aWQ6OTMxOTM5NWEtNGQwMy00NzUwLWJiMWItNDY2MzkzM2FiODEyOjp1cm46c2NoZW1hcy11cG5wLW9yZzpzZXJ2aWNlOkNvbm5lY3Rpb25NYW5hZ2VyOjENCkNhY2hlLUNvbnRyb2w6IG1heC1hZ2U9OTAwDQpTZXJ2ZXI6IE1pY3Jvc29mdC1XaW5kb3dzLzEwLjAgVVBuUC8xLjAgVVBuUC1EZXZpY2UtSG9zdC8xLjANCk9QVDoiaHR0cDovL3NjaGVtYXMudXBucC5vcmcvdXBucC8xLzAvIjsgbnM9MDENCjAxLU5MUzogZDA3YjQzNWQyOTliNDE3ODRjYTNkMmFlMmI5NTk5NDgNCg0K"}
01073{"flow_id":91,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":916,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104403,"pkt_ts_usec":541779,"pkt_caplen":546,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":546,"pkt_l4_len":512,"pkt":"AQBef\/\/66LH8q\/uyCABFAAIUCfkAAAQR9QzAqAUx7\/\/\/+gdsB2wCAPPDTk9USUZZICogSFRUUC8xLjENCkhvc3Q6IDIzOS4yNTUuMjU1LjI1MDoxOTAwDQpOVDogdXJuOnNjaGVtYXMtdXBucC1vcmc6c2VydmljZTpDb250ZW50RGlyZWN0b3J5OjENCk5UUzogc3NkcDphbGl2ZQ0KTG9jYXRpb246IGh0dHA6Ly8xOTIuMTY4LjUuNDk6Mjg2OS91cG5waG9zdC91ZGhpc2FwaS5kbGw\/Y29udGVudD11dWlkOjkzMTkzOTVhLTRkMDMtNDc1MC1iYjFiLTQ2NjM5MzNhYjgxMg0KVVNOOiB1dWlkOjkzMTkzOTVhLTRkMDMtNDc1MC1iYjFiLTQ2NjM5MzNhYjgxMjo6dXJuOnNjaGVtYXMtdXBucC1vcmc6c2VydmljZTpDb250ZW50RGlyZWN0b3J5OjENCkNhY2hlLUNvbnRyb2w6IG1heC1hZ2U9OTAwDQpTZXJ2ZXI6IE1pY3Jvc29mdC1XaW5kb3dzLzEwLjAgVVBuUC8xLjAgVVBuUC1EZXZpY2UtSG9zdC8xLjANCk9QVDoiaHR0cDovL3NjaGVtYXMudXBucC5vcmcvdXBucC8xLzAvIjsgbnM9MDENCjAxLU5MUzogZDA3YjQzNWQyOTliNDE3ODRjYTNkMmFlMmI5NTk5NDgNCg0K"}
01110{"flow_id":92,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":917,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104403,"pkt_ts_usec":542057,"pkt_caplen":574,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":574,"pkt_l4_len":520,"pkt":"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"}
00808{"flow_id":4,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":920,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104403,"pkt_ts_usec":746144,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/TF4M6gNlCABFAAFIAAAAABARcfzAqHcB\/\/\/\/\/wBDAEQBNJZXAgEGAHs0dBEAAIAAwKgFJMCoBSTAqHcBAAAAAAAmWsJjVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEFNgTAqHcBMwQAAAA8AQT\/\/wAAAwTAqHcBBhCoXwEBCAgICKhfwAEICAQEKgioX8MMe8wtdP8AAAAA"}
00583{"flow_id":82,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":922,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104403,"pkt_ts_usec":852168,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/6bEAIlAI6CABFAAClDVwAAAER9hnAqAUw7\/\/\/+sIlB2wAkY1JTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="}
00493{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":925,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":102,"flow_packet_id":1,"flow_first_seen":1470104404055,"flow_last_seen":0,"flow_min_l4_payload_len":36,"flow_max_l4_payload_len":36,"flow_tot_l4_payload_len":36,"flow_avg_l4_payload_len":36,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::beee:7bff:fe0c:b3de","dst_ip":"ff02::1:2","src_port":546,"dst_port":547,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00471{"flow_id":102,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":925,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104404,"pkt_ts_usec":55376,"pkt_caplen":98,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":98,"pkt_l4_len":44,"pkt":"MzMAAQACvO57DLPeht1gAAAAACwRAf6AAAAAAAAAvu57\/\/4Ms97\/AgAAAAAAAAAAAAAAAQACAiICIwAsfbcLBzLAAAEADgABAAEa5zhrJpdxkWmjAAgAAgAAAAYABAAXABg="}
00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":925,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":102,"flow_packet_id":1,"flow_first_seen":1470104404055,"flow_last_seen":0,"flow_min_l4_payload_len":36,"flow_max_l4_payload_len":36,"flow_tot_l4_payload_len":36,"flow_avg_l4_payload_len":36,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::beee:7bff:fe0c:b3de","dst_ip":"ff02::1:2","src_port":546,"dst_port":547,"l4_proto":"udp","ndpi": {"proto":"DHCPV6","breed":"Acceptable","category":"Network"}}
01058{"flow_id":91,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":930,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104404,"pkt_ts_usec":258276,"pkt_caplen":534,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":534,"pkt_l4_len":500,"pkt":"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"}
01095{"flow_id":92,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":931,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104404,"pkt_ts_usec":258391,"pkt_caplen":562,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":562,"pkt_l4_len":508,"pkt":"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"}
00469{"flow_id":73,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":932,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104404,"pkt_ts_usec":463054,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/PKn0WgOECABFAABOH3kAAIARlenAqAPswKj\/\/wCJAIkAOkhKiloBEAABAAAAAAAAIEZERVBFT0ZGRkRFT0VGRkVGSEVQRkNFTEZEQ0FDQUJNAAAgAAE="}
00469{"flow_id":73,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":937,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104405,"pkt_ts_usec":283852,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/PKn0WgOECABFAABOH30AAIARleXAqAPswKj\/\/wCJAIkAOkhKiloBEAABAAAAAAAAIEZERVBFT0ZGRkRFT0VGRkVGSEVQRkNFTEZEQ0FDQUJNAAAgAAE="}
01002{"flow_id":91,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":940,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104405,"pkt_ts_usec":486949,"pkt_caplen":491,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":491,"pkt_l4_len":457,"pkt":"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"}
01035{"flow_id":92,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":941,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104405,"pkt_ts_usec":487124,"pkt_caplen":519,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":519,"pkt_l4_len":465,"pkt":"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"}
00583{"flow_id":82,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":943,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104405,"pkt_ts_usec":589893,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/6bEAIlAI6CABFAAClUIAAAAERsvXAqAUw7\/\/\/+sIlB2wAkY1JTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="}
00494{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":947,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":103,"flow_packet_id":1,"flow_first_seen":1470104405794,"flow_last_seen":0,"flow_min_l4_payload_len":121,"flow_max_l4_payload_len":121,"flow_tot_l4_payload_len":121,"flow_avg_l4_payload_len":121,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.119.2","dst_ip":"255.255.255.255","src_port":43786,"dst_port":5678,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00572{"flow_id":103,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":947,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104405,"pkt_ts_usec":794164,"pkt_caplen":163,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":163,"pkt_l4_len":129,"pkt":"\/\/\/\/\/\/\/\/TF4MVkdPCABFAACVAABAAEARAq7AqHcC\/\/\/\/\/6sKFi4AgSnvAAHqAgABAAZMXgxWR08ABQAJSVB2NlJvdXRlAAcADzYuMzUuNCAoc3RhYmxlKQAIAAhNaWtyb1RpawAKAAQGBzYAAAsACVZTMUwtUTE4UgAMAAZSQjQ1MEcADgABAQAPABAgAbAwAhQBAAAAAAAAAAABABAAA0xBTg=="}
00469{"flow_id":73,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":950,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104405,"pkt_ts_usec":998883,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/PKn0WgOECABFAABOH4UAAIARld3AqAPswKj\/\/wCJAIkAOkhKiloBEAABAAAAAAAAIEZERVBFT0ZGRkRFT0VGRkVGSEVQRkNFTEZEQ0FDQUJNAAAgAAE="}
00582{"flow_id":6,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":951,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104405,"pkt_ts_usec":998978,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/6uKxv2MGbCABFAAClQRgAAAQRv1vAqAUy7\/\/\/+vyiB2wAkVLKTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="}
00989{"flow_id":91,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":952,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104405,"pkt_ts_usec":999140,"pkt_caplen":482,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":482,"pkt_l4_len":448,"pkt":"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"}
01023{"flow_id":92,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":953,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104405,"pkt_ts_usec":999238,"pkt_caplen":510,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":510,"pkt_l4_len":456,"pkt":"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"}
01097{"flow_id":91,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":954,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104406,"pkt_ts_usec":104484,"pkt_caplen":562,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":562,"pkt_l4_len":528,"pkt":"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"}
01132{"flow_id":92,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":955,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104406,"pkt_ts_usec":104623,"pkt_caplen":590,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":590,"pkt_l4_len":536,"pkt":"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"}
00579{"flow_id":2,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":958,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104406,"pkt_ts_usec":305906,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6GF4PUugBCABFAAChMTgAAAER0jjAqAU57\/\/\/+toBB2wAjcGgTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="}
00578{"flow_id":3,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":961,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104406,"pkt_ts_usec":411323,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6SNIkYzEACABFAAChOxkAAAERyGTAqAUs7\/\/\/+si9B2wAjdLxTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="}
01077{"flow_id":91,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":962,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104406,"pkt_ts_usec":411434,"pkt_caplen":548,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":548,"pkt_l4_len":514,"pkt":"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"}
01111{"flow_id":92,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":963,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104406,"pkt_ts_usec":411576,"pkt_caplen":576,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":576,"pkt_l4_len":522,"pkt":"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"}
01074{"flow_id":91,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":964,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104406,"pkt_ts_usec":514462,"pkt_caplen":546,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":546,"pkt_l4_len":512,"pkt":"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"}
01111{"flow_id":92,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":965,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104406,"pkt_ts_usec":514664,"pkt_caplen":574,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":574,"pkt_l4_len":520,"pkt":"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"}
00811{"flow_id":4,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":966,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104406,"pkt_ts_usec":614297,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/TF4M6gNlCABFAAFIAAAAABARcfzAqHcB\/\/\/\/\/wBDAEQBNOV2AgEGAF9T9vkAAAAAwKgFL8CoBS\/AqHcBAAAAAMw9gh7u4wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEFNgTAqHcBMwQAAAA8AQT\/\/wAAAwTAqHcBBhCoXwEBCAgICKhfwAEICAQE\/wAAAAAAAAAAAAAAAAAA"}
00496{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":967,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":104,"flow_packet_id":1,"flow_first_seen":1470104406717,"flow_last_seen":0,"flow_min_l4_payload_len":24,"flow_max_l4_payload_len":24,"flow_tot_l4_payload_len":24,"flow_avg_l4_payload_len":24,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::edf5:240a:c8c0:8312","dst_ip":"ff02::1:3","src_port":53962,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00455{"flow_id":104,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":967,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104406,"pkt_ts_usec":717230,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"MzMAAQADzD2CHu7jht1gAAAAACARAf6AAAAAAAAA7fUkCsjAgxL\/AgAAAAAAAAAAAAAAAQAD0soU6wAgjSs9jgAAAAEAAAAAAAAGUk9fWDFDAAD\/AAE="}
00529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":967,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":104,"flow_packet_id":1,"flow_first_seen":1470104406717,"flow_last_seen":0,"flow_min_l4_payload_len":24,"flow_max_l4_payload_len":24,"flow_tot_l4_payload_len":24,"flow_avg_l4_payload_len":24,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::edf5:240a:c8c0:8312","dst_ip":"ff02::1:3","src_port":53962,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}}
00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":968,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":105,"flow_packet_id":1,"flow_first_seen":1470104406717,"flow_last_seen":0,"flow_min_l4_payload_len":24,"flow_max_l4_payload_len":24,"flow_tot_l4_payload_len":24,"flow_avg_l4_payload_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.47","dst_ip":"224.0.0.252","src_port":53962,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00426{"flow_id":105,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":968,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104406,"pkt_ts_usec":717280,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AQBeAAD8zD2CHu7jCABFAAA0LR4AAAER5cfAqAUv4AAA\/NLKFOsAIEGyPY4AAAABAAAAAAAABlJPX1gxQwAA\/wAB"}
00518{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":968,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":105,"flow_packet_id":1,"flow_first_seen":1470104406717,"flow_last_seen":0,"flow_min_l4_payload_len":24,"flow_max_l4_payload_len":24,"flow_tot_l4_payload_len":24,"flow_avg_l4_payload_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.47","dst_ip":"224.0.0.252","src_port":53962,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}}
00472{"flow_id":102,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":970,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104406,"pkt_ts_usec":818318,"pkt_caplen":98,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":98,"pkt_l4_len":44,"pkt":"MzMAAQACvO57DLPeht1gAAAAACwRAf6AAAAAAAAAvu57\/\/4Ms97\/AgAAAAAAAAAAAAAAAQACAiICIwAsfJ0LBzLAAAEADgABAAEa5zhrJpdxkWmjAAgAAgEaAAYABAAXABg="}
00455{"flow_id":104,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":973,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104407,"pkt_ts_usec":128408,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"MzMAAQADzD2CHu7jht1gAAAAACARAf6AAAAAAAAA7fUkCsjAgxL\/AgAAAAAAAAAAAAAAAQAD0soU6wAgjSs9jgAAAAEAAAAAAAAGUk9fWDFDAAD\/AAE="}
00426{"flow_id":105,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":974,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104407,"pkt_ts_usec":128422,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AQBeAAD8zD2CHu7jCABFAAA0LSAAAAER5cXAqAUv4AAA\/NLKFOsAIEGyPY4AAAABAAAAAAAABlJPX1gxQwAA\/wAB"}
00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":979,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":106,"flow_packet_id":1,"flow_first_seen":1470104407686,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"68.233.253.133","src_port":53613,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00424{"flow_id":106,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":979,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104407,"pkt_ts_usec":686919,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlYMVHBbyMCABFAAA0WZNAAEAG2QnAqAUQROn9hdFtAFBAFGHVDj7nf4AREAGvkQAAAQEIChoPf3zPHNz0"}
00496{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":983,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":107,"flow_packet_id":1,"flow_first_seen":1470104408049,"flow_last_seen":0,"flow_min_l4_payload_len":30,"flow_max_l4_payload_len":30,"flow_tot_l4_payload_len":30,"flow_avg_l4_payload_len":30,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::e98f:bae2:19f7:6b0f","dst_ip":"ff02::1:3","src_port":51451,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00464{"flow_id":107,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":983,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104408,"pkt_ts_usec":49680,"pkt_caplen":92,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":92,"pkt_l4_len":38,"pkt":"MzMAAQAD\/PiuMpcsht1gAAAAACYRAf6AAAAAAAAA6Y+64hn3aw\/\/AgAAAAAAAAAAAAAAAQADyPsU6wAmMfpTdAAAAAEAAAAAAAAM5bCP5L2b5bCI5qmfAAD\/AAE="}
00529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":983,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":107,"flow_packet_id":1,"flow_first_seen":1470104408049,"flow_last_seen":0,"flow_min_l4_payload_len":30,"flow_max_l4_payload_len":30,"flow_tot_l4_payload_len":30,"flow_avg_l4_payload_len":30,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::e98f:bae2:19f7:6b0f","dst_ip":"ff02::1:3","src_port":51451,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}}
00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":984,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":108,"flow_packet_id":1,"flow_first_seen":1470104408049,"flow_last_seen":0,"flow_min_l4_payload_len":30,"flow_max_l4_payload_len":30,"flow_tot_l4_payload_len":30,"flow_avg_l4_payload_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.95","dst_ip":"224.0.0.252","src_port":51451,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00435{"flow_id":108,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":984,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104408,"pkt_ts_usec":49734,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"AQBeAAD8\/PiuMpcsCABFAAA6KyAAAAER6Y\/AqANf4AAA\/Mj7FOsAJrP2U3QAAAABAAAAAAAADOWwj+S9m+WwiOapnwAA\/wAB"}
00518{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":984,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":108,"flow_packet_id":1,"flow_first_seen":1470104408049,"flow_last_seen":0,"flow_min_l4_payload_len":30,"flow_max_l4_payload_len":30,"flow_tot_l4_payload_len":30,"flow_avg_l4_payload_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.95","dst_ip":"224.0.0.252","src_port":51451,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}}
00579{"flow_id":21,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":985,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104408,"pkt_ts_usec":49851,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6\/PiuMpcsCABFAAChLEcAAAER2QPAqANf7\/\/\/+uhMB2wAjbUvTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="}
00484{"flow_id":96,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":988,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104408,"pkt_ts_usec":309326,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"ABxCjnAxABAj4ACgCABFAABdfPpAAEAGw\/TAqHNLwKgFEAG70XnKmgFicASki1AYAEaDwAAAFQMDADD9UAWmHPzDcyWHTMkbr+aws3s9GbGe3pjlFHCdq+YYY0\/jfjLm4gDbsSHRJ8BdNNs="}
00417{"flow_id":96,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":989,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104408,"pkt_ts_usec":309379,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABAj4ACgYMVHBbyMCABFAAAo31dAAEAGYczAqAUQwKhzS9F5AbtwBKSLypoBl1AQH\/7iMwAAwKgFEAAA"}
00465{"flow_id":107,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":994,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104408,"pkt_ts_usec":457883,"pkt_caplen":92,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":92,"pkt_l4_len":38,"pkt":"MzMAAQAD\/PiuMpcsht1gAAAAACYRAf6AAAAAAAAA6Y+64hn3aw\/\/AgAAAAAAAAAAAAAAAQADyPsU6wAmMfpTdAAAAAEAAAAAAAAM5bCP5L2b5bCI5qmfAAD\/AAE="}
00435{"flow_id":108,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":995,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104408,"pkt_ts_usec":458018,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"AQBeAAD8\/PiuMpcsCABFAAA6KyIAAAER6Y3AqANf4AAA\/Mj7FOsAJrP2U3QAAAABAAAAAAAADOWwj+S9m+WwiOapnwAA\/wAB"}
00583{"flow_id":82,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":998,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104408,"pkt_ts_usec":661618,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/6bEAIlAI6CABFAAClIwIAAAER4HPAqAUw7\/\/\/+sIlB2wAkY1JTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="}
00496{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":999,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":109,"flow_packet_id":1,"flow_first_seen":1470104408662,"flow_last_seen":0,"flow_min_l4_payload_len":317,"flow_max_l4_payload_len":317,"flow_tot_l4_payload_len":317,"flow_avg_l4_payload_len":317,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.125.30","dst_ip":"255.255.255.255","src_port":62976,"dst_port":62976,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00839{"flow_id":109,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":999,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104408,"pkt_ts_usec":662594,"pkt_caplen":359,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":359,"pkt_l4_len":325,"pkt":"\/\/\/\/\/\/\/\/wKC7c+tHCABFAAFZOwBAAEARwM3AqH0e\/\/\/\/\/\/YA9gABRUfM\/\/+TXaAAwKC7c+tHwKh9HgAAAgAnAURHUy0xMjEwLTEwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABTd2l0Y2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADMuMTAuMDEzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKC7c+tHQjEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABRUDBSMUQ5MDAwMDI1AAAAAAAAAAAAAAAAAAAAAAAAAERHUy0xMjEwLTEwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqH0e\/\/8AAFBvcnQgMTAAIAGwMAIUAQDCoLv\/\/nPrR0A="}
00512{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1000,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":110,"flow_packet_id":1,"flow_first_seen":1470104408662,"flow_last_seen":0,"flow_min_l4_payload_len":329,"flow_max_l4_payload_len":329,"flow_tot_l4_payload_len":329,"flow_avg_l4_payload_len":329,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b030:214:100:c2a0:bbff:fe73:eb47","dst_ip":"ff02::1","src_port":62976,"dst_port":62976,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00875{"flow_id":110,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1000,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104408,"pkt_ts_usec":662780,"pkt_caplen":391,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":391,"pkt_l4_len":337,"pkt":"MzMAAAABwKC7c+tHht1gAAAAAVERgCABsDACFAEAwqC7\/\/5z60f\/AgAAAAAAAAAAAAAAAAAB9gD2AAFRTer\/D5NdoADAoLtz60cgAbAwAhQBAMKgu\/\/+c+tHAAACACcBREdTLTEyMTAtMTBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFN3aXRjaAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMy4xMC4wMTMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAoLtz60dCMQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFFQMFIxRDkwMDAwMjUAAAAAAAAAAAAAAAAAAAAAAAAAREdTLTEyMTAtMTBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCofR7\/\/wAAUG9ydCAxMAAgAbAwAhQBAMKgu\/\/+c+tHQA=="}
00580{"flow_id":2,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1007,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104409,"pkt_ts_usec":276706,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6GF4PUugBCABFAAChMT8AAAER0jHAqAU57\/\/\/+toBB2wAjcGgTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="}
00579{"flow_id":3,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1008,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104409,"pkt_ts_usec":378493,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6SNIkYzEACABFAAChOxoAAAERyGPAqAUs7\/\/\/+si9B2wAjdLxTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="}
00497{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1012,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":111,"flow_packet_id":1,"flow_first_seen":1470104409586,"flow_last_seen":0,"flow_min_l4_payload_len":24,"flow_max_l4_payload_len":24,"flow_tot_l4_payload_len":24,"flow_avg_l4_payload_len":24,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::5d92:62a8:ebde:1319","dst_ip":"ff02::1:3","src_port":53938,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00455{"flow_id":111,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1012,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104409,"pkt_ts_usec":586167,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"MzMAAQADPKn0WgOEht1gAAAAACARAf6AAAAAAAAAXZJiqOveExn\/AgAAAAAAAAAAAAAAAQAD0rIU6wAgVxmmDQAAAAEAAAAAAAAGaXNhdGFwAAABAAE="}
00530{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1012,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":111,"flow_packet_id":1,"flow_first_seen":1470104409586,"flow_last_seen":0,"flow_min_l4_payload_len":24,"flow_max_l4_payload_len":24,"flow_tot_l4_payload_len":24,"flow_avg_l4_payload_len":24,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::5d92:62a8:ebde:1319","dst_ip":"ff02::1:3","src_port":53938,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}}
00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1013,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":112,"flow_packet_id":1,"flow_first_seen":1470104409586,"flow_last_seen":0,"flow_min_l4_payload_len":24,"flow_max_l4_payload_len":24,"flow_tot_l4_payload_len":24,"flow_avg_l4_payload_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.236","dst_ip":"224.0.0.252","src_port":56043,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00426{"flow_id":112,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1013,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104409,"pkt_ts_usec":586427,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AQBeAAD8PKn0WgOECABFAAA0H6gAAAER9IDAqAPs4AAA\/NrrFOsAIGYJpg0AAAABAAAAAAAABmlzYXRhcAAAAQAB"}
00520{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1013,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":112,"flow_packet_id":1,"flow_first_seen":1470104409586,"flow_last_seen":0,"flow_min_l4_payload_len":24,"flow_max_l4_payload_len":24,"flow_tot_l4_payload_len":24,"flow_avg_l4_payload_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.236","dst_ip":"224.0.0.252","src_port":56043,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}}
00455{"flow_id":111,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1014,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104409,"pkt_ts_usec":685484,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"MzMAAQADPKn0WgOEht1gAAAAACARAf6AAAAAAAAAXZJiqOveExn\/AgAAAAAAAAAAAAAAAQAD0rIU6wAgVxmmDQAAAAEAAAAAAAAGaXNhdGFwAAABAAE="}
00427{"flow_id":112,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1015,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104409,"pkt_ts_usec":685499,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AQBeAAD8PKn0WgOECABFAAA0H6kAAAER9H\/AqAPs4AAA\/NrrFOsAIGYJpg0AAAABAAAAAAAABmlzYXRhcAAAAQAB"}
00584{"flow_id":12,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1016,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104409,"pkt_ts_usec":686443,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/6zD2CHu7jCABFAAClQLsAAAQRv7vAqAUv7\/\/\/+utrB2wAkWQETS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="}
00470{"flow_id":73,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1020,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104409,"pkt_ts_usec":890343,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/PKn0WgOECABFAABOH6wAAIARlbbAqAPswKj\/\/wCJAIkAOqdcilsBEAABAAAAAAAAIEVKRkRFQkZFRUJGQUNBQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAE="}
00496{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1028,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":113,"flow_packet_id":1,"flow_first_seen":1470104410885,"flow_last_seen":0,"flow_min_l4_payload_len":1460,"flow_max_l4_payload_len":1460,"flow_tot_l4_payload_len":1460,"flow_avg_l4_payload_len":1460,"midstream":1,"l3_proto":"ip4","src_ip":"119.235.235.84","dst_ip":"192.168.5.16","src_port":443,"dst_port":53406,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
02397{"flow_id":113,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1028,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104410,"pkt_ts_usec":885006,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"}
00784{"flow_id":113,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1029,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104410,"pkt_ts_usec":885806,"pkt_caplen":329,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":329,"pkt_l4_len":295,"pkt":"ABxCjnAxTF4M6gNlCABFAAE7DK9AADMGERZ36+tUwKgFEAG70J5BKvxL5fLLP1AYABuy+gAAjZPukZZc5XVgQ9kkDb42wAG2R4wZPZK09D+mhXOPeysHqbaxc2ukLB7O\/ZQd+BiMnHFH7zgcREAoK8LsJtF9H0HTuFW4zAQpKNlDl6pGtEpiOY1HdxQ1Bv0HkLtvfY7Kkq4QCv1lSYlKLAPMR+Oc9r2t96JVS9ceghm\/Wm9DKfghBx740ADnGdTcU2OF\/8x6UPEOuW6wwYjs3Pb+yZn6sRfXdwloMkU3kuWbA\/HnEcEyg9N63JYWRugH0gCb7wJDNCrha78dJpq+nOGbkegYKzSRi8MebnxJxxwLRQs3jpRKSRVmH0ihWT6Ua9H97Rj8GCDKcrs8+ASvsIB+r3MFWznlQzQS834owopgMgpZRwgoXAU="}
00418{"flow_id":113,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1030,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104410,"pkt_ts_usec":885838,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"TF4M6gNlYMVHBbyMCABFAAAoSVVAAEAGyILAqAUQd+vrVNCeAbvl8ss\/QSr9XlAQHmimXgAAAAAAAAAA"}
02396{"flow_id":113,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1031,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104410,"pkt_ts_usec":886170,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"}
00677{"flow_id":113,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1032,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104410,"pkt_ts_usec":886207,"pkt_caplen":248,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":248,"pkt_l4_len":214,"pkt":"ABxCjnAxTF4M6gNlCABFAADqDLFAADMGEWV36+tUwKgFEAG70J5BKwMS5fLLP1AYABuHLgAA07hVuMwEKSjZQ5eqRrRKYjmNR3cUNQb9B5C7b32OypKuEAr9ZUmJSiwDzEfjnPa9rfeiVUvXHoIZv1pvQyn4IQce+NAA5xnU3FNjhf\/MelDxDrlusMGI7Nz2\/smZ+rEX13cJaDJFN5LlmwPx5xHBMoPTetyWFkboB9IAm+8CQzQq4Wu\/HSaavpzhm5HoGCs0kYvDHm58ScccC0ULN46USkkVZh9IoVk+lGvR\/e0YuitBUMasD0pyfvgp\/ePSgdJ+YGc="}
00418{"flow_id":113,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1033,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104410,"pkt_ts_usec":886225,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"TF4M6gNlYMVHBbyMCABFAAAoi+RAAEAGhfPAqAUQd+vrVNCeAbvl8ss\/QSsD1FAQHjSgHAAAVFRQLzEu"}
02396{"flow_id":113,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1034,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104410,"pkt_ts_usec":886265,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"ABxCjnAxTF4M6gNlCABFAAXcDLJAADMGDHJ36+tUwKgFEAG70J5BKwPU5fLLP1AQABt+PwAAgAIAAgAAAA8AAAAfAAAadA4CAAAA\/\/8AAAAfAQAGVG0PEo+znvT4osAQ3PtDN6p44AyvEUcQuMDJDJulVfdQtU3vsm680S5h6cqyuG2Wr1yMAAzkOrJ5vL9h9qdkqR+ptOj6itnkqBEV90zX6u729T73qOzzjU\/U51F45IFbdjNVLprFFhqy4KthlL5c17zjy2iF4dlhhsWjULc9YxVXWPtM66cRKsv40FlN0GjfHrrHCK1Sxf6ZMFgDkHLfXyR37jQvzH6TxMC\/9QJ7FHAGgvP7H448eQyD90+fpCwf5MuZ1gxsybnS8S9\/QVeu\/XDd0zBhsAog48\/AVG7HrZ6pnc+Z2X+AMFKalAWwx9GG7pGBcRaYFsdVStBbejcmrh2Ue+xZ+o41jycX64syEmjSSQMNk6svXbk472ejunKCa+nfTLU13+arGMftCnivLjtttSjLnxhrL1ACOGAoLz11XVtJWwnZP1Fnb0JNu6sZGgNGzJprWqCDPzXaDz3MB32FH3S5Enl\/Wn7T3YYDbna\/1ubuEavSQrsa\/sUppKmg6neoEipKkcxpW2263Bshe1hpP\/HBtb3NlB2p+ti5AAMyRCUcI4bhWgg8lXIK\/R3\/lTgrv1mylb8YsVmTndMtBW0xCGCvcRJNfbB5tLlWgSiLzsPAb5xzOGaBNea4HcvXDrnLShCOt7rQDhTn9pkJ7MfsRpFOWs22xi9GI4ihvV8Du+F8Xc7VMHC6j69PySZjz4DxaBklqrJvboMYgH\/uhSuXiaJs7a5ddYxy6nKpkrtGpmSdr87K\/h0NcmgUvMYbRwJUY2C\/aCCqQKSjPeITyHKvGmhiRLc2pk3A27QUNbDD3FBPslLYgT65ZzvTcLfwomH8I1y4QHOezZqOrwVs1I7LO8P+1m\/ZN82HV9TsWYMtZL6wbhtllR8xfiEPRav6ZNCL27EFkDtqjHJ6gMMFwDecxbxTE3H6VfxkWugr3PBCz\/OkuvQ\/WaZY1rGgJoBb4pzCyo+XgLoxuUl6Z0To1rFig4UYk7+aezP0L0OT4LL58WMcM07Zj5sE+L\/vVCGppaC+mh+MvXHshmbxTx\/4zloZT6BqVkpi\/Bcc0V\/CNGTh+YexorabMGmT0Hp0S3oKF\/6STT96XCeJL3P+6AVPXioTQmyjSDC69CdrIG3LqOQ8z+sVvtSiZU6SWsvW5eT5dFT3VX6+dwmHUzpwyxD7UALPEwyAPPqljuJtoU27108nc8d4enYCmY6+9K\/NLm3xIV0bsZMbHrp+qbzb6ccpmtIMUn1GGzG0aSbD33dTzkA2MXdVrJi3sp6c8HgbTAeAslqRO3pve53EH0\/tY2D4lOAvIeONplftojXm8rAt\/rY9ZEnN4q3nVOeFVUmLGIgyQkyg7dQe9sD3rFlrPB9aIdO3fqfJ+qvxzPtKJ96DfJpYgUl3QOKqPMZfj5xwrkojSHDvReOrZ\/kovCqgLBNQqMsWpZ20Nl6CXZ3\/1zVq1ARULxqU5vHANsbesvwdeDLHt4WusC5WImUJ0f6uraPX++2sapDHTxGcVvD9XUJCj7+kUmY1+UqPoHiFUAU4wrSeN\/LU5TfgQR8d4uexSOXfPjsBEouBHsixx\/1rnxjXL1xdsAIhejCId06mYqU2yv7H8SNOWVFditMxYwxbN6vuDv4AnTvxkfDaS9eKpnC8OIY9g1MxJQye8+fHbv7Ey2PTy9drYNv4OHPpmj4OsTEIRBCWWdn69ErS0OHQvMkUgkOQJS0uKI+yeNlrj3qW77wJGyHSpU\/uQF8yQ78SSAPyuc8v7xsFNZM4ljWEVaRZpaG0xtSNj96aInHkXqDwsYMZhGzSsZSMsRnjpG09N8a4QstzjZPukZZc5XVgQ9kkDb42wAG2R4wZPZK09D+mhXOPeysHqbaxc2ukLB7O\/ZQd+BiMnHFH7zgcREAoK8LsJtF9H0HTuFU="}
00673{"flow_id":113,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1035,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104410,"pkt_ts_usec":886279,"pkt_caplen":245,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":245,"pkt_l4_len":211,"pkt":"ABxCjnAxTF4M6gNlCABFAADnDLNAADMGEWZ36+tUwKgFEAG70J5BKwmI5fLLP1AYABtxrAAAuMwEKSjZQ5eqRrRKYjmNR3cUNQb9B5C7b32OypKuEAr9ZUmJSiwDzEfjnPa9rfeiVUvXHoIZv1pvQyn4IQce+NAA5xnU3FNjhf\/MelDxDrlusMGI7Nz2\/smZ+rEX13cJaDJFN5LlmwPx5xHBMoPTetyWFkboB9IAm+8CQzQq4Wu\/HSaavpzhm5HoGCs0kYvDHm58ScccC0ULN46USkkVZh9IoVk+lGvR\/e0YuitBUMasD0pyfvgp\/ePSgdJ+YGc="}
00418{"flow_id":113,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1036,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104410,"pkt_ts_usec":886289,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"TF4M6gNlYMVHBbyMCABFAAAovM9AAEAGVQjAqAUQd+vrVNCeAbvl8ss\/QSsKR1AQHgGZ3AAAAAPoAAAA"}
00473{"flow_id":102,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1037,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104410,"pkt_ts_usec":914072,"pkt_caplen":98,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":98,"pkt_l4_len":44,"pkt":"MzMAAQACvO57DLPeht1gAAAAACwRAf6AAAAAAAAAvu57\/\/4Ms97\/AgAAAAAAAAAAAAAAAQACAiICIwAsew8LBzLAAAEADgABAAEa5zhrJpdxkWmjAAgAAgKoAAYABAAXABg="}
00449{"flow_id":113,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1038,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104410,"pkt_ts_usec":918036,"pkt_caplen":81,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":81,"pkt_l4_len":47,"pkt":"TF4M6gNlYMVHBbyMCABFAABDVa9AAEAGvA3AqAUQd+vrVNCeAbvl8ss\/QSsKR1AYHgHwqQAAgAIAAQAAABMAAAAhAAAAAIAAGtSOAwAAAP\/\/"}
00417{"flow_id":113,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1041,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104411,"pkt_ts_usec":11996,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABxCjnAxTF4M6gNlCABFAAAoDLRAADMGEiR36+tUwKgFEAG70J5BKwpH5fLLWlAQABu3pwAAAAAAAAAA"}
00491{"flow_id":113,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1042,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104411,"pkt_ts_usec":12034,"pkt_caplen":114,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":114,"pkt_l4_len":80,"pkt":"TF4M6gNlYMVHBbyMCABFAABkkeNAAEAGf7jAqAUQd+vrVNCeAbvl8staQSsKR1AYHgFx8gAAAAAAIQEAADSSwYwkgMY9zM2PtcAtvoZJ2QGUh+Rew7DZ+k4l058gYoy1DfnXM2lKDG4gHxzchk60DoC2"}
00497{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1043,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":114,"flow_packet_id":1,"flow_first_seen":1470104411018,"flow_last_seen":0,"flow_min_l4_payload_len":317,"flow_max_l4_payload_len":317,"flow_tot_l4_payload_len":317,"flow_avg_l4_payload_len":317,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.10.110","dst_ip":"255.255.255.255","src_port":60480,"dst_port":62976,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00836{"flow_id":114,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1043,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104411,"pkt_ts_usec":18970,"pkt_caplen":359,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":359,"pkt_l4_len":325,"pkt":"\/\/\/\/\/\/\/\/XNmY3fXzCABFAAFZAABAAEARbn7AqApu\/\/\/\/\/+xA9gABRTgx\/\/8AAKAAXNmY3fXzwKgKbgAAAgAnAUROUy0xMTAwLTA0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABOQVMAAAAAAAAAAAAAVVqvihgAAABVWsE9WwAAAFVasDEuMDJiMTAAEXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXNmY3fXzM0ExAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGRsaW5rLURERjVGMwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqApu\/\/8AAExBTjEAAAAAAAAAAAAAAAAAAAAAAAAAAAA="}
00418{"flow_id":113,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1044,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104411,"pkt_ts_usec":114941,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABxCjnAxTF4M6gNlCABFAAAoDLVAADMGEiN36+tUwKgFEAG70J5BKwpH5fLLllAQABu3awAAAAAAAAAA"}
00581{"flow_id":21,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1045,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104411,"pkt_ts_usec":121932,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6\/PiuMpcsCABFAAChLEgAAAER2QLAqANf7\/\/\/+uhMB2wAjbUvTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="}
00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1047,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":115,"flow_packet_id":1,"flow_first_seen":1470104411327,"flow_last_seen":0,"flow_min_l4_payload_len":26,"flow_max_l4_payload_len":26,"flow_tot_l4_payload_len":26,"flow_avg_l4_payload_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.37","dst_ip":"224.0.0.252","src_port":54506,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00431{"flow_id":115,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1047,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104411,"pkt_ts_usec":327542,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":68,"pkt_l4_len":34,"pkt":"AQBeAAD8CJ4BzeuNCABFAAA2U7YAAAERvzfAqAUl4AAA\/NTqFOsAIqEiFTIAAAABAAAAAAAACG5vdGVib29rAAD\/AAE="}
00519{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1047,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":115,"flow_packet_id":1,"flow_first_seen":1470104411327,"flow_last_seen":0,"flow_min_l4_payload_len":26,"flow_max_l4_payload_len":26,"flow_tot_l4_payload_len":26,"flow_avg_l4_payload_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.37","dst_ip":"224.0.0.252","src_port":54506,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}}
00582{"flow_id":56,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1048,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104411,"pkt_ts_usec":327607,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6CJ4BzeuNCABFAAChFFUAAAER7y\/AqAUl7\/\/\/+t\/tB2wAjbvITS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="}
00431{"flow_id":115,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1054,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104411,"pkt_ts_usec":735820,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":68,"pkt_l4_len":34,"pkt":"AQBeAAD8CJ4BzeuNCABFAAA2U7cAAAERvzbAqAUl4AAA\/NTqFOsAIqEiFTIAAAABAAAAAAAACG5vdGVib29rAAD\/AAE="}
00580{"flow_id":2,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1062,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104412,"pkt_ts_usec":246763,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6GF4PUugBCABFAAChMUAAAAER0jDAqAU57\/\/\/+toBB2wAjcGgTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="}
00812{"flow_id":4,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1063,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104412,"pkt_ts_usec":350549,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/TF4M6gNlCABFAAFIAAAAABARcfzAqHcB\/\/\/\/\/wBDAEQBNP8ZAgEGAFHQRwUAAAAAwKgFMcCoBTHAqHcBAAAAAOix\/Kv7sgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEFNgTAqHcBMwQAAAA8AQT\/\/wAAAwTAqHcBBhCoXwEBCAgICKhfwAEICAQE\/wAAAAAAAAAAAAAAAAAA"}
00580{"flow_id":3,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1064,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104412,"pkt_ts_usec":450120,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6SNIkYzEACABFAAChOxwAAAERyGHAqAUs7\/\/\/+si9B2wAjdLxTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="}
00585{"flow_id":59,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1065,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104412,"pkt_ts_usec":552564,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/66LH8q\/uyCABFAAClCgMAAAQR9nHAqAUx7\/\/\/+sn4B2wAkYV1TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="}
00496{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1066,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":116,"flow_packet_id":1,"flow_first_seen":1470104412556,"flow_last_seen":0,"flow_min_l4_payload_len":33,"flow_max_l4_payload_len":33,"flow_tot_l4_payload_len":33,"flow_avg_l4_payload_len":33,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::9bd:81dd:2fdc:5750","dst_ip":"ff02::1:3","src_port":64568,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00471{"flow_id":116,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1066,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104412,"pkt_ts_usec":556037,"pkt_caplen":95,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":95,"pkt_l4_len":41,"pkt":"MzMAAQAD6LH8q\/uyht1gAAAAACkRAf6AAAAAAAAACb2B3S\/cV1D\/AgAAAAAAAAAAAAAAAQAD\/DgU6wAp0RQMEAAAAAEAAAAAAAAPY2Flc2FyLXRoaW5rcGFkAAD\/AAE="}
00529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1066,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":116,"flow_packet_id":1,"flow_first_seen":1470104412556,"flow_last_seen":0,"flow_min_l4_payload_len":33,"flow_max_l4_payload_len":33,"flow_tot_l4_payload_len":33,"flow_avg_l4_payload_len":33,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::9bd:81dd:2fdc:5750","dst_ip":"ff02::1:3","src_port":64568,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}}
00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1067,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":117,"flow_packet_id":1,"flow_first_seen":1470104412556,"flow_last_seen":0,"flow_min_l4_payload_len":33,"flow_max_l4_payload_len":33,"flow_tot_l4_payload_len":33,"flow_avg_l4_payload_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.49","dst_ip":"224.0.0.252","src_port":64568,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00440{"flow_id":117,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1067,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104412,"pkt_ts_usec":556263,"pkt_caplen":75,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":75,"pkt_l4_len":41,"pkt":"AQBeAAD86LH8q\/uyCABFAAA9eeQAAAERmPbAqAUx4AAA\/Pw4FOsAKTqNDBAAAAABAAAAAAAAD2NhZXNhci10aGlua3BhZAAA\/wAB"}
00519{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1067,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":117,"flow_packet_id":1,"flow_first_seen":1470104412556,"flow_last_seen":0,"flow_min_l4_payload_len":33,"flow_max_l4_payload_len":33,"flow_tot_l4_payload_len":33,"flow_avg_l4_payload_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.49","dst_ip":"224.0.0.252","src_port":64568,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}}
00471{"flow_id":73,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1069,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104412,"pkt_ts_usec":860139,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/PKn0WgOECABFAABOH8MAAIARlZ\/AqAPswKj\/\/wCJAIkAOqdYil8BEAABAAAAAAAAIEVKRkRFQkZFRUJGQUNBQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAE="}
00471{"flow_id":116,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1070,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104412,"pkt_ts_usec":962283,"pkt_caplen":95,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":95,"pkt_l4_len":41,"pkt":"MzMAAQAD6LH8q\/uyht1gAAAAACkRAf6AAAAAAAAACb2B3S\/cV1D\/AgAAAAAAAAAAAAAAAQAD\/DgU6wAp0RQMEAAAAAEAAAAAAAAPY2Flc2FyLXRoaW5rcGFkAAD\/AAE="}
00440{"flow_id":117,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1071,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104412,"pkt_ts_usec":962345,"pkt_caplen":75,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":75,"pkt_l4_len":41,"pkt":"AQBeAAD86LH8q\/uyCABFAAA9eeYAAAERmPTAqAUx4AAA\/Pw4FOsAKTqNDBAAAAABAAAAAAAAD2NhZXNhci10aGlua3BhZAAA\/wAB"}
00527{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":1074,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":110,"flow_packet_id":1,"flow_first_seen":1470104408662,"flow_last_seen":0,"flow_min_l4_payload_len":329,"flow_max_l4_payload_len":329,"flow_tot_l4_payload_len":329,"flow_avg_l4_payload_len":329,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b030:214:100:c2a0:bbff:fe73:eb47","dst_ip":"ff02::1","src_port":62976,"dst_port":62976,"l4_proto":"udp","ndpi": {"proto":"Unknown","breed":"Unrated"}}
00513{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1074,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":110,"flow_packet_id":1,"flow_first_seen":1470104408662,"flow_last_seen":0,"flow_min_l4_payload_len":329,"flow_max_l4_payload_len":329,"flow_tot_l4_payload_len":329,"flow_avg_l4_payload_len":329,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b030:214:100:c2a0:bbff:fe73:eb47","dst_ip":"ff02::1","src_port":62976,"dst_port":62976,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00510{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":1074,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":103,"flow_packet_id":1,"flow_first_seen":1470104405794,"flow_last_seen":0,"flow_min_l4_payload_len":121,"flow_max_l4_payload_len":121,"flow_tot_l4_payload_len":121,"flow_avg_l4_payload_len":121,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.119.2","dst_ip":"255.255.255.255","src_port":43786,"dst_port":5678,"l4_proto":"udp","ndpi": {"proto":"Unknown","breed":"Unrated"}}
00496{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1074,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":103,"flow_packet_id":1,"flow_first_seen":1470104405794,"flow_last_seen":0,"flow_min_l4_payload_len":121,"flow_max_l4_payload_len":121,"flow_tot_l4_payload_len":121,"flow_avg_l4_payload_len":121,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.119.2","dst_ip":"255.255.255.255","src_port":43786,"dst_port":5678,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00512{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":1074,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":114,"flow_packet_id":1,"flow_first_seen":1470104411018,"flow_last_seen":0,"flow_min_l4_payload_len":317,"flow_max_l4_payload_len":317,"flow_tot_l4_payload_len":317,"flow_avg_l4_payload_len":317,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.10.110","dst_ip":"255.255.255.255","src_port":60480,"dst_port":62976,"l4_proto":"udp","ndpi": {"proto":"Unknown","breed":"Unrated"}}
00498{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1074,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":114,"flow_packet_id":1,"flow_first_seen":1470104411018,"flow_last_seen":0,"flow_min_l4_payload_len":317,"flow_max_l4_payload_len":317,"flow_tot_l4_payload_len":317,"flow_avg_l4_payload_len":317,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.10.110","dst_ip":"255.255.255.255","src_port":60480,"dst_port":62976,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00521{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1074,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":106,"flow_packet_id":1,"flow_first_seen":1470104407686,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"68.233.253.133","src_port":53613,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}}
00483{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1074,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":106,"flow_packet_id":1,"flow_first_seen":1470104407686,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"68.233.253.133","src_port":53613,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00512{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":1074,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":109,"flow_packet_id":1,"flow_first_seen":1470104408662,"flow_last_seen":0,"flow_min_l4_payload_len":317,"flow_max_l4_payload_len":317,"flow_tot_l4_payload_len":317,"flow_avg_l4_payload_len":317,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.125.30","dst_ip":"255.255.255.255","src_port":62976,"dst_port":62976,"l4_proto":"udp","ndpi": {"proto":"Unknown","breed":"Unrated"}}
00498{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1074,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":109,"flow_packet_id":1,"flow_first_seen":1470104408662,"flow_last_seen":0,"flow_min_l4_payload_len":317,"flow_max_l4_payload_len":317,"flow_tot_l4_payload_len":317,"flow_avg_l4_payload_len":317,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.125.30","dst_ip":"255.255.255.255","src_port":62976,"dst_port":62976,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00471{"flow_id":73,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1078,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104413,"pkt_ts_usec":679009,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/PKn0WgOECABFAABOH8cAAIARlZvAqAPswKj\/\/wCJAIkAOqdYil8BEAABAAAAAAAAIEVKRkRFQkZFRUJGQUNBQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAE="}
00489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1079,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":118,"flow_packet_id":1,"flow_first_seen":1470104413679,"flow_last_seen":0,"flow_min_l4_payload_len":300,"flow_max_l4_payload_len":300,"flow_tot_l4_payload_len":300,"flow_avg_l4_payload_len":300,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.41","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00811{"flow_id":118,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1079,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104413,"pkt_ts_usec":679149,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/SNIkYwreCABFAAFIfjcAAEARNZ3AqAUp\/\/\/\/\/wBEAEMBNOoXAQEGAAJEmkEAAIAAwKgFKQAAAAAAAAAAAAAAAEjSJGMK3gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEIPQcBSNIkYwreDAhrZXZpbi1QQzwITVNGVCA1LjA3DQEPAwYsLi8fIXn5K\/z\/AAAAAAAAAAAAAAAA"}
00586{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1079,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":118,"flow_packet_id":1,"flow_first_seen":1470104413679,"flow_last_seen":0,"flow_min_l4_payload_len":300,"flow_max_l4_payload_len":300,"flow_tot_l4_payload_len":300,"flow_avg_l4_payload_len":300,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.41","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","ndpi": {"proto":"DHCP","breed":"Acceptable","category":"Network"},"dhcp": {"fingerprint":"1,15,3,6,44,46,47,31,33,121,249,43,252"}}
00811{"flow_id":4,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1080,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104413,"pkt_ts_usec":679193,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/TF4M6gNlCABFAAFIAAAAABARcfzAqHcB\/\/\/\/\/wBDAEQBNOp7AgEGAAJEmkEAAIAAwKgFKQAAAADAqHcBAAAAAEjSJGMK3gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEFNgTAqHcBAQT\/\/wAAAwTAqHcBBhCoXwEBCAgICKhfwAEICAQE\/wAAAAAAAAAAAAAAAAAAAAAAAAAA"}
00797{"flow_id":55,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1082,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104413,"pkt_ts_usec":815837,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"TF4M6gNlYMVHBbyMCABFAAFIqYMAAEAR0r\/AqAUQwKh3AQBEAEMBNFvwAQEGABeXwM0AAAAAwKgFEAAAAAAAAAAAAAAAAGDFRwW8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEDNwkBAwYPd1\/8LC45AgXcPQcBYMVHBbyMMwQAdqcADAtNYWNCb29rLUFpcv8AAAAAAAAAAAAAAAAA"}
00798{"flow_id":55,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1083,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104413,"pkt_ts_usec":817995,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"ABxCjnAxTF4M6gNlCABFAAFIAAAAABARrEPAqHcBwKgFEABDAEQBNHbNAgEGABeXwM0AAAAAwKgFEMCoBRDAqHcBAAAAAGDFRwW8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEFNgTAqHcBMwQAAAA8AQT\/\/wAAAwTAqHcBBhCoXwEBCAgICKhfwAEICAQE\/wAAAAAAAAAAAAAAAAAA"}
00580{"flow_id":21,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1086,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":89034,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6\/PiuMpcsCABFAAChLEkAAAER2QHAqANf7\/\/\/+uhMB2wAjbUvTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="}
00493{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1087,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":119,"flow_packet_id":1,"flow_first_seen":1470104414296,"flow_last_seen":0,"flow_min_l4_payload_len":1093,"flow_max_l4_payload_len":1093,"flow_tot_l4_payload_len":1093,"flow_avg_l4_payload_len":1093,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"31.13.87.36","src_port":53580,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
01905{"flow_id":119,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1087,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":296205,"pkt_caplen":1159,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1159,"pkt_l4_len":1125,"pkt":"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"}
00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1088,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":120,"flow_packet_id":1,"flow_first_seen":1470104414296,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"192.168.115.75","src_port":53626,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00443{"flow_id":120,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1088,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":296334,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"ABAj4ACgYMVHBbyMCABFAABAzwZAAEAGcgXAqAUQwKhzS9F6Abs0INrqAAAAALAC\/\/+nvgAAAgQFtAEDAwUBAQgKGg+ZQgAAAAAEAgAA"}
01362{"flow_id":119,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1089,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":296891,"pkt_caplen":759,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":759,"pkt_l4_len":725,"pkt":"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"}
00425{"flow_id":120,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1092,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":301526,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABxCjnAxABAj4ACgCABFAAA0AABAAEAGQRjAqHNLwKgFEAG70XokV4DmNCDa64ASFtDXBQAAAgQFtAEBBAIBAwMH"}
00427{"flow_id":119,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1093,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":301558,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABxCjnAxTF4M6gNlCABFAAA0wvZAAFgGI+QfDVckwKgFEAG70UwEnaIw\/FJxM4AQAQMsTQAAAQEICl\/vEucaD5lC"}
00523{"flow_id":119,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1094,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":301578,"pkt_caplen":135,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":135,"pkt_l4_len":101,"pkt":"ABxCjnAxTF4M6gNlCABFAAB5wvdAAFgGI54fDVckwKgFEAG70UwEnaIw\/FJxM4AYAQNa5QAAAQEICl\/vEucaD5lCFwMDAEDUAFWdFI6vKI3lWfiJsnqtDPHN1dSTIJS61LiuouCW4a1RtVfjlIDetpOkFbYtb3PaKj\/ddLgQEpMmdmbPawF9"}
00417{"flow_id":120,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1095,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":301595,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABAj4ACgYMVHBbyMCABFAAAohwxAAEAGuhfAqAUQwKhzS9F6Abs0INrrJFeA51AQIAAOqAAAIEVKRkRF"}
00426{"flow_id":119,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1098,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":301849,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlYMVHBbyMCABFAAA0CgdAAEAG9NPAqAUQHw1XJNFMAbv8UnPoBJ2idYAQD\/0aVAAAAQEIChoPmUdf7xLn"}
00707{"flow_id":120,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1099,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":302554,"pkt_caplen":271,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":271,"pkt_l4_len":237,"pkt":"ABAj4ACgYMVHBbyMCABFAAEBACxAAEAGQB\/AqAUQwKhzS9F6Abs0INrrJFeA51AYIAB90wAAFgMBANQBAADQAwNXoANfjIqHDy9QXUEag4gt5xMipN2TtjnqDApBJHZnuSBj+Q0TSc5VhLmmiAAqPOtufQBM8Qziz0QZmZNFeVk8eABKAP\/AJMAjwArACcAIwCjAJ8AUwBPAEsAmwCXABcAEwAPAKsApwA\/ADsANAGsAZwA5ADMAFgA9ADwANQAvAArAB8ARwALADAAFAAQBAAA9AAAAEwARAAAOMTkyLjE2OC4xMTUuNzUACgAIAAYAFwAYABkACwACAQAADQAMAAoFAQQBAgEEAwIDM3QAAA=="}
00759{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1099,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":120,"flow_packet_id":4,"flow_first_seen":1470104414296,"flow_last_seen":1470104414302,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":217,"flow_tot_l4_payload_len":217,"flow_avg_l4_payload_len":54,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"192.168.115.75","src_port":53626,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"192.168.115.75","ja3":"799135475da362592a4be9199d258726","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
00417{"flow_id":120,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1100,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":303590,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABxCjnAxABAj4ACgCABFAAAoBANAAEAGPSHAqHNLwKgFEAG70XokV4DnNCDbxFAQADYtmQAAAAAAAAAA"}
00633{"flow_id":120,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1101,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":305856,"pkt_caplen":215,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":215,"pkt_l4_len":181,"pkt":"ABxCjnAxABAj4ACgCABFAADJBARAAEAGPH\/AqHNLwKgFEAG70XokV4DnNCDbxFAYADaQHAAAFgMDAFECAABNAwP\/SkCYRaSQV0S20m\/rHGnUOyjdt0oR0LdUuhsR9UivBCBj+Q0TSc5VhLmmiAAqPOtufQBM8Qziz0QZmZNFeVk8eAAvAAAF\/wEAAQAUAwMAAQEWAwMAQLfH4HL\/jK5VPe6tMGNhzqQ2T7h4g2WtI6lJyHpPbfwvnM0Bz8GDvaRpOikykLL9aarYlnM2DgJkMroupoJDVZo="}
00826{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1101,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":120,"flow_packet_id":6,"flow_first_seen":1470104414296,"flow_last_seen":1470104414305,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":217,"flow_tot_l4_payload_len":378,"flow_avg_l4_payload_len":63,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"192.168.115.75","src_port":53626,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"8":"Weak TLS cipher","15":"TLS (probably) not carrying HTTPS"},"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"192.168.115.75","ja3":"799135475da362592a4be9199d258726","ja3s":"573a9f3f80037fb40d481e2054def5bb","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA"}}
00418{"flow_id":120,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1102,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":305902,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABAj4ACgYMVHBbyMCABFAAAonnxAAEAGoqfAqAUQwKhzS9F6Abs0INvEJFeBiFAQH\/oNNAAAVFRQLzEu"}
00417{"flow_id":120,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1103,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":306111,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"ABAj4ACgYMVHBbyMCABFAAAukWVAAEAGr7jAqAUQwKhzS9F6Abs0INvEJFeBiFAYIAD1GwAAFAMDAAEB"}
00504{"flow_id":120,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1104,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":306141,"pkt_caplen":123,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":123,"pkt_l4_len":89,"pkt":"ABAj4ACgYMVHBbyMCABFAABtTURAAEAG85rAqAUQwKhzS9F6Abs0INvKJFeBiFAYIAA2uAAAFgMDAECbKkLC7CRaXPZNslPbrgwXbyswQI3WFobPWFZwufy3sn\/6rVOKJKb8qWZlEZF9KXP0GhMAIWWDzfqvPxgRanAO"}
00419{"flow_id":120,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1105,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":307243,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABxCjnAxABAj4ACgCABFAAAoBAVAAEAGPR\/AqHNLwKgFEAG70XokV4GINCDcD1AQADYsrQAAAAAAAAAA"}
00637{"flow_id":113,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1106,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":309806,"pkt_caplen":218,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":218,"pkt_l4_len":184,"pkt":"TF4M6gNlYMVHBbyMCABFAADMNWBAAEAG29PAqAUQd+vrVNCeAbvl8suWQSsKR1AYHgELKgAAgAIAAQAAAJwAAAAjAAAAAIAAojjr5ukXJ+snFmTqlxnpFySmp2bmpeXrp6eW6IGyoD1QhS1IbbGqsaOqkRsQlZeXqxq5piUmpybl52cDmcn5uUDh9KL8UqAqI7fUquTE3ILUIiBTrTi\/tCg5NaSyINU2xNPX1cfTz5XU8sHYyARaPkgglw\/5ySWpJbrFJUWpwGAbLRgGe8HA7O5KVrkAAAAA\/\/8="}
00427{"flow_id":119,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1107,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":344934,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABxCjnAxTF4M6gNlCABFAAA0wvhAAFgGI+IfDVckwKgFEAG70UwEnaJ1\/FJz6IAQAQwpHAAAAQEICl\/vExUaD5lC"}
01765{"flow_id":120,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1108,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":359120,"pkt_caplen":1051,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1051,"pkt_l4_len":1017,"pkt":"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"}
01205{"flow_id":120,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1109,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":381027,"pkt_caplen":639,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":639,"pkt_l4_len":605,"pkt":"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"}
00419{"flow_id":120,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1110,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":381082,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABAj4ACgYMVHBbyMCABFAAAo1GZAAEAGbL3AqAUQwKhzS9F6Abs0IN\/0JFeD0VAQH+0GyAAAAAfQAAAA"}
00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1111,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":121,"flow_packet_id":1,"flow_first_seen":1470104414395,"flow_last_seen":0,"flow_min_l4_payload_len":47,"flow_max_l4_payload_len":47,"flow_tot_l4_payload_len":47,"flow_avg_l4_payload_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"168.95.1.1","src_port":63372,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00457{"flow_id":121,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1111,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":395988,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"TF4M6gNlYMVHBbyMCABFAABL64oAAP8RYP7AqAUQqF8BAfeMADUAN6RcbYwBAAABAAAAAAAABmRsLW9icwhvZmZpY2lhbARsaW5lBW5hdmVyAmpwAAABAAE="}
00659{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1111,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":121,"flow_packet_id":1,"flow_first_seen":1470104414395,"flow_last_seen":0,"flow_min_l4_payload_len":47,"flow_max_l4_payload_len":47,"flow_tot_l4_payload_len":47,"flow_avg_l4_payload_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"168.95.1.1","src_port":63372,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"dl-obs.official.line.naver.jp","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
00729{"flow_id":121,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1112,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":402314,"pkt_caplen":289,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":289,"pkt_l4_len":255,"pkt":"ABxCjnAxTF4M6gNlCABFAAET0UQAAPgRgXyoXwEBwKgFEAA194wA\/yfZbYyBgAABAAYAAAAABmRsLW9icwhvZmZpY2lhbARsaW5lBW5hdmVyAmpwAAABAAHADAAFAAEAAUxDAC0GZGwtb2JzCG9mZmljaWFsBGxpbmUFbmF2ZXICanAJZWRnZXN1aXRlA25ldADAOwAFAAEAAACwADUKY2FjLWRsLW9icwhvZmZpY2lhbARsaW5lBW5hdmVyAmpwCWxpbmUtemVybwZha2FkbnPAY8B0AAUAAQAAAQAAEgVhMTg2NwJnMgZha2FtYWnAY8C1AAEAAQAAAAUABMtFUUnAtQABAAEAAAAFAATLRVFCwLUAAQABAAAABQAEPdw+2g=="}
00687{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1112,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":121,"flow_packet_id":2,"flow_first_seen":1470104414395,"flow_last_seen":1470104414402,"flow_min_l4_payload_len":47,"flow_max_l4_payload_len":247,"flow_tot_l4_payload_len":294,"flow_avg_l4_payload_len":147,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"168.95.1.1","src_port":63372,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"dl-obs.official.line.naver.jp","num_queries":1,"num_answers":6,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"203.69.81.73"}}
00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1113,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":122,"flow_packet_id":1,"flow_first_seen":1470104414404,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"203.69.81.73","src_port":53627,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00443{"flow_id":122,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1113,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":404078,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"TF4M6gNlYMVHBbyMCABFAABA+kNAAEAGXi3AqAUQy0VRSdF7AFCoMQrOAAAAALAC\/\/8cMAAAAgQFtAEDAwUBAQgKGg+ZqwAAAAAEAgAA"}
00418{"flow_id":113,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1114,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":404710,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABxCjnAxTF4M6gNlCABFAAAoDLZAADMGEiJ36+tUwKgFEAG70J5BKwpH5fLMOlAQAB62xAAAAAAAAAAA"}
00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1116,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":123,"flow_packet_id":1,"flow_first_seen":1470104414404,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"203.69.81.73","src_port":53628,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00443{"flow_id":123,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1116,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":404981,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"TF4M6gNlYMVHBbyMCABFAABAQJ1AAEAGF9TAqAUQy0VRSdF8AFD2CJDQAAAAALAC\/\/9IVAAAAgQFtAEDAwUBAQgKGg+ZrAAAAAAEAgAA"}
00438{"flow_id":122,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1117,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":407420,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABxCjnAxTF4M6gNlCABFAAA8AABAADsGXXXLRVFJwKgFEABQ0Xu\/8FK8qDEKz6AScSAwjAAAAgQFtAQCCAobhF1GGg+ZqwEDAwU="}
00426{"flow_id":122,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1118,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":407471,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlYMVHBbyMCABFAAA0pGZAAEAGtBbAqAUQy0VRSdF7AFCoMQrPv\/BSvYAQEBXAXgAAAQEIChoPma4bhF1G"}
00437{"flow_id":123,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1119,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":407965,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABxCjnAxTF4M6gNlCABFAAA8AABAADsGXXXLRVFJwKgFEABQ0Xzxz9ee9giQ0aAScSCl7QAAAgQFtAQCCAobhF1HGg+ZrAEDAwU="}
00426{"flow_id":123,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1120,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":407997,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlYMVHBbyMCABFAAA0fmZAAEAG2hbAqAUQy0VRSdF8AFD2CJDR8c\/Xn4AQEBU1wQAAAQEIChoPma4bhF1H"}
00789{"flow_id":123,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1121,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":408704,"pkt_caplen":334,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":334,"pkt_l4_len":300,"pkt":"TF4M6gNlYMVHBbyMCABFAAFAl1xAAEAGwBTAqAUQy0VRSdF8AFD2CJDR8c\/Xn4AYEBWl1AAAAQEIChoPma8bhF1HR0VUIC9yL3RhbGsvbS80Njk3NzE2OTcxNTAwL3ByZXZpZXcgSFRUUC8xLjENCkFjY2VwdC1FbmNvZGluZzogZ3ppcCwgZGVmbGF0ZQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KQ29udGVudC1MZW5ndGg6IDANCkhvc3Q6IGRsLW9icy5vZmZpY2lhbC5saW5lLm5hdmVyLmpwDQpVc2VyLUFnZW50OiBERVNLVE9QOk1BQzoxMC4xMC41LVlPU0VNSVRFKDQuNy4yKQ0KWC1MaW5lLUFwcGxpY2F0aW9uOiBERVNLVE9QTUFDCTQuNy4yCU1BQwkxMC4xMC41LVlPU0VNSVRFDQoNCg=="}
00731{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1121,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":123,"flow_packet_id":4,"flow_first_seen":1470104414404,"flow_last_seen":1470104414408,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":268,"flow_tot_l4_payload_len":268,"flow_avg_l4_payload_len":67,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"203.69.81.73","src_port":53628,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"dl-obs.official.line.naver.jp","url":"dl-obs.official.line.naver.jp\/r\/talk\/m\/4697716971500\/preview","code":0,"content_type":"","user_agent":"DESKTOP:MAC:10.10.5-YOSEMITE(4.7.2)"}}
00789{"flow_id":122,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1122,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":408737,"pkt_caplen":334,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":334,"pkt_l4_len":300,"pkt":"TF4M6gNlYMVHBbyMCABFAAFATvVAAEAGCHzAqAUQy0VRSdF7AFCoMQrPv\/BSvYAYEBUpZwAAAQEIChoPma8bhF1GR0VUIC9yL3RhbGsvbS80Njk3NzE2OTU0Njg4L3ByZXZpZXcgSFRUUC8xLjENCkFjY2VwdC1FbmNvZGluZzogZ3ppcCwgZGVmbGF0ZQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KQ29udGVudC1MZW5ndGg6IDANCkhvc3Q6IGRsLW9icy5vZmZpY2lhbC5saW5lLm5hdmVyLmpwDQpVc2VyLUFnZW50OiBERVNLVE9QOk1BQzoxMC4xMC41LVlPU0VNSVRFKDQuNy4yKQ0KWC1MaW5lLUFwcGxpY2F0aW9uOiBERVNLVE9QTUFDCTQuNy4yCU1BQwkxMC4xMC41LVlPU0VNSVRFDQoNCg=="}
00731{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1122,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":122,"flow_packet_id":4,"flow_first_seen":1470104414404,"flow_last_seen":1470104414408,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":268,"flow_tot_l4_payload_len":268,"flow_avg_l4_payload_len":67,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"203.69.81.73","src_port":53627,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"dl-obs.official.line.naver.jp","url":"dl-obs.official.line.naver.jp\/r\/talk\/m\/4697716954688\/preview","code":0,"content_type":"","user_agent":"DESKTOP:MAC:10.10.5-YOSEMITE(4.7.2)"}}
00425{"flow_id":123,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1123,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":414084,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABxCjnAxTF4M6gNlCABFAAA0itRAADsG0qjLRVFJwKgFEABQ0Xzxz9ef9giR3YAQA6tBGgAAAQEIChuEXUsaD5mv"}
00427{"flow_id":122,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1124,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":415614,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABxCjnAxTF4M6gNlCABFAAA0D\/ZAADsGTYfLRVFJwKgFEABQ0Xu\/8FK9qDEL24AQA6vLtgAAAQEIChuEXUsaD5mv"}
02384{"flow_id":123,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1125,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":418773,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"}
02391{"flow_id":123,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1126,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":418822,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"}
02393{"flow_id":122,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1127,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":418842,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"}
02389{"flow_id":122,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1128,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":418860,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"}
02383{"flow_id":123,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1129,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":418880,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"}
02390{"flow_id":123,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1130,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":418897,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"}
02393{"flow_id":122,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1131,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":418915,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"}
02396{"flow_id":122,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1132,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":418933,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"}
00428{"flow_id":123,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1133,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":418949,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlYMVHBbyMCABFAAA00q1AAEAGhc\/AqAUQy0VRSdF8AFD2CJHd8c\/i74AQD7spsgAAAQEIChoPmbcbhF1L"}
00427{"flow_id":122,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1134,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":418966,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlYMVHBbyMCABFAAA0qe5AAEAGro7AqAUQy0VRSdF7AFCoMQvbv\/BeDYAQD7u0TgAAAQEIChoPmbcbhF1L"}
00427{"flow_id":123,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1135,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":418983,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlYMVHBbyMCABFAAA02ZpAAEAGfuLAqAUQy0VRSdF8AFD2CJHd8c\/uP4AQD2AevQAAAQEIChoPmbcbhF1L"}
00427{"flow_id":122,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1136,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":418998,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlYMVHBbyMCABFAAA0A2tAAEAGVRLAqAUQy0VRSdF7AFCoMQvbv\/BpXYAQD2CpWQAAAQEIChoPmbcbhF1L"}
02389{"flow_id":123,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1137,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":419889,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"ABxCjnAxTF4M6gNlCABFAAXcitlAADsGzPvLRVFJwKgFEABQ0Xzxz+4\/9giR3YAQA6sXGQAAAQEIChuEXUsaD5mv0XA+QDqQDXr1mfxhv5Uf9xqP4tIT3Yo\/U0e6IjUrI\/4gkC4eDDCw7R7kDoKseKTDeOIev1rMx08mMxmZhayhBYG2upo9kX0VDs2OCw9ngu0Is0rZvIbD9+NP2rJXiMqIscfZBVAUADkK8cfij98Af7RSWaKRLduzVtXsprHONxB3nb4WFUbGzDeaT++1P3L8QjcVDdtOf6CrhOtc9Ji5csf2h7y31kPUj9KE+IdhrKvqTR7P4GqOlQDJmOmbX6fKoV0DPd1He018BXM+0L+O\/wDtWrPiAEi9\/VCen3jS3fwdnRJNEoKmVBlNveG3L5Vbt4f5qf3VzAxIvezkedSJwfuOfjRuwbOiaaIkHtFsPGq9vCC15V1Nx6VhpMCkh7E6Ab89al5iEjIh3Xn\/ALjR7GI3PaoR\/qr86g4qAiwkvqDseRrBM8n8oCrJLIX2A7rcv6TR7GKzb9ugH3j6VBx8H9Z8hWF20n4x6VHauRfPcdb0vYws2zxGH8MnoPrVG4hEPuSa6jb61jF35k+tTKzfZ+97n6ml7JAaHDcdg8HhY2dMhlBYuqcg2XX5Vqy4vDxRCV5kCNsb3v5Vy0SieDA4YOEE8bqWIvYCQt+lElw4E08ivlJNyqgjNfW2\/wC\/hVW4rgdtGxNxOGaWPDxpnWRgM52IvY2pKLGyJHh8hUFxmJJsCcxGvpVJYRhOJ4SMvnDSjL3CoUZgdLk9aXhZZBgEYCzrY+XaNes5Jt2Jtm6nF8K0RclwRoRlNKe2nE4xYyB2U1gBe9gR+f60mwgCjIxtYMVzDYXufyt51fDOi8RgRMxGbc\/vpa\/jehyk6TC2EEzJDCFaVQUDsYwed9Tp5CiLK\/OXFjXW+bw8KXM7XwqBxGHhW5bYanf0ohlmGvtcOuu41sQP0qKFYwJMwKdpM+bN\/wAwGwsCQQSN9BUJM6xxqHZAyBrg21LW1+FLJiZPazEZVkADm62tfITUFpZVg7NQfs1vdgNSzAUmm+Uh2OHEsunau29yG05Wq+ZJj2UkhkVtwdeR5+FqWnx0rDtRDlCBlYhgQCR\/j514CZOII0gCq1wBmB1C+FGjvgexYJGkC9k8kedjdo2IY2tpc36158M5JtxDHDUDW\/0paGQNBhyzlVDSEsNbWy1JmlkB+1kZrA6R315X9BTjshbBTHiEaEdvJOsj5ZFlJylbgaAis98LIsjIMPcAkA5+V6euC8aiaRwki5FMeXS4vy86TlkInk73325+NU5SSE2UGHm1vApHIZh9akYaQb4dT\/3D617tWv71NYUJJh5ndWbIVsVuSu+pH4fLWpUpt0F2AMLFUBgF1W3v7ak9fGoEDZrmJBprrTmM7KLBLKmRSwNzke+h5X2+NPTYPDxKGWLdlUglje7AczpvV1N\/BmOMOQb2jt0sas8ZtHZkGVbEZPEn9acEcPt8sXZlkMHaBbk2NxtbXnRJI4FkZVjiAvILG+Y2UbcvWlrP6FCnYIMM0puWUDUADX9kVeTDRr2dmezFRrpv\/wC\/lR4osO2FgZo1LskTMbXOpF+fS\/KluKIqHCrh40DSs62W2pBAHOoeKfdj\/CWiiXs8mbLLa+55gj5VaSCP2rsfdCx6XB1N\/nvQcFhu27USpIZI5FQojAZb7k0LuRS4xjZ48OSi3+8xNh58z8KXrn9C\/wCBmKCIzTCQWCWK2JGnx386GOzSUhgwF2Ta3I0Bwq4CGdGZnkcoV5A22q8vD+IRqD7OWvyVgSKFCdi\/0DTLBFjEiK2BXMddutz8DVUjgOIeOVMtiApZrFrki4uKjB4QYhH7VJXkXEdi6ow7gtqx+NKDJGmMlIEiRsYYiR7zEnX4AE+lNYpV2MZg7GeR1QMV1ykEi+1\/zpNscdAYwCosQb0zBgoJzw5e0c+1Z85ta2UbD8qXxkUMUGFnhzhMQrHK5BIsf81axtdipkY="}
01382{"flow_id":123,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1138,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":419934,"pkt_caplen":772,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":772,"pkt_l4_len":738,"pkt":"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"}
00427{"flow_id":123,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1139,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":419954,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlYMVHBbyMCABFAAA0REFAAEAGFDzAqAUQy0VRSdF8AFD2CJHd8c\/2qYAQDx0WlQAAAQEIChoPmbgbhF1L"}
02394{"flow_id":122,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1140,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":419972,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"}
01843{"flow_id":122,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1141,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":419989,"pkt_caplen":1112,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1112,"pkt_l4_len":1078,"pkt":"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"}
00427{"flow_id":122,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1142,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":420005,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlYMVHBbyMCABFAAA0RVFAAEAGEyzAqAUQy0VRSdF7AFCoMQvbv\/BzG4AQDxKf6AAAAQEIChoPmbgbhF1L"}
02326{"flow_id":119,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1143,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":478013,"pkt_caplen":1464,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1464,"pkt_l4_len":1430,"pkt":"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"}
01107{"flow_id":119,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1144,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":478069,"pkt_caplen":566,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":566,"pkt_l4_len":532,"pkt":"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"}
00425{"flow_id":119,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1145,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":478143,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlYMVHBbyMCABFAAA0vQZAAEAGQdTAqAUQHw1XJNFMAbv8UnPoBJ2p34AQD8QRxwAAAQEIChoPmfFf7xOZ"}
00584{"flow_id":82,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1149,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":604155,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/6bEAIlAI6CABFAAClU+oAAAERr4vAqAUw7\/\/\/+sIlB2wAkY1JTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="}
00811{"flow_id":4,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1151,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":908112,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/TF4M6gNlCABFAAFIAAAAABARcfzAqHcB\/\/\/\/\/wBDAEQBNEsLAgEGAENEXMkAAAAAwKgFLcCoBS3AqHcBAAAAAOCsy3Hh0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEFNgTAqHcBMwQAAAA8AQT\/\/wAAAwTAqHcBBhCoXwEBCAgICKhfwAEICAQE\/wAAAAAAAAAAAAAAAAAA"}
00581{"flow_id":3,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1157,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104415,"pkt_ts_usec":421267,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6SNIkYzEACABFAAChOx4AAAERyF\/AqAUs7\/\/\/+si9B2wAjdLxTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="}
00584{"flow_id":12,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1161,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104415,"pkt_ts_usec":729545,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/6zD2CHu7jCABFAAClQL0AAAQRv7nAqAUv7\/\/\/+utrB2wAkWQETS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="}
00812{"flow_id":4,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1169,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104416,"pkt_ts_usec":751443,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/TF4M6gNlCABFAAFIAAAAABARcfzAqHcB\/\/\/\/\/wBDAEQBNFupAgEGAI6VUSoAAAAAwKgFCcCoBQnAqHcBAAAAAHDxofgq\/QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEFNgTAqHcBMwQAAAA8AQT\/\/wAAAwTAqHcBBhCoXwEBCAgICKhfwAEICAQE\/wAAAAAAAAAAAAAAAAAA"}
00488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1171,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":124,"flow_packet_id":1,"flow_first_seen":1470104416855,"flow_last_seen":0,"flow_min_l4_payload_len":27,"flow_max_l4_payload_len":27,"flow_tot_l4_payload_len":27,"flow_avg_l4_payload_len":27,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.101.33","dst_ip":"224.0.0.252","src_port":62822,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00432{"flow_id":124,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1171,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104416,"pkt_ts_usec":855491,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"AQBeAAD8uKxvwfbSCABFAAA3J2UAAAERi4vAqGUh4AAA\/PVmFOsAI\/xOWbQAAAABAAAAAAAACUpvYW5uYS1QQwAA\/wAB"}
00521{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1171,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":124,"flow_packet_id":1,"flow_first_seen":1470104416855,"flow_last_seen":0,"flow_min_l4_payload_len":27,"flow_max_l4_payload_len":27,"flow_tot_l4_payload_len":27,"flow_avg_l4_payload_len":27,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.101.33","dst_ip":"224.0.0.252","src_port":62822,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}}
00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1172,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":125,"flow_packet_id":1,"flow_first_seen":1470104416855,"flow_last_seen":0,"flow_min_l4_payload_len":27,"flow_max_l4_payload_len":27,"flow_tot_l4_payload_len":27,"flow_avg_l4_payload_len":27,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.9","dst_ip":"224.0.0.252","src_port":62822,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00432{"flow_id":125,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1172,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104416,"pkt_ts_usec":855715,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"AQBeAAD8cPGh+Cr9CABFAAA3CxAAAAERB\/nAqAUJ4AAA\/PVmFOsAI1xnWbQAAAABAAAAAAAACUpvYW5uYS1QQwAA\/wAB"}
00518{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1172,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":125,"flow_packet_id":1,"flow_first_seen":1470104416855,"flow_last_seen":0,"flow_min_l4_payload_len":27,"flow_max_l4_payload_len":27,"flow_tot_l4_payload_len":27,"flow_avg_l4_payload_len":27,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.9","dst_ip":"224.0.0.252","src_port":62822,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}}
00432{"flow_id":124,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1173,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104416,"pkt_ts_usec":958909,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"AQBeAAD8uKxvwfbSCABFAAA3J2cAAAERi4nAqGUh4AAA\/PVmFOsAI\/xOWbQAAAABAAAAAAAACUpvYW5uYS1QQwAA\/wAB"}
00432{"flow_id":125,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1174,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104416,"pkt_ts_usec":959044,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"AQBeAAD8cPGh+Cr9CABFAAA3CxIAAAERB\/fAqAUJ4AAA\/PVmFOsAI1xnWbQAAAABAAAAAAAACUpvYW5uYS1QQwAA\/wAB"}
00579{"flow_id":57,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1177,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104417,"pkt_ts_usec":62567,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6uKxvwfbSCABFAAChJ2gAAAERfCDAqGUh7\/\/\/+ti9B2wAjWL8TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="}
00579{"flow_id":58,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1178,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104417,"pkt_ts_usec":62763,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6cPGh+Cr9CABFAAChCxcAAAER+InAqAUJ7\/\/\/+ti8B2wAjcMVTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="}
00581{"flow_id":21,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1179,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104417,"pkt_ts_usec":62844,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6\/PiuMpcsCABFAAChLEoAAAER2QDAqANf7\/\/\/+uhMB2wAjbUvTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="}
00581{"flow_id":56,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1181,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104417,"pkt_ts_usec":265447,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6CJ4BzeuNCABFAAChFFcAAAER7y3AqAUl7\/\/\/+t\/tB2wAjbvITS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="}
00580{"flow_id":3,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1194,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104418,"pkt_ts_usec":393074,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6SNIkYzEACABFAAChOx8AAAERyF7AqAUs7\/\/\/+si9B2wAjdLxTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="}
00586{"flow_id":59,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1195,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104418,"pkt_ts_usec":493818,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/66LH8q\/uyCABFAAClCgUAAAQR9m\/AqAUx7\/\/\/+sn4B2wAkYV1TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="}
00473{"flow_id":102,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1196,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104418,"pkt_ts_usec":595853,"pkt_caplen":98,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":98,"pkt_l4_len":44,"pkt":"MzMAAQACvO57DLPeht1gAAAAACwRAf6AAAAAAAAAvu57\/\/4Ms97\/AgAAAAAAAAAAAAAAAQACAiICIwAseAoLBzLAAAEADgABAAEa5zhrJpdxkWmjAAgAAgWtAAYABAAXABg="}
00488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1200,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":126,"flow_packet_id":1,"flow_first_seen":1470104419061,"flow_last_seen":0,"flow_min_l4_payload_len":101,"flow_max_l4_payload_len":101,"flow_tot_l4_payload_len":101,"flow_avg_l4_payload_len":101,"midstream":1,"l3_proto":"ip4","src_ip":"31.13.87.1","dst_ip":"192.168.5.16","src_port":443,"dst_port":53578,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00565{"flow_id":126,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1200,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104419,"pkt_ts_usec":61215,"pkt_caplen":167,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":167,"pkt_l4_len":133,"pkt":"ABxCjnAxTF4M6gNlCABFAACZI1ZAAFgGw0IfDVcBwKgFEAG70UpuASLeX6ylxYAYAJ4ivgAAAQEICp0wiHcaDujhFwMDAGCI1MTiGjgHtvACFdJlLWU4Nw2FMu4PdWcz\/2qZKGCdERXjWW+\/VFKnsNQj6agVS5OakWCEMlC4HzCUNHzoAeDAfMWTlTRJFP0wq7r0D4aYTL9j7QTQTC0wsTFBdRQvfIs="}
00426{"flow_id":126,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1201,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104419,"pkt_ts_usec":61264,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlYMVHBbyMCABFAAA0qwZAAEAGU\/fAqAUQHw1XAdFKAbtfrKXFbgEjQ4AQD\/zVtQAAAQEIChoPq9GdMIh3"}
01993{"flow_id":126,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1202,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104419,"pkt_ts_usec":103565,"pkt_caplen":1223,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1223,"pkt_l4_len":1189,"pkt":"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"}
00425{"flow_id":126,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1203,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104419,"pkt_ts_usec":110763,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABxCjnAxTF4M6gNlCABFAAA0I1dAAFgGw6YfDVcBwKgFEAG70UpuASNDX6yqSoAQAKfgKwAAAQEICp0wiKcaD6v7"}
00977{"flow_id":126,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1205,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104419,"pkt_ts_usec":316065,"pkt_caplen":471,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":471,"pkt_l4_len":437,"pkt":"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"}
00427{"flow_id":126,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1206,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104419,"pkt_ts_usec":316113,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlYMVHBbyMCABFAAA0sW5AAEAGTY\/AqAUQHw1XAdFKAbtfrKpKbgEk2IAQD\/PNsQAAAQEIChoPrM+dMIls"}
00545{"flow_id":126,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1207,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104419,"pkt_ts_usec":316993,"pkt_caplen":151,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":151,"pkt_l4_len":117,"pkt":"ABxCjnAxTF4M6gNlCABFAACJI1lAAFgGw08fDVcBwKgFEAG70UpuASTYX6yqSoAYAKdAMwAAAQEICp0wiWwaD6v7FwMDAFBDyuXvoyI2haLjKmC0633hxaDIQQGoYHTHPhTSuFKmC0Fl2+vFzFCYkxIEx6znxHK\/Mzr9bwCL6aBUwxgPNo3Y70t47Ll2MzPaVeWl72DZkQ=="}
00426{"flow_id":126,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1208,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104419,"pkt_ts_usec":317025,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlYMVHBbyMCABFAAA06XJAAEAGFYvAqAUQHw1XAdFKAbtfrKpKbgElLYAQD\/3NUgAAAQEIChoPrM+dMIls"}
00545{"flow_id":126,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1209,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104419,"pkt_ts_usec":317161,"pkt_caplen":151,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":151,"pkt_l4_len":117,"pkt":"ABxCjnAxTF4M6gNlCABFAACJI1pAAFgGw04fDVcBwKgFEAG70UpuASTYX6yqSoAYAKdAJwAAAQEICp0wiXgaD6v7FwMDAFBDyuXvoyI2haLjKmC0633hxaDIQQGoYHTHPhTSuFKmC0Fl2+vFzFCYkxIEx6znxHK\/Mzr9bwCL6aBUwxgPNo3Y70t47Ll2MzPaVeWl72DZkQ=="}
00426{"flow_id":126,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1210,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104419,"pkt_ts_usec":317184,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlYMVHBbyMCABFAAA0r1VAAEAGT6jAqAUQHw1XAdFKAbtfrKpKbgElLYAQEADNQgAAAQEIChoPrNCdMIl4"}
00580{"flow_id":57,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1219,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104420,"pkt_ts_usec":130624,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6uKxvwfbSCABFAAChJ2wAAAERfBzAqGUh7\/\/\/+ti9B2wAjWL8TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="}
00581{"flow_id":58,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1220,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104420,"pkt_ts_usec":130761,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6cPGh+Cr9CABFAAChDUEAAAER9l\/AqAUJ7\/\/\/+ti8B2wAjcMVTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="}
00583{"flow_id":21,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1221,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104420,"pkt_ts_usec":131289,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6\/PiuMpcsCABFAAChLEsAAAER2P\/AqANf7\/\/\/+uhMB2wAjbUvTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="}
00581{"flow_id":56,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1226,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104420,"pkt_ts_usec":336841,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6CJ4BzeuNCABFAAChFFgAAAER7yzAqAUl7\/\/\/+t\/tB2wAjbvITS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="}
00485{"flow_id":120,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1227,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104420,"pkt_ts_usec":381782,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"ABxCjnAxABAj4ACgCABFAABdBAdAAEAGPOjAqHNLwKgFEAG70XokV4PRNCDf9FAYAEYuHAAAFQMDADDWsSdp8D1F8v6K\/yiku3mSJ30Pt4LDalLjUpv0bNJQ9mOQU0lINWhpv4glMt2mNy4="}
00418{"flow_id":120,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1228,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104420,"pkt_ts_usec":381827,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABxCjnAxABAj4ACgCABFAAAoBAhAAEAGPRzAqHNLwKgFEAG70XokV4QGNCDf9FARAEYmOQAAAAAAAAAA"}
00497{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1231,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":127,"flow_packet_id":1,"flow_first_seen":1470104420438,"flow_last_seen":0,"flow_min_l4_payload_len":25,"flow_max_l4_payload_len":25,"flow_tot_l4_payload_len":25,"flow_avg_l4_payload_len":25,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::5d92:62a8:ebde:1319","dst_ip":"ff02::1:3","src_port":61172,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00455{"flow_id":127,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1231,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104420,"pkt_ts_usec":438972,"pkt_caplen":87,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":87,"pkt_l4_len":33,"pkt":"MzMAAQADPKn0WgOEht1gAAAAACERAf6AAAAAAAAAXZJiqOveExn\/AgAAAAAAAAAAAAAAAQAD7vQU6wAh24kTvAAAAAEAAAAAAAAHc29udXNhdgAAAQAB"}
00530{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1231,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":127,"flow_packet_id":1,"flow_first_seen":1470104420438,"flow_last_seen":0,"flow_min_l4_payload_len":25,"flow_max_l4_payload_len":25,"flow_tot_l4_payload_len":25,"flow_avg_l4_payload_len":25,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::5d92:62a8:ebde:1319","dst_ip":"ff02::1:3","src_port":61172,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}}
00455{"flow_id":127,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1232,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104420,"pkt_ts_usec":540216,"pkt_caplen":87,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":87,"pkt_l4_len":33,"pkt":"MzMAAQADPKn0WgOEht1gAAAAACERAf6AAAAAAAAAXZJiqOveExn\/AgAAAAAAAAAAAAAAAQAD7vQU6wAh24kTvAAAAAEAAAAAAAAHc29udXNhdgAAAQAB"}
00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1233,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":128,"flow_packet_id":1,"flow_first_seen":1470104420541,"flow_last_seen":0,"flow_min_l4_payload_len":25,"flow_max_l4_payload_len":25,"flow_tot_l4_payload_len":25,"flow_avg_l4_payload_len":25,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.236","dst_ip":"224.0.0.252","src_port":59730,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00432{"flow_id":128,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1233,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104420,"pkt_ts_usec":541021,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"AQBeAAD8PKn0WgOECABFAAA1H\/gAAAER9C\/AqAPs4AAA\/OlSFOsAIfhUE7wAAAABAAAAAAAAB3NvbnVzYXYAAAEAAQ=="}
00520{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1233,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":128,"flow_packet_id":1,"flow_first_seen":1470104420541,"flow_last_seen":0,"flow_min_l4_payload_len":25,"flow_max_l4_payload_len":25,"flow_tot_l4_payload_len":25,"flow_avg_l4_payload_len":25,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.236","dst_ip":"224.0.0.252","src_port":59730,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}}
00492{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1234,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":129,"flow_packet_id":1,"flow_first_seen":1470104420541,"flow_last_seen":0,"flow_min_l4_payload_len":40,"flow_max_l4_payload_len":40,"flow_tot_l4_payload_len":40,"flow_avg_l4_payload_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"59.120.208.218","dst_ip":"255.255.255.255","src_port":50151,"dst_port":1947,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00462{"flow_id":129,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1234,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104420,"pkt_ts_usec":541205,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"\/\/\/\/\/\/\/\/rCILUFkxCABFAABEAABAAEARLlc7eNDa\/\/\/\/\/8PnB5sAMKByU3Uyb1ZTdDRBQUJIWlc1MGNtbGpaVjlCVUVOZlozVmxjM1FBYldVQQ=="}
00497{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1236,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":130,"flow_packet_id":1,"flow_first_seen":1470104420950,"flow_last_seen":0,"flow_min_l4_payload_len":317,"flow_max_l4_payload_len":317,"flow_tot_l4_payload_len":317,"flow_avg_l4_payload_len":317,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.10.110","dst_ip":"255.255.255.255","src_port":60480,"dst_port":62976,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00837{"flow_id":130,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1236,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104420,"pkt_ts_usec":950055,"pkt_caplen":359,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":359,"pkt_l4_len":325,"pkt":"\/\/\/\/\/\/\/\/XNmY3fXzCABFAAFZAABAAEARbn7AqApu\/\/\/\/\/+xA9gABRTgx\/\/8AAKAAXNmY3fXzwKgKbgAAAgAnAUROUy0xMTAwLTA0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABOQVMAAAAAAAAAAAAAVVqvihgAAABVWsE9WwAAAFVasDEuMDJiMTAAEXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXNmY3fXzM0ExAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGRsaW5rLURERjVGMwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqApu\/\/8AAExBTjEAAAAAAAAAAAAAAAAAAAAAAAAAAAA="}
00472{"flow_id":73,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1242,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104421,"pkt_ts_usec":462835,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/PKn0WgOECABFAABOH\/0AAIARlWXAqAPswKj\/\/wCJAIkAOopRimMBEAABAAAAAAAAIEZERVBFT0ZGRkRFQkZHQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAE="}
00585{"flow_id":59,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1244,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104421,"pkt_ts_usec":566487,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/66LH8q\/uyCABFAAClCgYAAAQR9m7AqAUx7\/\/\/+sn4B2wAkYV1TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="}
00507{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1250,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":131,"flow_packet_id":1,"flow_first_seen":1470104422079,"flow_last_seen":0,"flow_min_l4_payload_len":329,"flow_max_l4_payload_len":329,"flow_tot_l4_payload_len":329,"flow_avg_l4_payload_len":329,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b020:6::c2a0:bbff:fe73:eb57","dst_ip":"ff02::1","src_port":62976,"dst_port":62976,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00874{"flow_id":131,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1250,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104422,"pkt_ts_usec":79572,"pkt_caplen":391,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":391,"pkt_l4_len":337,"pkt":"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"}
00472{"flow_id":73,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1251,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104422,"pkt_ts_usec":179603,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/PKn0WgOECABFAABOH\/4AAIARlWTAqAPswKj\/\/wCJAIkAOopRimMBEAABAAAAAAAAIEZERVBFT0ZGRkRFQkZHQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAE="}
00426{"flow_id":63,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1256,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104422,"pkt_ts_usec":398902,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABxCjnAxTF4M6gNlCABFAAA08IlAADUGTRNE6f2FwKgFEABQ0Xh2OPIDHrFHw4ARAB\/erwAAAQEICs8em0UaD2rZ"}
00426{"flow_id":63,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1257,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104422,"pkt_ts_usec":398955,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlYMVHBbyMCABFAAA01A1AAEAGXo\/AqAUQROn9hdF4AFAesUfDdjjyBIAQEAGA1AAAAQEIChoPuNLPHptF"}
00810{"flow_id":78,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1258,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104422,"pkt_ts_usec":690570,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/4MqUa5ZECABFEAFIAAAAAIAROZYAAAAA\/\/\/\/\/wBEAEMBNJruAQEGAD3Z62IAAAAAAAAAAAAAAAAAAAAAAAAAAODKlGuWRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBMgTAqAVDDBRzYW5qaS1MSUZFQk9PSy1MSDUzMTcRARwCAw8GdwwsLxp5Knn5\/Cr\/AAAAAAAAAAAA"}
00413{"flow_id":15,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1260,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104422,"pkt_ts_usec":868886,"pkt_caplen":55,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":55,"pkt_l4_len":21,"pkt":"TF4M6gNlABxCjnAxCABFAAApUpxAAIAG5lrAqHMIarkjbsG9AFA9WFL+c+sff1AQAQAHLQAAAA=="}
00413{"flow_id":15,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1261,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104422,"pkt_ts_usec":868933,"pkt_caplen":55,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":55,"pkt_l4_len":21,"pkt":"TF4M6gNlABxCjnAxCABFAAApUpxAAIAG5lrAqHMIarkjbsG9AFA9WFL+c+sff1AQAQAHLQAAAA=="}
00428{"flow_id":15,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1262,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104422,"pkt_ts_usec":913733,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABxCjnAxTF4M6gNlCABFAAA0Ow5AADYGR95quSNuwKhzCABQwb1z6x9\/PVhS\/4AQAO2wegAAAQEFCj1YUv49WFL\/"}
00580{"flow_id":58,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1265,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104423,"pkt_ts_usec":102735,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6cPGh+Cr9CABFAAChDVwAAAER9kTAqAUJ7\/\/\/+ti8B2wAjcMVTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="}
00582{"flow_id":21,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1266,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104423,"pkt_ts_usec":102951,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6\/PiuMpcsCABFAAChLEwAAAER2P7AqANf7\/\/\/+uhMB2wAjbUvTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="}
00494{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1270,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":132,"flow_packet_id":1,"flow_first_seen":1470104423202,"flow_last_seen":0,"flow_min_l4_payload_len":36,"flow_max_l4_payload_len":36,"flow_tot_l4_payload_len":36,"flow_avg_l4_payload_len":36,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::f65c:89ff:fe89:e607","dst_ip":"ff02::1:2","src_port":546,"dst_port":547,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00476{"flow_id":132,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1270,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104423,"pkt_ts_usec":202821,"pkt_caplen":98,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":98,"pkt_l4_len":44,"pkt":"MzMAAQAC9FyJieYHht1gD8\/5ACwRAf6AAAAAAAAA9lyJ\/\/6J5gf\/AgAAAAAAAAAAAAAAAQACAiICIwAsGIELuXYqAAEADgABAAEeo3uS9FyJieYHAAYABAAXABgACAAC\/\/8="}
00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1270,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":132,"flow_packet_id":1,"flow_first_seen":1470104423202,"flow_last_seen":0,"flow_min_l4_payload_len":36,"flow_max_l4_payload_len":36,"flow_tot_l4_payload_len":36,"flow_avg_l4_payload_len":36,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::f65c:89ff:fe89:e607","dst_ip":"ff02::1:2","src_port":546,"dst_port":547,"l4_proto":"udp","ndpi": {"proto":"DHCPV6","breed":"Acceptable","category":"Network"}}
00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1271,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":133,"flow_packet_id":1,"flow_first_seen":1470104423246,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"192.168.115.75","src_port":53629,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00443{"flow_id":133,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1271,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104423,"pkt_ts_usec":246688,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"ABAj4ACgYMVHBbyMCABFAABAVdFAAEAG6zrAqAUQwKhzS9F9AbtloPklAAAAALAC\/\/81IwAAAgQFtAEDAwUBAQgKGg+8HwAAAAAEAgAA"}
00425{"flow_id":133,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1272,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104423,"pkt_ts_usec":247634,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABxCjnAxABAj4ACgCABFAAA0AABAAEAGQRjAqHNLwKgFEAG70X2C0DtLZaD5JoASFtBuaQAAAgQFtAEBBAIBAwMH"}
00418{"flow_id":133,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1273,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104423,"pkt_ts_usec":247712,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABAj4ACgYMVHBbyMCABFAAAoVNRAAEAG7E\/AqAUQwKhzS9F9AbtloPkmgtA7TFAQIACmCwAAUC8xLjEN"}
00699{"flow_id":133,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1274,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104423,"pkt_ts_usec":248266,"pkt_caplen":267,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":267,"pkt_l4_len":233,"pkt":"ABAj4ACgYMVHBbyMCABFAAD9MJBAAEAGD7\/AqAUQwKhzS9F9AbtloPkmgtA7TFAYIADmPAAAFgMBANABAADMAwNXoANoBxB0UxaEmGMMRA4z3rCwUCfHq4lItmIHvO2HwSBj+Q0TSc5VhLmmiAAqPOtufQBM8Qziz0QZmZNFeVk8eABKAP\/AJMAjwArACcAIwCjAJ8AUwBPAEsAmwCXABcAEwAPAKsApwA\/ADsANAGsAZwA5ADMAFgA9ADwANQAvAArAB8ARwALADAAFAAQBAAA5AAAAEwARAAAOMTkyLjE2OC4xMTUuNzUACgAIAAYAFwAYABkACwACAQAADQAMAAoFAQQBAgEEAwID"}
00759{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1274,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":133,"flow_packet_id":4,"flow_first_seen":1470104423246,"flow_last_seen":1470104423248,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":213,"flow_tot_l4_payload_len":213,"flow_avg_l4_payload_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"192.168.115.75","src_port":53629,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"192.168.115.75","ja3":"618ee2509ef52bf0b8216e1564eea909","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
00417{"flow_id":133,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1275,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104423,"pkt_ts_usec":249191,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABxCjnAxABAj4ACgCABFAAAosy5AAEAGjfXAqHNLwKgFEAG70X2C0DtMZaD5+1AQADbFAAAAAAAAAAAA"}
00632{"flow_id":133,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1276,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104423,"pkt_ts_usec":251782,"pkt_caplen":215,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":215,"pkt_l4_len":181,"pkt":"ABxCjnAxABAj4ACgCABFAADJsy9AAEAGjVPAqHNLwKgFEAG70X2C0DtMZaD5+1AYADZbuQAAFgMDAFECAABNAwNP+v5MrhPT7gCV6+7l8OEnW6u9CIMrhxz\/CnbSwmfX6yBj+Q0TSc5VhLmmiAAqPOtufQBM8Qziz0QZmZNFeVk8eAAvAAAF\/wEAAQAUAwMAAQEWAwMAQP7fioxuoIuCjn4HHOe6A8jxR2QStU3BBo0dV8n25rs7AjOsZc+II3taGzY\/k\/vNUSTTPW02U9hA0sRTvf0Kf6U="}
00826{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1276,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":133,"flow_packet_id":6,"flow_first_seen":1470104423246,"flow_last_seen":1470104423251,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":213,"flow_tot_l4_payload_len":374,"flow_avg_l4_payload_len":62,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"192.168.115.75","src_port":53629,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"8":"Weak TLS cipher","15":"TLS (probably) not carrying HTTPS"},"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"192.168.115.75","ja3":"618ee2509ef52bf0b8216e1564eea909","ja3s":"573a9f3f80037fb40d481e2054def5bb","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA"}}
00418{"flow_id":133,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1277,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104423,"pkt_ts_usec":251818,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABAj4ACgYMVHBbyMCABFAAAojapAAEAGs3nAqAUQwKhzS9F9AbtloPn7gtA77VAQH\/qkmwAAVFRQLzEu"}
00417{"flow_id":133,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1278,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104423,"pkt_ts_usec":251931,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"ABAj4ACgYMVHBbyMCABFAAAuEO1AAEAGMDHAqAUQwKhzS9F9AbtloPn7gtA77VAYIACMgwAAFAMDAAEB"}
00504{"flow_id":133,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1279,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104423,"pkt_ts_usec":251958,"pkt_caplen":123,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":123,"pkt_l4_len":89,"pkt":"ABAj4ACgYMVHBbyMCABFAABteDRAAEAGyKrAqAUQwKhzS9F9AbtloPoBgtA77VAYIACEEwAAFgMDAEAMRT2\/rw1RVhtHYa6MIHkNyub7aRPCH9JZHXrMtUzyIcUA3wBPgDvlbAIfiMcwhF0YjOq7KE9AIjRBZ8QVLcaR"}
00418{"flow_id":133,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1280,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104423,"pkt_ts_usec":253109,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABxCjnAxABAj4ACgCABFAAAoszBAAEAGjfPAqHNLwKgFEAG70X2C0DvtZaD6RlAQADbEFAAAAAAAAAAA"}
01791{"flow_id":133,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1281,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104423,"pkt_ts_usec":298822,"pkt_caplen":1067,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1067,"pkt_l4_len":1033,"pkt":"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"}
00522{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":1282,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":131,"flow_packet_id":1,"flow_first_seen":1470104422079,"flow_last_seen":0,"flow_min_l4_payload_len":329,"flow_max_l4_payload_len":329,"flow_tot_l4_payload_len":329,"flow_avg_l4_payload_len":329,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b020:6::c2a0:bbff:fe73:eb57","dst_ip":"ff02::1","src_port":62976,"dst_port":62976,"l4_proto":"udp","ndpi": {"proto":"Unknown","breed":"Unrated"}}
00508{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1282,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":131,"flow_packet_id":1,"flow_first_seen":1470104422079,"flow_last_seen":0,"flow_min_l4_payload_len":329,"flow_max_l4_payload_len":329,"flow_tot_l4_payload_len":329,"flow_avg_l4_payload_len":329,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b020:6::c2a0:bbff:fe73:eb57","dst_ip":"ff02::1","src_port":62976,"dst_port":62976,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00490{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1282,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":118,"flow_packet_id":1,"flow_first_seen":1470104413679,"flow_last_seen":0,"flow_min_l4_payload_len":300,"flow_max_l4_payload_len":300,"flow_tot_l4_payload_len":300,"flow_avg_l4_payload_len":300,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.41","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00512{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":1282,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":130,"flow_packet_id":1,"flow_first_seen":1470104420950,"flow_last_seen":0,"flow_min_l4_payload_len":317,"flow_max_l4_payload_len":317,"flow_tot_l4_payload_len":317,"flow_avg_l4_payload_len":317,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.10.110","dst_ip":"255.255.255.255","src_port":60480,"dst_port":62976,"l4_proto":"udp","ndpi": {"proto":"Unknown","breed":"Unrated"}}
00498{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1282,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":130,"flow_packet_id":1,"flow_first_seen":1470104420950,"flow_last_seen":0,"flow_min_l4_payload_len":317,"flow_max_l4_payload_len":317,"flow_tot_l4_payload_len":317,"flow_avg_l4_payload_len":317,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.10.110","dst_ip":"255.255.255.255","src_port":60480,"dst_port":62976,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00507{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":1282,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":129,"flow_packet_id":1,"flow_first_seen":1470104420541,"flow_last_seen":0,"flow_min_l4_payload_len":40,"flow_max_l4_payload_len":40,"flow_tot_l4_payload_len":40,"flow_avg_l4_payload_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"59.120.208.218","dst_ip":"255.255.255.255","src_port":50151,"dst_port":1947,"l4_proto":"udp","ndpi": {"proto":"Unknown","breed":"Unrated"}}
00493{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1282,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":129,"flow_packet_id":1,"flow_first_seen":1470104420541,"flow_last_seen":0,"flow_min_l4_payload_len":40,"flow_max_l4_payload_len":40,"flow_tot_l4_payload_len":40,"flow_avg_l4_payload_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"59.120.208.218","dst_ip":"255.255.255.255","src_port":50151,"dst_port":1947,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00495{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1282,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":132,"flow_packet_id":1,"flow_first_seen":1470104423202,"flow_last_seen":0,"flow_min_l4_payload_len":36,"flow_max_l4_payload_len":36,"flow_tot_l4_payload_len":36,"flow_avg_l4_payload_len":36,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::f65c:89ff:fe89:e607","dst_ip":"ff02::1:2","src_port":546,"dst_port":547,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1282,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":128,"flow_packet_id":1,"flow_first_seen":1470104420541,"flow_last_seen":0,"flow_min_l4_payload_len":25,"flow_max_l4_payload_len":25,"flow_tot_l4_payload_len":25,"flow_avg_l4_payload_len":25,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.236","dst_ip":"224.0.0.252","src_port":59730,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
01775{"flow_id":133,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1282,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104423,"pkt_ts_usec":322983,"pkt_caplen":1055,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1055,"pkt_l4_len":1021,"pkt":"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"}
00419{"flow_id":133,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1283,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104423,"pkt_ts_usec":323029,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABAj4ACgYMVHBbyMCABFAAAo1A5AAEAGbRXAqAUQwKhzS9F9AbtloP47gtA\/1lAQH+CcjAAAhgDQREBA"}
00412{"flow_id":25,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1292,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104424,"pkt_ts_usec":49882,"pkt_caplen":55,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":55,"pkt_l4_len":21,"pkt":"TF4M6gNlABxCjnAxCABFAAApUqFAAIAGl4vAqHMI3kn+p8G+AFDrM0IThwePWlAQAQGYeAAAAA=="}
00412{"flow_id":25,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1293,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104424,"pkt_ts_usec":49934,"pkt_caplen":55,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":55,"pkt_l4_len":21,"pkt":"TF4M6gNlABxCjnAxCABFAAApUqFAAIAGl4vAqHMI3kn+p8G+AFDrM0IThwePWlAQAQGYeAAAAA=="}
00425{"flow_id":25,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1294,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104424,"pkt_ts_usec":115083,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABxCjnAxTF4M6gNlCABFAAA04LRAADEGWG3eSf6nwKhzCABQwb6HB49a6zNCFIAQADYInQAAAQEFCuszQhPrM0IU"}
00585{"flow_id":59,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1317,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104424,"pkt_ts_usec":537905,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/66LH8q\/uyCABFAAClCgcAAAQR9m3AqAUx7\/\/\/+sn4B2wAkYV1TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="}
00488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1318,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":134,"flow_packet_id":1,"flow_first_seen":1470104424738,"flow_last_seen":0,"flow_min_l4_payload_len":50,"flow_max_l4_payload_len":50,"flow_tot_l4_payload_len":50,"flow_avg_l4_payload_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.104","dst_ip":"192.168.255.255","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00472{"flow_id":134,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1318,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104424,"pkt_ts_usec":738880,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/AAwpjO\/4CABFAABOZ6MAAIARUUPAqABowKj\/\/wCJAIkAOgIy8PkBEAABAAAAAAAAIEZERURDT0VCRkNGQ0VCRU9FREVCRkNDT0VQRkNFSEFBAAAgAAE="}
00522{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1318,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":134,"flow_packet_id":1,"flow_first_seen":1470104424738,"flow_last_seen":0,"flow_min_l4_payload_len":50,"flow_max_l4_payload_len":50,"flow_tot_l4_payload_len":50,"flow_avg_l4_payload_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.104","dst_ip":"192.168.255.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","breed":"Acceptable","category":"System"}}
00472{"flow_id":134,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1325,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104425,"pkt_ts_usec":455832,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/AAwpjO\/4CABFAABOZ6QAAIARUULAqABowKj\/\/wCJAIkAOgIy8PkBEAABAAAAAAAAIEZERURDT0VCRkNGQ0VCRU9FREVCRkNDT0VQRkNFSEFBAAAgAAE="}
00495{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1329,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":135,"flow_packet_id":1,"flow_first_seen":1470104425762,"flow_last_seen":0,"flow_min_l4_payload_len":317,"flow_max_l4_payload_len":317,"flow_tot_l4_payload_len":317,"flow_avg_l4_payload_len":317,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.10.7","dst_ip":"255.255.255.255","src_port":62976,"dst_port":62976,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00838{"flow_id":135,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1329,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104425,"pkt_ts_usec":762971,"pkt_caplen":359,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":359,"pkt_l4_len":325,"pkt":"\/\/\/\/\/\/\/\/wKC7c+snCABFAAFZOwBAAEARM+XAqAoH\/\/\/\/\/\/YA9gABRUMe\/\/+fLaAAwKC7c+snwKgKBwAAAgAnAURHUy0xMjEwLTEwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABTd2l0Y2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADMuMTAuMDEzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKC7c+snQjEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABRUDBSMUQ5MDAwMDIzAAAAAAAAAAAAAAAAAAAAAAAAAERHUy0xMjEwLTEwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqAoH\/\/8AAFBvcnQgOAAAAAAAAAAAAAAAAAAAAAAAAAA="}
00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1330,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":136,"flow_packet_id":1,"flow_first_seen":1470104425786,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"68.233.253.133","src_port":53613,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00425{"flow_id":136,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1330,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104425,"pkt_ts_usec":786054,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlYMVHBbyMCABFAAA0xkFAAEAGbFvAqAUQROn9hdFtAFBAFGHVDj7nf4AREAFpCQAAAQEIChoPxgTPHNz0"}
00580{"flow_id":57,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1334,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104426,"pkt_ts_usec":74315,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6uKxvwfbSCABFAAChJ3kAAAERfA\/AqGUh7\/\/\/+ti9B2wAjWL8TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="}
00579{"flow_id":58,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1335,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104426,"pkt_ts_usec":74472,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6cPGh+Cr9CABFAAChD4sAAAER9BXAqAUJ7\/\/\/+ti8B2wAjcMVTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="}
00472{"flow_id":134,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1336,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104426,"pkt_ts_usec":276929,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/AAwpjO\/4CABFAABOZ6UAAIARUUHAqABowKj\/\/wCJAIkAOgIy8PkBEAABAAAAAAAAIEZERURDT0VCRkNGQ0VCRU9FREVCRkNDT0VQRkNFSEFBAAAgAAE="}
00581{"flow_id":56,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1337,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104426,"pkt_ts_usec":277904,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6CJ4BzeuNCABFAAChFFoAAAER7yrAqAUl7\/\/\/+t\/tB2wAjbvITS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="}
00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1343,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":137,"flow_packet_id":1,"flow_first_seen":1470104426973,"flow_last_seen":0,"flow_min_l4_payload_len":48,"flow_max_l4_payload_len":48,"flow_tot_l4_payload_len":48,"flow_avg_l4_payload_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"17.253.26.125","src_port":123,"dst_port":123,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00458{"flow_id":137,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1343,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104426,"pkt_ts_usec":973073,"pkt_caplen":90,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":90,"pkt_l4_len":56,"pkt":"TF4M6gNlYMVHBbyMCABFwABMyLEAAEARvv3AqAUQEf0afQB7AHsAOHvnIwIG7AAAJiAAAPbJEf0afdtKfo89Puc520qBhKZDx2jbSoGEtCSHfttKgew\/d58s"}
00515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1343,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":137,"flow_packet_id":1,"flow_first_seen":1470104426973,"flow_last_seen":0,"flow_min_l4_payload_len":48,"flow_max_l4_payload_len":48,"flow_tot_l4_payload_len":48,"flow_avg_l4_payload_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"17.253.26.125","src_port":123,"dst_port":123,"l4_proto":"udp","ndpi": {"proto":"NTP.Apple","breed":"Safe","category":"System"}}
00497{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1346,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":138,"flow_packet_id":1,"flow_first_seen":1470104426992,"flow_last_seen":0,"flow_min_l4_payload_len":26,"flow_max_l4_payload_len":26,"flow_tot_l4_payload_len":26,"flow_avg_l4_payload_len":26,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::4568:efbc:40b1:1346","dst_ip":"ff02::1:3","src_port":57148,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00459{"flow_id":138,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1346,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104426,"pkt_ts_usec":992100,"pkt_caplen":88,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":88,"pkt_l4_len":34,"pkt":"MzMAAQADSNIkYwreht1gAAAAACIRAf6AAAAAAAAARWjvvECxE0b\/AgAAAAAAAAAAAAAAAQAD3zwU6wAi91hE5AAAAAEAAAAAAAAIa2V2aW4tUEMAAP8AAQ=="}
00530{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1346,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":138,"flow_packet_id":1,"flow_first_seen":1470104426992,"flow_last_seen":0,"flow_min_l4_payload_len":26,"flow_max_l4_payload_len":26,"flow_tot_l4_payload_len":26,"flow_avg_l4_payload_len":26,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::4568:efbc:40b1:1346","dst_ip":"ff02::1:3","src_port":57148,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}}
00458{"flow_id":138,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1347,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104427,"pkt_ts_usec":94109,"pkt_caplen":88,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":88,"pkt_l4_len":34,"pkt":"MzMAAQADSNIkYwreht1gAAAAACIRAf6AAAAAAAAARWjvvECxE0b\/AgAAAAAAAAAAAAAAAQAD3zwU6wAi91hE5AAAAAEAAAAAAAAIa2V2aW4tUEMAAP8AAQ=="}
00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1348,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":139,"flow_packet_id":1,"flow_first_seen":1470104427094,"flow_last_seen":0,"flow_min_l4_payload_len":26,"flow_max_l4_payload_len":26,"flow_tot_l4_payload_len":26,"flow_avg_l4_payload_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.41","dst_ip":"224.0.0.252","src_port":55593,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00430{"flow_id":139,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1348,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104427,"pkt_ts_usec":94934,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":68,"pkt_l4_len":34,"pkt":"AQBeAAD8SNIkYwreCABFAAA2fkcAAAERlKLAqAUp4AAA\/NkpFOsAIt1BROQAAAABAAAAAAAACGtldmluLVBDAAD\/AAE="}
00519{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1348,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":139,"flow_packet_id":1,"flow_first_seen":1470104427094,"flow_last_seen":0,"flow_min_l4_payload_len":26,"flow_max_l4_payload_len":26,"flow_tot_l4_payload_len":26,"flow_avg_l4_payload_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.41","dst_ip":"224.0.0.252","src_port":55593,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}}
00585{"flow_id":59,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1353,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104427,"pkt_ts_usec":503777,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/66LH8q\/uyCABFAAClCggAAAQR9mzAqAUx7\/\/\/+sn4B2wAkYV1TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="}
00580{"flow_id":57,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1370,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104429,"pkt_ts_usec":142138,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6uKxvwfbSCABFAAChJ3oAAAERfA7AqGUh7\/\/\/+ti9B2wAjWL8TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="}
00581{"flow_id":58,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1371,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104429,"pkt_ts_usec":143058,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6cPGh+Cr9CABFAAChD5sAAAER9AXAqAUJ7\/\/\/+ti8B2wAjcMVTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="}
00486{"flow_id":133,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1373,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104429,"pkt_ts_usec":321101,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"ABxCjnAxABAj4ACgCABFAABdszJAAEAGjbzAqHNLwKgFEAG70X2C0D\/WZaD+O1AYAEajgAAAFQMDADBcSAXugCoro2zCjOeXZ2EE3tT+o4OMg1\/gr3e4vsgBKrQQmbrjLiM53+dxUjTxjpc="}
00419{"flow_id":133,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1374,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104429,"pkt_ts_usec":321142,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABAj4ACgYMVHBbyMCABFAAAoqeFAAEAGl0LAqAUQwKhzS9F9AbtloP47gtBAC1AQH\/6cOQAAAAAAAAAA"}
00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1383,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":140,"flow_packet_id":1,"flow_first_seen":1470104429964,"flow_last_seen":0,"flow_min_l4_payload_len":26,"flow_max_l4_payload_len":26,"flow_tot_l4_payload_len":26,"flow_avg_l4_payload_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.57","dst_ip":"224.0.0.252","src_port":64428,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00431{"flow_id":140,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1383,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104429,"pkt_ts_usec":964666,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":68,"pkt_l4_len":34,"pkt":"AQBeAAD8GF4PUugBCABFAAA2MWEAAAER4XjAqAU54AAA\/PusFOsAIt9AFnIAAAABAAAAAAAACFVzaGVyLVBDAAD\/AAE="}
00519{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1383,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":140,"flow_packet_id":1,"flow_first_seen":1470104429964,"flow_last_seen":0,"flow_min_l4_payload_len":26,"flow_max_l4_payload_len":26,"flow_tot_l4_payload_len":26,"flow_avg_l4_payload_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.57","dst_ip":"224.0.0.252","src_port":64428,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}}
00496{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1386,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":141,"flow_packet_id":1,"flow_first_seen":1470104430064,"flow_last_seen":0,"flow_min_l4_payload_len":29,"flow_max_l4_payload_len":29,"flow_tot_l4_payload_len":29,"flow_avg_l4_payload_len":29,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::e034:7be:d8f9:6197","dst_ip":"ff02::1:3","src_port":57143,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00462{"flow_id":141,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1386,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104430,"pkt_ts_usec":64732,"pkt_caplen":91,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":91,"pkt_l4_len":37,"pkt":"MzMAAQADuKxv2MGbht1gAAAAACURAf6AAAAAAAAA4DQHvtj5YZf\/AgAAAAAAAAAAAAAAAQAD3zcU6wAl4fcCawAAAAEAAAAAAAALY2hhcm1pbmctUEMAAP8AAQ=="}
00529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1386,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":141,"flow_packet_id":1,"flow_first_seen":1470104430064,"flow_last_seen":0,"flow_min_l4_payload_len":29,"flow_max_l4_payload_len":29,"flow_tot_l4_payload_len":29,"flow_avg_l4_payload_len":29,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::e034:7be:d8f9:6197","dst_ip":"ff02::1:3","src_port":57143,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}}
00582{"flow_id":6,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1387,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104430,"pkt_ts_usec":64735,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/6uKxv2MGbCABFAAClQRwAAAQRv1fAqAUy7\/\/\/+vyiB2wAkVLKTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="}
00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1388,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":142,"flow_packet_id":1,"flow_first_seen":1470104430065,"flow_last_seen":0,"flow_min_l4_payload_len":29,"flow_max_l4_payload_len":29,"flow_tot_l4_payload_len":29,"flow_avg_l4_payload_len":29,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.50","dst_ip":"224.0.0.252","src_port":57143,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00434{"flow_id":142,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1388,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104430,"pkt_ts_usec":65680,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"AQBeAAD8uKxv2MGbCABFAAA5S8AAAAERxx3AqAUy4AAA\/N83FOsAJVssAmsAAAABAAAAAAAAC2NoYXJtaW5nLVBDAAD\/AAE="}
00519{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1388,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":142,"flow_packet_id":1,"flow_first_seen":1470104430065,"flow_last_seen":0,"flow_min_l4_payload_len":29,"flow_max_l4_payload_len":29,"flow_tot_l4_payload_len":29,"flow_avg_l4_payload_len":29,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.50","dst_ip":"224.0.0.252","src_port":57143,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}}
00430{"flow_id":140,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1389,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104430,"pkt_ts_usec":65682,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":68,"pkt_l4_len":34,"pkt":"AQBeAAD8GF4PUugBCABFAAA2MWMAAAER4XbAqAU54AAA\/PusFOsAIt9AFnIAAAABAAAAAAAACFVzaGVyLVBDAAD\/AAE="}
00580{"flow_id":2,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1390,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104430,"pkt_ts_usec":168012,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6GF4PUugBCABFAAChMWQAAAER0gzAqAU57\/\/\/+toBB2wAjcGgTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="}
00579{"flow_id":7,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1393,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104430,"pkt_ts_usec":272734,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6SNIkYwreCABFAAChfk0AAAERhTPAqAUp7\/\/\/+tgQB2wAjcOhTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="}
00435{"flow_id":142,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1396,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104430,"pkt_ts_usec":476697,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"AQBeAAD8uKxv2MGbCABFAAA5S8EAAAERxxzAqAUy4AAA\/N83FOsAJVssAmsAAAABAAAAAAAAC2NoYXJtaW5nLVBDAAD\/AAE="}
00496{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1398,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":143,"flow_packet_id":1,"flow_first_seen":1470104430884,"flow_last_seen":0,"flow_min_l4_payload_len":29,"flow_max_l4_payload_len":29,"flow_tot_l4_payload_len":29,"flow_avg_l4_payload_len":29,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::e034:7be:d8f9:6197","dst_ip":"ff02::1:3","src_port":49766,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00463{"flow_id":143,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1398,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104430,"pkt_ts_usec":884669,"pkt_caplen":91,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":91,"pkt_l4_len":37,"pkt":"MzMAAQADuKxv2MGbht1gAAAAACURAf6AAAAAAAAA4DQHvtj5YZf\/AgAAAAAAAAAAAAAAAQADwmYU6wAlV+upSAAAAAEAAAAAAAALY2hhcm1pbmctUEMAAP8AAQ=="}
00529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1398,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":143,"flow_packet_id":1,"flow_first_seen":1470104430884,"flow_last_seen":0,"flow_min_l4_payload_len":29,"flow_max_l4_payload_len":29,"flow_tot_l4_payload_len":29,"flow_avg_l4_payload_len":29,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::e034:7be:d8f9:6197","dst_ip":"ff02::1:3","src_port":49766,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}}
00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1399,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":144,"flow_packet_id":1,"flow_first_seen":1470104430884,"flow_last_seen":0,"flow_min_l4_payload_len":29,"flow_max_l4_payload_len":29,"flow_tot_l4_payload_len":29,"flow_avg_l4_payload_len":29,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.50","dst_ip":"224.0.0.252","src_port":49766,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00435{"flow_id":144,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1399,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104430,"pkt_ts_usec":884671,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"AQBeAAD8uKxv2MGbCABFAAA5S8UAAAERxxjAqAUy4AAA\/MJmFOsAJdEfqUgAAAABAAAAAAAAC2NoYXJtaW5nLVBDAAD\/AAE="}
00519{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1399,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":144,"flow_packet_id":1,"flow_first_seen":1470104430884,"flow_last_seen":0,"flow_min_l4_payload_len":29,"flow_max_l4_payload_len":29,"flow_tot_l4_payload_len":29,"flow_avg_l4_payload_len":29,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.50","dst_ip":"224.0.0.252","src_port":49766,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}}
00463{"flow_id":143,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1403,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104431,"pkt_ts_usec":294729,"pkt_caplen":91,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":91,"pkt_l4_len":37,"pkt":"MzMAAQADuKxv2MGbht1gAAAAACURAf6AAAAAAAAA4DQHvtj5YZf\/AgAAAAAAAAAAAAAAAQADwmYU6wAlV+upSAAAAAEAAAAAAAALY2hhcm1pbmctUEMAAP8AAQ=="}
00580{"flow_id":57,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1412,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104432,"pkt_ts_usec":114660,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6uKxvwfbSCABFAAChJ3wAAAERfAzAqGUh7\/\/\/+ti9B2wAjWL8TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="}
00581{"flow_id":58,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1413,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104432,"pkt_ts_usec":114662,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6cPGh+Cr9CABFAAChEcYAAAER8drAqAUJ7\/\/\/+ti8B2wAjcMVTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="}
00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1416,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":145,"flow_packet_id":1,"flow_first_seen":1470104432318,"flow_last_seen":0,"flow_min_l4_payload_len":26,"flow_max_l4_payload_len":26,"flow_tot_l4_payload_len":26,"flow_avg_l4_payload_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.44","dst_ip":"224.0.0.252","src_port":59062,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00431{"flow_id":145,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1416,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104432,"pkt_ts_usec":318351,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":68,"pkt_l4_len":34,"pkt":"AQBeAAD8SNIkYzEACABFAAA2OyoAAAER17zAqAUs4AAA\/Oa2FOsAIkMsz20AAAABAAAAAAAACGphc29uLVBDAAD\/AAE="}
00519{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1416,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":145,"flow_packet_id":1,"flow_first_seen":1470104432318,"flow_last_seen":0,"flow_min_l4_payload_len":26,"flow_max_l4_payload_len":26,"flow_tot_l4_payload_len":26,"flow_avg_l4_payload_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.44","dst_ip":"224.0.0.252","src_port":59062,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}}
00580{"flow_id":3,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1419,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104432,"pkt_ts_usec":419532,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6SNIkYzEACABFAAChOysAAAERyFLAqAUs7\/\/\/+si9B2wAjdLxTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="}
00497{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1420,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":146,"flow_packet_id":1,"flow_first_seen":1470104432630,"flow_last_seen":0,"flow_min_l4_payload_len":27,"flow_max_l4_payload_len":27,"flow_tot_l4_payload_len":27,"flow_avg_l4_payload_len":27,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::5d92:62a8:ebde:1319","dst_ip":"ff02::1:3","src_port":58468,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00460{"flow_id":146,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1420,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104432,"pkt_ts_usec":630916,"pkt_caplen":89,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":89,"pkt_l4_len":35,"pkt":"MzMAAQADPKn0WgOEht1gAAAAACMRAf6AAAAAAAAAXZJiqOveExn\/AgAAAAAAAAAAAAAAAQAD5GQU6wAjSCvt1AAAAAEAAAAAAAAJV0FOR1MtTFRXAAD\/AAE="}
00530{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1420,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":146,"flow_packet_id":1,"flow_first_seen":1470104432630,"flow_last_seen":0,"flow_min_l4_payload_len":27,"flow_max_l4_payload_len":27,"flow_tot_l4_payload_len":27,"flow_avg_l4_payload_len":27,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::5d92:62a8:ebde:1319","dst_ip":"ff02::1:3","src_port":58468,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}}
00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1421,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":147,"flow_packet_id":1,"flow_first_seen":1470104432630,"flow_last_seen":0,"flow_min_l4_payload_len":27,"flow_max_l4_payload_len":27,"flow_tot_l4_payload_len":27,"flow_avg_l4_payload_len":27,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.236","dst_ip":"224.0.0.252","src_port":65496,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00433{"flow_id":147,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1421,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104432,"pkt_ts_usec":630917,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"AQBeAAD8PKn0WgOECABFAAA3IDQAAAER8\/HAqAPs4AAA\/P\/YFOsAI0Pg7dQAAAABAAAAAAAACVdBTkdTLUxUVwAA\/wAB"}
00520{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1421,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":147,"flow_packet_id":1,"flow_first_seen":1470104432630,"flow_last_seen":0,"flow_min_l4_payload_len":27,"flow_max_l4_payload_len":27,"flow_tot_l4_payload_len":27,"flow_avg_l4_payload_len":27,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.236","dst_ip":"224.0.0.252","src_port":65496,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}}
00460{"flow_id":146,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1422,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104432,"pkt_ts_usec":728657,"pkt_caplen":89,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":89,"pkt_l4_len":35,"pkt":"MzMAAQADPKn0WgOEht1gAAAAACMRAf6AAAAAAAAAXZJiqOveExn\/AgAAAAAAAAAAAAAAAQAD5GQU6wAjSCvt1AAAAAEAAAAAAAAJV0FOR1MtTFRXAAD\/AAE="}
00433{"flow_id":147,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1423,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104432,"pkt_ts_usec":728660,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"AQBeAAD8PKn0WgOECABFAAA3IDUAAAER8\/DAqAPs4AAA\/P\/YFOsAI0Pg7dQAAAABAAAAAAAACVdBTkdTLUxUVwAA\/wAB"}
00411{"flow_id":61,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1427,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104433,"pkt_ts_usec":29958,"pkt_caplen":55,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":55,"pkt_l4_len":21,"pkt":"TF4M6gNlABxCjnAxCABFAAApUr5AAIAG8sXAqHMIy0K2V8G8AbsrwEGmNGHnvFAQAQOsiQAAAA=="}
00411{"flow_id":61,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1428,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104433,"pkt_ts_usec":30090,"pkt_caplen":55,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":55,"pkt_l4_len":21,"pkt":"TF4M6gNlABxCjnAxCABFAAApUr5AAIAG8sXAqHMIy0K2V8G8AbsrwEGmNGHnvFAQAQOsiQAAAA=="}
00582{"flow_id":6,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1429,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104433,"pkt_ts_usec":33498,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/6uKxv2MGbCABFAAClQR0AAAQRv1bAqAUy7\/\/\/+vyiB2wAkVLKTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="}
00425{"flow_id":61,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1430,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104433,"pkt_ts_usec":40844,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABxCjnAxTF4M6gNlCABFAAA0yhkAAD0G\/l\/LQrZXwKhzCAG7wbw0Yee8K8BBp4AQAO2bugAAAQEFCivAQaYrwEGn"}
00579{"flow_id":7,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1432,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104433,"pkt_ts_usec":238541,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6SNIkYwreCABFAAChflAAAAERhTDAqAUp7\/\/\/+tgQB2wAjcOhTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="}
00487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1433,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":144,"flow_packet_id":1,"flow_first_seen":1470104430884,"flow_last_seen":0,"flow_min_l4_payload_len":29,"flow_max_l4_payload_len":29,"flow_tot_l4_payload_len":29,"flow_avg_l4_payload_len":29,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.50","dst_ip":"224.0.0.252","src_port":49766,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00521{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1433,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":136,"flow_packet_id":1,"flow_first_seen":1470104425786,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"68.233.253.133","src_port":53613,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}}
00483{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1433,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":136,"flow_packet_id":1,"flow_first_seen":1470104425786,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"68.233.253.133","src_port":53613,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00510{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":1433,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":135,"flow_packet_id":1,"flow_first_seen":1470104425762,"flow_last_seen":0,"flow_min_l4_payload_len":317,"flow_max_l4_payload_len":317,"flow_tot_l4_payload_len":317,"flow_avg_l4_payload_len":317,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.10.7","dst_ip":"255.255.255.255","src_port":62976,"dst_port":62976,"l4_proto":"udp","ndpi": {"proto":"Unknown","breed":"Unrated"}}
00496{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1433,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":135,"flow_packet_id":1,"flow_first_seen":1470104425762,"flow_last_seen":0,"flow_min_l4_payload_len":317,"flow_max_l4_payload_len":317,"flow_tot_l4_payload_len":317,"flow_avg_l4_payload_len":317,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.10.7","dst_ip":"255.255.255.255","src_port":62976,"dst_port":62976,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00497{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1433,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":141,"flow_packet_id":1,"flow_first_seen":1470104430064,"flow_last_seen":0,"flow_min_l4_payload_len":29,"flow_max_l4_payload_len":29,"flow_tot_l4_payload_len":29,"flow_avg_l4_payload_len":29,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::e034:7be:d8f9:6197","dst_ip":"ff02::1:3","src_port":57143,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1433,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":145,"flow_packet_id":1,"flow_first_seen":1470104432318,"flow_last_seen":0,"flow_min_l4_payload_len":26,"flow_max_l4_payload_len":26,"flow_tot_l4_payload_len":26,"flow_avg_l4_payload_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.44","dst_ip":"224.0.0.252","src_port":59062,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1433,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":137,"flow_packet_id":1,"flow_first_seen":1470104426973,"flow_last_seen":0,"flow_min_l4_payload_len":48,"flow_max_l4_payload_len":48,"flow_tot_l4_payload_len":48,"flow_avg_l4_payload_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"17.253.26.125","src_port":123,"dst_port":123,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1433,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":139,"flow_packet_id":1,"flow_first_seen":1470104427094,"flow_last_seen":0,"flow_min_l4_payload_len":26,"flow_max_l4_payload_len":26,"flow_tot_l4_payload_len":26,"flow_avg_l4_payload_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.41","dst_ip":"224.0.0.252","src_port":55593,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00491{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1436,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":148,"flow_packet_id":1,"flow_first_seen":1470104433649,"flow_last_seen":0,"flow_min_l4_payload_len":40,"flow_max_l4_payload_len":40,"flow_tot_l4_payload_len":40,"flow_avg_l4_payload_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.186","dst_ip":"255.255.255.255","src_port":32768,"dst_port":1947,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00462{"flow_id":148,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1436,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104433,"pkt_ts_usec":649184,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"\/\/\/\/\/\/\/\/AAK2Qbs6CABFAABEAABAAEARd0fAqAK6\/\/\/\/\/4AAB5sAMBr8aWNSVlNvVTlBQUJYWldKRFlXeHNBSFZ0Ukc5c2IzSlRhWFJCYldVQQ=="}
00507{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":56,"flow_packet_id":8,"flow_first_seen":1470104384289,"flow_last_seen":1470104426277,"flow_min_l4_payload_len":133,"flow_max_l4_payload_len":133,"flow_tot_l4_payload_len":1064,"flow_avg_l4_payload_len":133,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.37","dst_ip":"239.255.255.250","src_port":57325,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00498{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":86,"flow_packet_id":2,"flow_first_seen":1470104399652,"flow_last_seen":1470104400059,"flow_min_l4_payload_len":28,"flow_max_l4_payload_len":28,"flow_tot_l4_payload_len":56,"flow_avg_l4_payload_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.48","dst_ip":"224.0.0.252","src_port":59797,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00499{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":121,"flow_packet_id":2,"flow_first_seen":1470104414395,"flow_last_seen":1470104414402,"flow_min_l4_payload_len":47,"flow_max_l4_payload_len":247,"flow_tot_l4_payload_len":294,"flow_avg_l4_payload_len":147,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"168.95.1.1","src_port":63372,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00506{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":8,"flow_first_seen":1470104376017,"flow_last_seen":1470104433238,"flow_min_l4_payload_len":133,"flow_max_l4_payload_len":133,"flow_tot_l4_payload_len":1064,"flow_avg_l4_payload_len":133,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.41","dst_ip":"239.255.255.250","src_port":55312,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00509{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":143,"flow_packet_id":2,"flow_first_seen":1470104430884,"flow_last_seen":1470104431294,"flow_min_l4_payload_len":29,"flow_max_l4_payload_len":29,"flow_tot_l4_payload_len":58,"flow_avg_l4_payload_len":29,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::e034:7be:d8f9:6197","dst_ip":"ff02::1:3","src_port":49766,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00503{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":122,"flow_packet_id":14,"flow_first_seen":1470104414404,"flow_last_seen":1470104414420,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1448,"flow_tot_l4_payload_len":8554,"flow_avg_l4_payload_len":611,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"203.69.81.73","src_port":53627,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00503{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":123,"flow_packet_id":14,"flow_first_seen":1470104414404,"flow_last_seen":1470104414419,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1448,"flow_tot_l4_payload_len":8214,"flow_avg_l4_payload_len":586,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"203.69.81.73","src_port":53628,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00494{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":3,"flow_first_seen":1470104377734,"flow_last_seen":1470104377753,"flow_min_l4_payload_len":38,"flow_max_l4_payload_len":70,"flow_tot_l4_payload_len":146,"flow_avg_l4_payload_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"8.8.8.8","src_port":51024,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00506{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":148,"flow_packet_id":1,"flow_first_seen":1470104433649,"flow_last_seen":0,"flow_min_l4_payload_len":40,"flow_max_l4_payload_len":40,"flow_tot_l4_payload_len":40,"flow_avg_l4_payload_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.186","dst_ip":"255.255.255.255","src_port":32768,"dst_port":1947,"l4_proto":"udp","ndpi": {"proto":"Unknown","breed":"Unrated"}}
00492{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":148,"flow_packet_id":1,"flow_first_seen":1470104433649,"flow_last_seen":0,"flow_min_l4_payload_len":40,"flow_max_l4_payload_len":40,"flow_tot_l4_payload_len":40,"flow_avg_l4_payload_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.186","dst_ip":"255.255.255.255","src_port":32768,"dst_port":1947,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00508{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":12,"flow_first_seen":1470104378045,"flow_last_seen":1470104423102,"flow_min_l4_payload_len":133,"flow_max_l4_payload_len":133,"flow_tot_l4_payload_len":1596,"flow_avg_l4_payload_len":133,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.95","dst_ip":"239.255.255.250","src_port":59468,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00510{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":138,"flow_packet_id":2,"flow_first_seen":1470104426992,"flow_last_seen":1470104427094,"flow_min_l4_payload_len":26,"flow_max_l4_payload_len":26,"flow_tot_l4_payload_len":52,"flow_avg_l4_payload_len":26,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::4568:efbc:40b1:1346","dst_ip":"ff02::1:3","src_port":57148,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00496{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":78,"flow_packet_id":3,"flow_first_seen":1470104395657,"flow_last_seen":1470104422690,"flow_min_l4_payload_len":300,"flow_max_l4_payload_len":300,"flow_tot_l4_payload_len":900,"flow_avg_l4_payload_len":300,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00499{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":68,"flow_packet_id":2,"flow_first_seen":1470104391254,"flow_last_seen":1470104391362,"flow_min_l4_payload_len":24,"flow_max_l4_payload_len":24,"flow_tot_l4_payload_len":48,"flow_avg_l4_payload_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.236","dst_ip":"224.0.0.252","src_port":51714,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00505{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":40,"flow_packet_id":25,"flow_first_seen":1470104380773,"flow_last_seen":1470104381859,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":445,"flow_tot_l4_payload_len":3534,"flow_avg_l4_payload_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"203.205.151.234","src_port":49608,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00507{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":58,"flow_packet_id":11,"flow_first_seen":1470104385211,"flow_last_seen":1470104432114,"flow_min_l4_payload_len":133,"flow_max_l4_payload_len":133,"flow_tot_l4_payload_len":1463,"flow_avg_l4_payload_len":133,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.9","dst_ip":"239.255.255.250","src_port":55484,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00509{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":57,"flow_packet_id":9,"flow_first_seen":1470104385211,"flow_last_seen":1470104432114,"flow_min_l4_payload_len":133,"flow_max_l4_payload_len":133,"flow_tot_l4_payload_len":1197,"flow_avg_l4_payload_len":133,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.101.33","dst_ip":"239.255.255.250","src_port":55485,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00507{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":13,"flow_first_seen":1470104373232,"flow_last_seen":1470104432419,"flow_min_l4_payload_len":133,"flow_max_l4_payload_len":133,"flow_tot_l4_payload_len":1729,"flow_avg_l4_payload_len":133,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.44","dst_ip":"239.255.255.250","src_port":51389,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00539{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":126,"flow_packet_id":10,"flow_first_seen":1470104419061,"flow_last_seen":1470104419317,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1157,"flow_tot_l4_payload_len":1833,"flow_avg_l4_payload_len":183,"midstream":1,"l3_proto":"ip4","src_ip":"31.13.87.1","dst_ip":"192.168.5.16","src_port":443,"dst_port":53578,"l4_proto":"tcp","ndpi": {"proto":"TLS.Facebook","breed":"Fun","category":"SocialNetwork"}}
00502{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":126,"flow_packet_id":10,"flow_first_seen":1470104419061,"flow_last_seen":1470104419317,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1157,"flow_tot_l4_payload_len":1833,"flow_avg_l4_payload_len":183,"midstream":1,"l3_proto":"ip4","src_ip":"31.13.87.1","dst_ip":"192.168.5.16","src_port":443,"dst_port":53578,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00539{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":119,"flow_packet_id":9,"flow_first_seen":1470104414296,"flow_last_seen":1470104414478,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1398,"flow_tot_l4_payload_len":3753,"flow_avg_l4_payload_len":417,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"31.13.87.36","src_port":53580,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Facebook","breed":"Fun","category":"SocialNetwork"}}
00502{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":119,"flow_packet_id":9,"flow_first_seen":1470104414296,"flow_last_seen":1470104414478,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1398,"flow_tot_l4_payload_len":3753,"flow_avg_l4_payload_len":417,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"31.13.87.36","src_port":53580,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00500{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":100,"flow_packet_id":2,"flow_first_seen":1470104402624,"flow_last_seen":1470104402724,"flow_min_l4_payload_len":27,"flow_max_l4_payload_len":27,"flow_tot_l4_payload_len":54,"flow_avg_l4_payload_len":27,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.236","dst_ip":"224.0.0.252","src_port":62069,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00503{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":14,"flow_first_seen":1470104373741,"flow_last_seen":1470104416751,"flow_min_l4_payload_len":300,"flow_max_l4_payload_len":300,"flow_tot_l4_payload_len":4200,"flow_avg_l4_payload_len":300,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.119.1","dst_ip":"255.255.255.255","src_port":67,"dst_port":68,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00499{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":105,"flow_packet_id":2,"flow_first_seen":1470104406717,"flow_last_seen":1470104407128,"flow_min_l4_payload_len":24,"flow_max_l4_payload_len":24,"flow_tot_l4_payload_len":48,"flow_avg_l4_payload_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.47","dst_ip":"224.0.0.252","src_port":53962,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00500{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":112,"flow_packet_id":2,"flow_first_seen":1470104409586,"flow_last_seen":1470104409685,"flow_min_l4_payload_len":24,"flow_max_l4_payload_len":24,"flow_tot_l4_payload_len":48,"flow_avg_l4_payload_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.236","dst_ip":"224.0.0.252","src_port":56043,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00510{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":104,"flow_packet_id":2,"flow_first_seen":1470104406717,"flow_last_seen":1470104407128,"flow_min_l4_payload_len":24,"flow_max_l4_payload_len":24,"flow_tot_l4_payload_len":48,"flow_avg_l4_payload_len":24,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::edf5:240a:c8c0:8312","dst_ip":"ff02::1:3","src_port":53962,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00510{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":107,"flow_packet_id":2,"flow_first_seen":1470104408049,"flow_last_seen":1470104408457,"flow_min_l4_payload_len":30,"flow_max_l4_payload_len":30,"flow_tot_l4_payload_len":60,"flow_avg_l4_payload_len":30,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::e98f:bae2:19f7:6b0f","dst_ip":"ff02::1:3","src_port":51451,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00500{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":55,"flow_packet_id":4,"flow_first_seen":1470104383810,"flow_last_seen":1470104413817,"flow_min_l4_payload_len":300,"flow_max_l4_payload_len":300,"flow_tot_l4_payload_len":1200,"flow_avg_l4_payload_len":300,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"192.168.119.1","src_port":68,"dst_port":67,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00507{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":59,"flow_packet_id":8,"flow_first_seen":1470104385418,"flow_last_seen":1470104427503,"flow_min_l4_payload_len":137,"flow_max_l4_payload_len":137,"flow_tot_l4_payload_len":1096,"flow_avg_l4_payload_len":137,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.49","dst_ip":"239.255.255.250","src_port":51704,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00507{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":14,"flow_first_seen":1470104373232,"flow_last_seen":1470104430168,"flow_min_l4_payload_len":133,"flow_max_l4_payload_len":133,"flow_tot_l4_payload_len":1862,"flow_avg_l4_payload_len":133,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.57","dst_ip":"239.255.255.250","src_port":55809,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00509{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":116,"flow_packet_id":2,"flow_first_seen":1470104412556,"flow_last_seen":1470104412962,"flow_min_l4_payload_len":33,"flow_max_l4_payload_len":33,"flow_tot_l4_payload_len":66,"flow_avg_l4_payload_len":33,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::9bd:81dd:2fdc:5750","dst_ip":"ff02::1:3","src_port":64568,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00499{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":140,"flow_packet_id":2,"flow_first_seen":1470104429964,"flow_last_seen":1470104430065,"flow_min_l4_payload_len":26,"flow_max_l4_payload_len":26,"flow_tot_l4_payload_len":52,"flow_avg_l4_payload_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.57","dst_ip":"224.0.0.252","src_port":64428,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00506{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":33,"flow_first_seen":1470104380890,"flow_last_seen":1470104382084,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1260,"flow_tot_l4_payload_len":9883,"flow_avg_l4_payload_len":299,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"42.120.51.152","src_port":49609,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00510{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":127,"flow_packet_id":2,"flow_first_seen":1470104420438,"flow_last_seen":1470104420540,"flow_min_l4_payload_len":25,"flow_max_l4_payload_len":25,"flow_tot_l4_payload_len":50,"flow_avg_l4_payload_len":25,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::5d92:62a8:ebde:1319","dst_ip":"ff02::1:3","src_port":61172,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00506{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":82,"flow_packet_id":7,"flow_first_seen":1470104397807,"flow_last_seen":1470104414604,"flow_min_l4_payload_len":137,"flow_max_l4_payload_len":137,"flow_tot_l4_payload_len":959,"flow_avg_l4_payload_len":137,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.48","dst_ip":"239.255.255.250","src_port":49701,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00502{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":134,"flow_packet_id":3,"flow_first_seen":1470104424738,"flow_last_seen":1470104426276,"flow_min_l4_payload_len":50,"flow_max_l4_payload_len":50,"flow_tot_l4_payload_len":150,"flow_avg_l4_payload_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.104","dst_ip":"192.168.255.255","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00500{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":75,"flow_packet_id":2,"flow_first_seen":1470104393610,"flow_last_seen":1470104394635,"flow_min_l4_payload_len":50,"flow_max_l4_payload_len":50,"flow_tot_l4_payload_len":100,"flow_avg_l4_payload_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.45","dst_ip":"192.168.255.255","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00502{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":73,"flow_packet_id":12,"flow_first_seen":1470104393097,"flow_last_seen":1470104422179,"flow_min_l4_payload_len":50,"flow_max_l4_payload_len":50,"flow_tot_l4_payload_len":600,"flow_avg_l4_payload_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.236","dst_ip":"192.168.255.255","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00501{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":6,"flow_first_seen":1470104378021,"flow_last_seen":1470104379520,"flow_min_l4_payload_len":50,"flow_max_l4_payload_len":50,"flow_tot_l4_payload_len":300,"flow_avg_l4_payload_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"192.168.255.255","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00503{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":76,"flow_packet_id":3,"flow_first_seen":1470104393610,"flow_last_seen":1470104393611,"flow_min_l4_payload_len":174,"flow_max_l4_payload_len":174,"flow_tot_l4_payload_len":522,"flow_avg_l4_payload_len":174,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.45","dst_ip":"192.168.255.255","src_port":138,"dst_port":138,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00503{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":2,"flow_first_seen":1470104379579,"flow_last_seen":1470104379579,"flow_min_l4_payload_len":221,"flow_max_l4_payload_len":244,"flow_tot_l4_payload_len":465,"flow_avg_l4_payload_len":232,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.67","dst_ip":"192.168.255.255","src_port":138,"dst_port":138,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00498{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":43,"flow_packet_id":2,"flow_first_seen":1470104381217,"flow_last_seen":1470104381626,"flow_min_l4_payload_len":26,"flow_max_l4_payload_len":26,"flow_tot_l4_payload_len":52,"flow_avg_l4_payload_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.37","dst_ip":"224.0.0.252","src_port":56366,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00499{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":117,"flow_packet_id":2,"flow_first_seen":1470104412556,"flow_last_seen":1470104412962,"flow_min_l4_payload_len":33,"flow_max_l4_payload_len":33,"flow_tot_l4_payload_len":66,"flow_avg_l4_payload_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.49","dst_ip":"224.0.0.252","src_port":64568,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00505{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":13,"flow_first_seen":1470104380188,"flow_last_seen":1470104380928,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":392,"flow_tot_l4_payload_len":713,"flow_avg_l4_payload_len":54,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"218.244.135.170","src_port":49607,"dst_port":9099,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00497{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":48,"flow_packet_id":2,"flow_first_seen":1470104381935,"flow_last_seen":1470104382038,"flow_min_l4_payload_len":27,"flow_max_l4_payload_len":27,"flow_tot_l4_payload_len":54,"flow_avg_l4_payload_len":27,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.9","dst_ip":"224.0.0.252","src_port":58456,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00500{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":47,"flow_packet_id":2,"flow_first_seen":1470104381935,"flow_last_seen":1470104382036,"flow_min_l4_payload_len":27,"flow_max_l4_payload_len":27,"flow_tot_l4_payload_len":54,"flow_avg_l4_payload_len":27,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.101.33","dst_ip":"224.0.0.252","src_port":58456,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00498{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":80,"flow_packet_id":2,"flow_first_seen":1470104396889,"flow_last_seen":1470104396987,"flow_min_l4_payload_len":26,"flow_max_l4_payload_len":26,"flow_tot_l4_payload_len":52,"flow_avg_l4_payload_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.41","dst_ip":"224.0.0.252","src_port":54470,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00499{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":115,"flow_packet_id":2,"flow_first_seen":1470104411327,"flow_last_seen":1470104411735,"flow_min_l4_payload_len":26,"flow_max_l4_payload_len":26,"flow_tot_l4_payload_len":52,"flow_avg_l4_payload_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.37","dst_ip":"224.0.0.252","src_port":54506,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00507{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":8,"flow_first_seen":1470104377634,"flow_last_seen":1470104415729,"flow_min_l4_payload_len":137,"flow_max_l4_payload_len":137,"flow_tot_l4_payload_len":1096,"flow_avg_l4_payload_len":137,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.47","dst_ip":"239.255.255.250","src_port":60267,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00498{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":90,"flow_packet_id":2,"flow_first_seen":1470104399959,"flow_last_seen":1470104400366,"flow_min_l4_payload_len":29,"flow_max_l4_payload_len":29,"flow_tot_l4_payload_len":58,"flow_avg_l4_payload_len":29,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.50","dst_ip":"224.0.0.252","src_port":62756,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00501{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":63,"flow_packet_id":12,"flow_first_seen":1470104390443,"flow_last_seen":1470104422398,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":324,"flow_tot_l4_payload_len":1170,"flow_avg_l4_payload_len":97,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"68.233.253.133","src_port":53624,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00499{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":101,"flow_packet_id":2,"flow_first_seen":1470104403134,"flow_last_seen":1470104403234,"flow_min_l4_payload_len":26,"flow_max_l4_payload_len":26,"flow_tot_l4_payload_len":52,"flow_avg_l4_payload_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.44","dst_ip":"224.0.0.252","src_port":58702,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00509{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":67,"flow_packet_id":2,"flow_first_seen":1470104391254,"flow_last_seen":1470104391361,"flow_min_l4_payload_len":24,"flow_max_l4_payload_len":24,"flow_tot_l4_payload_len":48,"flow_avg_l4_payload_len":24,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::5d92:62a8:ebde:1319","dst_ip":"ff02::1:3","src_port":63659,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00498{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":125,"flow_packet_id":2,"flow_first_seen":1470104416855,"flow_last_seen":1470104416959,"flow_min_l4_payload_len":27,"flow_max_l4_payload_len":27,"flow_tot_l4_payload_len":54,"flow_avg_l4_payload_len":27,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.9","dst_ip":"224.0.0.252","src_port":62822,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00501{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":124,"flow_packet_id":2,"flow_first_seen":1470104416855,"flow_last_seen":1470104416958,"flow_min_l4_payload_len":27,"flow_max_l4_payload_len":27,"flow_tot_l4_payload_len":54,"flow_avg_l4_payload_len":27,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.101.33","dst_ip":"224.0.0.252","src_port":62822,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00542{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":66,"flow_packet_id":3,"flow_first_seen":1470104391199,"flow_last_seen":1470104391208,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1,"flow_tot_l4_payload_len":2,"flow_avg_l4_payload_len":0,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"64.233.189.128","src_port":49581,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Google","breed":"Tracker\/Ads","category":"Web"},"http": {}}
00496{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":66,"flow_packet_id":3,"flow_first_seen":1470104391199,"flow_last_seen":1470104391208,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1,"flow_tot_l4_payload_len":2,"flow_avg_l4_payload_len":0,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"64.233.189.128","src_port":49581,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00498{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":2,"flow_first_seen":1470104378045,"flow_last_seen":1470104378454,"flow_min_l4_payload_len":30,"flow_max_l4_payload_len":30,"flow_tot_l4_payload_len":60,"flow_avg_l4_payload_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.95","dst_ip":"224.0.0.252","src_port":58779,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00505{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":14,"flow_first_seen":1470104377754,"flow_last_seen":1470104422913,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1218,"flow_tot_l4_payload_len":2048,"flow_avg_l4_payload_len":146,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"106.185.35.110","src_port":49597,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00505{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":13,"flow_first_seen":1470104379903,"flow_last_seen":1470104379989,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1260,"flow_tot_l4_payload_len":2665,"flow_avg_l4_payload_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"106.185.35.110","src_port":49605,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00506{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":50,"flow_first_seen":1470104379916,"flow_last_seen":1470104380338,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1260,"flow_tot_l4_payload_len":33005,"flow_avg_l4_payload_len":660,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"106.185.35.110","src_port":49606,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00504{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":14,"flow_first_seen":1470104378906,"flow_last_seen":1470104424115,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":734,"flow_tot_l4_payload_len":1576,"flow_avg_l4_payload_len":112,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"222.73.254.167","src_port":49598,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00515{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":2,"flow_first_seen":1470104378005,"flow_last_seen":1470104378007,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"192.168.115.75","src_port":53622,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"}}
00495{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":2,"flow_first_seen":1470104378005,"flow_last_seen":1470104378007,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"192.168.115.75","src_port":53622,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00504{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":45,"flow_packet_id":19,"flow_first_seen":1470104381237,"flow_last_seen":1470104402191,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1013,"flow_tot_l4_payload_len":2520,"flow_avg_l4_payload_len":132,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"192.168.115.75","src_port":53623,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00504{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":96,"flow_packet_id":19,"flow_first_seen":1470104402238,"flow_last_seen":1470104408999,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1013,"flow_tot_l4_payload_len":2516,"flow_avg_l4_payload_len":132,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"192.168.115.75","src_port":53625,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00504{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":120,"flow_packet_id":19,"flow_first_seen":1470104414296,"flow_last_seen":1470104423193,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":997,"flow_tot_l4_payload_len":2088,"flow_avg_l4_payload_len":109,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"192.168.115.75","src_port":53626,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00505{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":133,"flow_packet_id":17,"flow_first_seen":1470104423246,"flow_last_seen":1470104429322,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1013,"flow_tot_l4_payload_len":2516,"flow_avg_l4_payload_len":148,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"192.168.115.75","src_port":53629,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00506{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":9,"flow_first_seen":1470104376017,"flow_last_seen":1470104433033,"flow_min_l4_payload_len":137,"flow_max_l4_payload_len":137,"flow_tot_l4_payload_len":1233,"flow_avg_l4_payload_len":137,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.50","dst_ip":"239.255.255.250","src_port":64674,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00498{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":2,"flow_first_seen":1470104379169,"flow_last_seen":1470104379271,"flow_min_l4_payload_len":30,"flow_max_l4_payload_len":30,"flow_tot_l4_payload_len":60,"flow_avg_l4_payload_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.95","dst_ip":"224.0.0.252","src_port":54888,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00498{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":88,"flow_packet_id":2,"flow_first_seen":1470104399958,"flow_last_seen":1470104400059,"flow_min_l4_payload_len":26,"flow_max_l4_payload_len":26,"flow_tot_l4_payload_len":52,"flow_avg_l4_payload_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.57","dst_ip":"224.0.0.252","src_port":65150,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00509{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":79,"flow_packet_id":2,"flow_first_seen":1470104396888,"flow_last_seen":1470104396987,"flow_min_l4_payload_len":26,"flow_max_l4_payload_len":26,"flow_tot_l4_payload_len":52,"flow_avg_l4_payload_len":26,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::4568:efbc:40b1:1346","dst_ip":"ff02::1:3","src_port":50194,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00509{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":99,"flow_packet_id":2,"flow_first_seen":1470104402624,"flow_last_seen":1470104402724,"flow_min_l4_payload_len":27,"flow_max_l4_payload_len":27,"flow_tot_l4_payload_len":54,"flow_avg_l4_payload_len":27,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::5d92:62a8:ebde:1319","dst_ip":"ff02::1:3","src_port":49735,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00494{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":39,"flow_packet_id":3,"flow_first_seen":1470104380737,"flow_last_seen":1470104380772,"flow_min_l4_payload_len":33,"flow_max_l4_payload_len":74,"flow_tot_l4_payload_len":140,"flow_avg_l4_payload_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"8.8.8.8","src_port":54420,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00499{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":142,"flow_packet_id":2,"flow_first_seen":1470104430065,"flow_last_seen":1470104430476,"flow_min_l4_payload_len":29,"flow_max_l4_payload_len":29,"flow_tot_l4_payload_len":58,"flow_avg_l4_payload_len":29,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.50","dst_ip":"224.0.0.252","src_port":57143,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00510{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":111,"flow_packet_id":2,"flow_first_seen":1470104409586,"flow_last_seen":1470104409685,"flow_min_l4_payload_len":24,"flow_max_l4_payload_len":24,"flow_tot_l4_payload_len":48,"flow_avg_l4_payload_len":24,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::5d92:62a8:ebde:1319","dst_ip":"ff02::1:3","src_port":53938,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00506{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":43,"flow_first_seen":1470104379117,"flow_last_seen":1470104424357,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1260,"flow_tot_l4_payload_len":28815,"flow_avg_l4_payload_len":670,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"106.187.35.246","src_port":49599,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00506{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":69,"flow_first_seen":1470104379117,"flow_last_seen":1470104424488,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1260,"flow_tot_l4_payload_len":59649,"flow_avg_l4_payload_len":864,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"106.187.35.246","src_port":49600,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00506{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":61,"flow_first_seen":1470104379118,"flow_last_seen":1470104424418,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1260,"flow_tot_l4_payload_len":48329,"flow_avg_l4_payload_len":792,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"106.187.35.246","src_port":49601,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00506{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":65,"flow_first_seen":1470104379118,"flow_last_seen":1470104424446,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1260,"flow_tot_l4_payload_len":45401,"flow_avg_l4_payload_len":698,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"106.187.35.246","src_port":49602,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00494{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":3,"flow_first_seen":1470104379066,"flow_last_seen":1470104379115,"flow_min_l4_payload_len":31,"flow_max_l4_payload_len":95,"flow_tot_l4_payload_len":157,"flow_avg_l4_payload_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"8.8.8.8","src_port":60724,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00506{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":34,"flow_first_seen":1470104379118,"flow_last_seen":1470104424360,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1260,"flow_tot_l4_payload_len":23690,"flow_avg_l4_payload_len":696,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"106.187.35.246","src_port":49603,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00506{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":58,"flow_first_seen":1470104379119,"flow_last_seen":1470104424435,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1260,"flow_tot_l4_payload_len":42391,"flow_avg_l4_payload_len":730,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"106.187.35.246","src_port":49604,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00505{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":5,"flow_first_seen":1470104376816,"flow_last_seen":1470104392380,"flow_min_l4_payload_len":36,"flow_max_l4_payload_len":36,"flow_tot_l4_payload_len":180,"flow_avg_l4_payload_len":36,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::406:55a8:6453:25dd","dst_ip":"ff02::1:2","src_port":546,"dst_port":547,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00508{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":52,"flow_packet_id":2,"flow_first_seen":1470104382448,"flow_last_seen":1470104382857,"flow_min_l4_payload_len":33,"flow_max_l4_payload_len":33,"flow_tot_l4_payload_len":66,"flow_avg_l4_payload_len":33,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::9bd:81dd:2fdc:5750","dst_ip":"ff02::1:3","src_port":61548,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00500{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":147,"flow_packet_id":2,"flow_first_seen":1470104432630,"flow_last_seen":1470104432728,"flow_min_l4_payload_len":27,"flow_max_l4_payload_len":27,"flow_tot_l4_payload_len":54,"flow_avg_l4_payload_len":27,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.236","dst_ip":"224.0.0.252","src_port":65496,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00509{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":2,"flow_first_seen":1470104378045,"flow_last_seen":1470104378454,"flow_min_l4_payload_len":30,"flow_max_l4_payload_len":30,"flow_tot_l4_payload_len":60,"flow_avg_l4_payload_len":30,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::e98f:bae2:19f7:6b0f","dst_ip":"ff02::1:3","src_port":58779,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":113,"flow_packet_id":23,"flow_first_seen":1470104410885,"flow_last_seen":1470104428908,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1460,"flow_tot_l4_payload_len":6132,"flow_avg_l4_payload_len":266,"midstream":1,"l3_proto":"ip4","src_ip":"119.235.235.84","dst_ip":"192.168.5.16","src_port":443,"dst_port":53406,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"}}
00506{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":113,"flow_packet_id":23,"flow_first_seen":1470104410885,"flow_last_seen":1470104428908,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1460,"flow_tot_l4_payload_len":6132,"flow_avg_l4_payload_len":266,"midstream":1,"l3_proto":"ip4","src_ip":"119.235.235.84","dst_ip":"192.168.5.16","src_port":443,"dst_port":53406,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00503{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":46,"flow_packet_id":14,"flow_first_seen":1470104381895,"flow_last_seen":1470104382125,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":633,"flow_tot_l4_payload_len":1497,"flow_avg_l4_payload_len":106,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"183.131.48.145","src_port":49612,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00508{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":49,"flow_packet_id":419,"flow_first_seen":1470104382053,"flow_last_seen":1470104433789,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1024,"flow_tot_l4_payload_len":161031,"flow_avg_l4_payload_len":384,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"183.131.48.144","src_port":49613,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00497{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":3,"flow_first_seen":1470104378901,"flow_last_seen":1470104378905,"flow_min_l4_payload_len":34,"flow_max_l4_payload_len":66,"flow_tot_l4_payload_len":134,"flow_avg_l4_payload_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"168.95.1.1","src_port":52723,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00494{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":3,"flow_first_seen":1470104377901,"flow_last_seen":1470104378954,"flow_min_l4_payload_len":34,"flow_max_l4_payload_len":66,"flow_tot_l4_payload_len":134,"flow_avg_l4_payload_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"8.8.8.8","src_port":52723,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00515{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":61,"flow_packet_id":6,"flow_first_seen":1470104388033,"flow_last_seen":1470104433040,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1,"flow_tot_l4_payload_len":4,"flow_avg_l4_payload_len":0,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"203.66.182.87","src_port":49596,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"}}
00496{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":61,"flow_packet_id":6,"flow_first_seen":1470104388033,"flow_last_seen":1470104433040,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1,"flow_tot_l4_payload_len":4,"flow_avg_l4_payload_len":0,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"203.66.182.87","src_port":49596,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00498{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":53,"flow_packet_id":2,"flow_first_seen":1470104382448,"flow_last_seen":1470104382858,"flow_min_l4_payload_len":33,"flow_max_l4_payload_len":33,"flow_tot_l4_payload_len":66,"flow_avg_l4_payload_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.49","dst_ip":"224.0.0.252","src_port":61548,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00508{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":102,"flow_packet_id":4,"flow_first_seen":1470104404055,"flow_last_seen":1470104418595,"flow_min_l4_payload_len":36,"flow_max_l4_payload_len":36,"flow_tot_l4_payload_len":144,"flow_avg_l4_payload_len":36,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::beee:7bff:fe0c:b3de","dst_ip":"ff02::1:2","src_port":546,"dst_port":547,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00498{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":2,"flow_first_seen":1470104377634,"flow_last_seen":1470104378045,"flow_min_l4_payload_len":24,"flow_max_l4_payload_len":24,"flow_tot_l4_payload_len":48,"flow_avg_l4_payload_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.47","dst_ip":"224.0.0.252","src_port":61603,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00509{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":2,"flow_first_seen":1470104379169,"flow_last_seen":1470104379271,"flow_min_l4_payload_len":30,"flow_max_l4_payload_len":30,"flow_tot_l4_payload_len":60,"flow_avg_l4_payload_len":30,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::e98f:bae2:19f7:6b0f","dst_ip":"ff02::1:3","src_port":54888,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00497{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":2,"flow_first_seen":1470104373025,"flow_last_seen":1470104373127,"flow_min_l4_payload_len":26,"flow_max_l4_payload_len":26,"flow_tot_l4_payload_len":52,"flow_avg_l4_payload_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.44","dst_ip":"224.0.0.252","src_port":59571,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00509{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":2,"flow_first_seen":1470104377634,"flow_last_seen":1470104378045,"flow_min_l4_payload_len":24,"flow_max_l4_payload_len":24,"flow_tot_l4_payload_len":48,"flow_avg_l4_payload_len":24,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::edf5:240a:c8c0:8312","dst_ip":"ff02::1:3","src_port":61603,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00499{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":108,"flow_packet_id":2,"flow_first_seen":1470104408049,"flow_last_seen":1470104408458,"flow_min_l4_payload_len":30,"flow_max_l4_payload_len":30,"flow_tot_l4_payload_len":60,"flow_avg_l4_payload_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.95","dst_ip":"224.0.0.252","src_port":51451,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00507{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":91,"flow_packet_id":16,"flow_first_seen":1470104400162,"flow_last_seen":1470104408559,"flow_min_l4_payload_len":440,"flow_max_l4_payload_len":520,"flow_tot_l4_payload_len":7801,"flow_avg_l4_payload_len":487,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.49","dst_ip":"239.255.255.250","src_port":1900,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00499{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":4,"flow_first_seen":1470104377720,"flow_last_seen":1470104377820,"flow_min_l4_payload_len":22,"flow_max_l4_payload_len":22,"flow_tot_l4_payload_len":88,"flow_avg_l4_payload_len":22,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"224.0.0.252","src_port":51458,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00510{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":146,"flow_packet_id":2,"flow_first_seen":1470104432630,"flow_last_seen":1470104432728,"flow_min_l4_payload_len":27,"flow_max_l4_payload_len":27,"flow_tot_l4_payload_len":54,"flow_avg_l4_payload_len":27,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::5d92:62a8:ebde:1319","dst_ip":"ff02::1:3","src_port":58468,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00511{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":92,"flow_packet_id":16,"flow_first_seen":1470104400162,"flow_last_seen":1470104408559,"flow_min_l4_payload_len":448,"flow_max_l4_payload_len":528,"flow_tot_l4_payload_len":7929,"flow_avg_l4_payload_len":495,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::9bd:81dd:2fdc:5750","dst_ip":"ff02::c","src_port":1900,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00127{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":1439,"source":"1kxun.pcap","alias":"nDPId-test"}
|