test/results/WebattackSQLinj.pcap.out


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134

00483{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"generic-max-idle-time":600000,"icmp-max-idle-time":30000,"udp-max-idle-time":180000,"tcp-max-idle-time":7440000,"tcp-max-post-end-flow-time":120000,"max-packets-per-flow-to-send":15,"max-packets-per-flow-to-process":255}
00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1499348407419,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":36196,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00442{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348407,"pkt_ts_usec":419016,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA84aRAAD4G5CusEAABwKgKMo1kAFAWk4RJAAAAAKACchDPRwAAAgQFtAQCCAoBPmXtAAAAAAEDAwc="}
00442{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348407,"pkt_ts_usec":419147,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQjWS7EzBkFpOESqAScSCpZgAAAgQFtAQCCAoD6DdgAT5l7QEDAwc="}
00430{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348407,"pkt_ts_usec":420458,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA04aVAAD4G5DKsEAABwKgKMo1kAFAWk4RKuxMwZYAQAOVIbgAAAQEICgE+Ze0D6Ddg"}
01030{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348407,"pkt_ts_usec":420462,"pkt_caplen":513,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":513,"pkt_l4_len":479,"pkt":"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"}
00803{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":4,"flow_first_seen":1499348407419,"flow_last_seen":1499348407420,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":447,"flow_tot_l4_payload_len":447,"flow_avg_l4_payload_len":111,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":36196,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"205.174.165.68","url":"205.174.165.68\/dv\/vulnerabilities\/sqli\/?id=1%27&Submit=Submit","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64; rv:45.0) Gecko\/20100101 Firefox\/45.0"}}
00430{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348407,"pkt_ts_usec":420554,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0BwVAAEAGvNPAqAoyrBAAAQBQjWS7EzBlFpOGCYAQAOtGqQAAAQEICgPoN2ABPmXt"}
01143{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348407,"pkt_ts_usec":424132,"pkt_caplen":596,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":596,"pkt_l4_len":562,"pkt":"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"}
00430{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348407,"pkt_ts_usec":424728,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA04adAAD4G5DCsEAABwKgKMo1kAFAWk4YJuxMyd4AQAO1EkwAAAQEICgE+Ze4D6Ddh"}
00431{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348412,"pkt_ts_usec":425143,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0BwdAAEAGvNHAqAoyrBAAAQBQjWS7EzJ3FpOGCYARAOs\/sgAAAQEICgPoPEMBPmXu"}
00431{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348412,"pkt_ts_usec":425420,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA04ahAAD4G5C+sEAABwKgKMo1kAFAWk4YJuxMyd4ARAO0\/sAAAAQEICgE+atAD6Ddh"}
00432{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348412,"pkt_ts_usec":425455,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0BwhAAEAGvNDAqAoyrBAAAQBQjWS7EzJ4FpOGCoAQAOs6zwAAAQEICgPoPEMBPmrQ"}
00432{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348412,"pkt_ts_usec":425928,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA04alAAD4G5C6sEAABwKgKMo1kAFAWk4YKuxMyeIAQAO06zAAAAQEICgE+atED6DxD"}
00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":12,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1499348413192,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":36198,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00444{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348413,"pkt_ts_usec":192475,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8\/kNAAD4Gx4ysEAABwKgKMo1mAFAV3ZXTAAAAAKACchC4zgAAAgQFtAQCCAoBPmuQAAAAAAEDAwc="}
00443{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348413,"pkt_ts_usec":192603,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQjWbwopjJFd2V1KAScSDvVQAAAgQFtAQCCAoD6D0DAT5rkAEDAwc="}
00432{"flow_id":2,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348413,"pkt_ts_usec":193376,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0\/kRAAD4Gx5OsEAABwKgKMo1mAFAV3ZXU8KKYyoAQAOWOXQAAAQEICgE+a5AD6D0D"}
01052{"flow_id":2,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348413,"pkt_ts_usec":193380,"pkt_caplen":526,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":526,"pkt_l4_len":492,"pkt":"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"}
00817{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":15,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":4,"flow_first_seen":1499348413192,"flow_last_seen":1499348413193,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":460,"flow_tot_l4_payload_len":460,"flow_avg_l4_payload_len":115,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":36198,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"205.174.165.68","url":"205.174.165.68\/dv\/vulnerabilities\/sqli\/?id=1%27+and+1%3D1%23&Submit=Submit","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64; rv:45.0) Gecko\/20100101 Firefox\/45.0"}}
00432{"flow_id":2,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348413,"pkt_ts_usec":193473,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0pclAAEAGHg\/AqAoyrBAAAQBQjWbwopjKFd2XoIAQAOuMiwAAAQEICgPoPQMBPmuQ"}
02926{"flow_id":2,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348413,"pkt_ts_usec":260743,"pkt_caplen":1906,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1906,"pkt_l4_len":1872,"pkt":"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"}
00432{"flow_id":2,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348413,"pkt_ts_usec":261482,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0\/kZAAD4Gx5GsEAABwKgKMo1mAFAV3Zeg8KKf+oAQAQGFIwAAAQEICgE+a6ED6D0U"}
00432{"flow_id":2,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348418,"pkt_ts_usec":262402,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0pcxAAEAGHgzAqAoyrBAAAQBQjWbwop\/6Fd2XoIARAOuAVQAAAQEICgPoQfcBPmuh"}
00432{"flow_id":2,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348418,"pkt_ts_usec":262929,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0\/kdAAD4Gx5CsEAABwKgKMo1mAFAV3Zeg8KKf+4ARAQF7WwAAAQEICgE+cIQD6EH3"}
00433{"flow_id":2,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348418,"pkt_ts_usec":262971,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0pc1AAEAGHgvAqAoyrBAAAQBQjWbwop\/7Fd2XoYAQAOt7cQAAAQEICgPoQfcBPnCE"}
00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":22,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1499348422024,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":36200,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00442{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348422,"pkt_ts_usec":24349,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8A7ZAAD4GwhqsEAABwKgKMo1oAFD9gXeGAAAAAKACchDm1AAAAgQFtAQCCAoBPnQwAAAAAAEDAwc="}
00443{"flow_id":3,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348422,"pkt_ts_usec":24463,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQjWik93fQ\/YF3h6AScSCBYAAAAgQFtAQCCAoD6EWjAT50MAEDAwc="}
00430{"flow_id":3,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348422,"pkt_ts_usec":25263,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0A7dAAD4GwiGsEAABwKgKMo1oAFD9gXeHpPd30YAQAOUgaAAAAQEICgE+dDAD6EWj"}
01150{"flow_id":3,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348422,"pkt_ts_usec":25267,"pkt_caplen":603,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":603,"pkt_l4_len":569,"pkt":"ABm5CmnxAMGxFOsxCABFAAJNA7hAAD4GwAesEAABwKgKMo1oAFD9gXeHpPd30YAYAOVReQAAAQEICgE+dDAD6EWjR0VUIC9kdi92dWxuZXJhYmlsaXRpZXMvc3FsaS8\/aWQ9MSUyNythbmQrMSUzRDErdW5pb24rc2VsZWN0K2RhdGFiYXNlJTI4JTI5JTJDK3VzZXIlMjglMjklMjMmU3VibWl0PVN1Ym1pdCBIVFRQLzEuMQ0KSG9zdDogMjA1LjE3NC4xNjUuNjgNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wIChYMTE7IExpbnV4IHg4Nl82NDsgcnY6NDUuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC80NS4wDQpBY2NlcHQ6IHRleHQvaHRtbCxhcHBsaWNhdGlvbi94aHRtbCt4bWwsYXBwbGljYXRpb24veG1sO3E9MC45LCovKjtxPTAuOA0KQWNjZXB0LUxhbmd1YWdlOiBlbi1VUyxlbjtxPTAuNQ0KQWNjZXB0LUVuY29kaW5nOiBnemlwLCBkZWZsYXRlDQpSZWZlcmVyOiBodHRwOi8vMjA1LjE3NC4xNjUuNjgvZHYvdnVsbmVyYWJpbGl0aWVzL3NxbGkvP2lkPTElMjcrYW5kKzElM0QxJTIzJlN1Ym1pdD1TdWJtaXQNCkNvb2tpZTogc2VjdXJpdHk9bG93OyBQSFBTRVNTSUQ9NWRmY3VoODVrZzB2dmlkZjhucnNqdGJvYjUNCkNvbm5lY3Rpb246IGtlZXAtYWxpdmUNCg0K"}
00859{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":25,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":4,"flow_first_seen":1499348422024,"flow_last_seen":1499348422025,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":537,"flow_tot_l4_payload_len":537,"flow_avg_l4_payload_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":36200,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"205.174.165.68","url":"205.174.165.68\/dv\/vulnerabilities\/sqli\/?id=1%27+and+1%3D1+union+select+database%28%29%2C+user%28%29%23&Submit=Submit","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64; rv:45.0) Gecko\/20100101 Firefox\/45.0"}}
00431{"flow_id":3,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348422,"pkt_ts_usec":25335,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0MnJAAEAGkWbAqAoyrBAAAQBQjWik93fR\/YF5oIAQAOseSQAAAQEICgPoRaMBPnQw"}
02968{"flow_id":3,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348422,"pkt_ts_usec":57811,"pkt_caplen":1947,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1947,"pkt_l4_len":1913,"pkt":"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"}
00431{"flow_id":3,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348422,"pkt_ts_usec":58624,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0A7lAAD4Gwh+sEAABwKgKMo1oAFD9gXmgpPd\/KoAQAQIWyAAAAQEICgE+dDkD6EWr"}
00431{"flow_id":3,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348427,"pkt_ts_usec":62967,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0MnVAAEAGkWPAqAoyrBAAAQBQjWik938q\/YF5oIARAOsR+gAAAQEICgPoSo8BPnQ5"}
00432{"flow_id":3,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348427,"pkt_ts_usec":63609,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0A7pAAD4Gwh6sEAABwKgKMo1oAFD9gXmgpPd\/K4ARAQIM\/wAAAQEICgE+eRwD6EqP"}
00432{"flow_id":3,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348427,"pkt_ts_usec":63652,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0MnZAAEAGkWLAqAoyrBAAAQBQjWik938r\/YF5oYAQAOsNFgAAAQEICgPoSo8BPnkc"}
00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":32,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1499348433464,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":36202,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00443{"flow_id":4,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348433,"pkt_ts_usec":464668,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8WwtAAD4GasWsEAABwKgKMo1qAFDC1CRXAAAAAKACchBpgwAAAgQFtAQCCAoBPn9cAAAAAAEDAwc="}
00444{"flow_id":4,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348433,"pkt_ts_usec":464810,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQjWqDJLV7wtQkWKAScSDdCgAAAgQFtAQCCAoD6FDPAT5\/XAEDAwc="}
00431{"flow_id":4,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348433,"pkt_ts_usec":465554,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0WwxAAD4GasysEAABwKgKMo1qAFDC1CRYgyS1fIAQAOV8EgAAAQEICgE+f1wD6FDP"}
01235{"flow_id":4,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348433,"pkt_ts_usec":465558,"pkt_caplen":666,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":666,"pkt_l4_len":632,"pkt":"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"}
00880{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":35,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":4,"flow_first_seen":1499348433464,"flow_last_seen":1499348433465,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":600,"flow_tot_l4_payload_len":600,"flow_avg_l4_payload_len":150,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":36202,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"205.174.165.68","url":"205.174.165.68\/dv\/vulnerabilities\/sqli\/?id=1%27+and+1%3D1+union+select+null%2C+table_name+from+information_schema.tables%23&Submit=Submit","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64; rv:45.0) Gecko\/20100101 Firefox\/45.0"}}
00431{"flow_id":4,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348433,"pkt_ts_usec":465657,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA05bNAAEAG3iTAqAoyrBAAAQBQjWqDJLV8wtQmsIAQAOx5swAAAQEICgPoUM8BPn9c"}
06048{"flow_id":4,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348433,"pkt_ts_usec":546081,"pkt_caplen":4215,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":4215,"pkt_l4_len":4181,"pkt":"AMGxFOsxABm5CmnxCABFABBp5bRAAEAGze7AqAoyrBAAAQBQjWqDJLV8wtQmsIAYAOyHRwAAAQEICgPoUOMBPn9cSFRUUC8xLjEgMjAwIE9LDQpEYXRlOiBUaHUsIDA2IEp1bCAyMDE3IDEzOjQwOjMzIEdNVA0KU2VydmVyOiBBcGFjaGUvMi40LjE4IChVYnVudHUpDQpFeHBpcmVzOiBUdWUsIDIzIEp1biAyMDA5IDEyOjAwOjAwIEdNVA0KQ2FjaGUtQ29udHJvbDogbm8tY2FjaGUsIG11c3QtcmV2YWxpZGF0ZQ0KUHJhZ21hOiBuby1jYWNoZQ0KVmFyeTogQWNjZXB0LUVuY29kaW5nDQpDb250ZW50LUVuY29kaW5nOiBnemlwDQpDb250ZW50LUxlbmd0aDogMzc5Nw0KS2VlcC1BbGl2ZTogdGltZW91dD01LCBtYXg9MTAwDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpDb250ZW50LVR5cGU6IHRleHQvaHRtbDtjaGFyc2V0PXV0Zi04DQoNCh+LCAAAAAAAAAPNnXtv47gRwP\/eBfY7qOqi+0BjbXq4tpvaPji2kwjnJD4\/kruigEBLtM2NJOpIyk7u03dIybH82myaRYeLYKMHHz8NyZkhh1LevK7\/qXPdHv3W7zpzlcROf3za89uOe+R5tz+0Pa8z6ji\/Xowue85x7ZMzVIKFyvO6V67jzpXKTjxvuVzWlj\/UuJh5o4F3r0s51tnKwyNp8tQiFbnNN6\/fvK6beu6TOJWNPWUcf\/78uchaJH9Vn1MSweGrV\/WEKuLoLEf095wtGm6bp4qm6mj0kFHXCYuzhqvovfJ0Ef9ywjkRkqrGeHR29E\/X8YoyX9UVUzFt3uRxSgWZsJiphxNn+EvP8dMvNFSMp87JidMhSeqsEsXUuaUTp5VlMQuJSfK+c3Pb+uAsjmvHn5yPHbqgMc8SYPhY94oayupilt45gsYNV6qHmMo5pcp1FGCXtKGUrjMXdNpwazUPfqLFkuirXkJYWjO3vd3SGDzzqpz\/sITMqAeXNkuakoVOVjM3HsuQoWCZqiJ8IQtSXHUdKcINkC\/S\/O5DBbUv0m3WvSJl2URe2Ub6eMKjByeMidTNyxPqFm0XsYXDooarGwmeiIqyeSu3dCGV66\/qLJntkJiHlF7MZ7yWpTPXITG0+BMNtX5uYIXqdqrWQg6g4fJK7Tv3goxEEY2KB4IEebx6Tn33NObhnRZNzByehlD1XcNdsjTiyxrcMhyNd8WT1N65q6yQgWw0V81tXoDY6h4BKces+fpbCmQpDLPc9FtZy+bZV8rfTuo2\/cqV51ULIyvPnqjvMY3bHOpDx3MGFC46ndNKZV4eN18g0EVlIDPoHhORK+p9hWp\/Brd5qn87Z1yEz2yB7QLpPQ2fA2DSu802TxKSRms19DKKUIrpcyhMeqAYDs5eVvGUebWfMhiqDQY584g+0Uu+Kb\/bPGMwuH19Rb5YNnkWcxI9RzpljhJjbM5e2D4kU2CintVEZRYzbmmYC+q0W\/1R+6L1MhT5e8wqHJLG0AG1tnuCx+SDsV21nS8nCSZg5J7VOJVcWzTO+1N9+cPLqJaU3AXsWUirLG7zFo6cIZW61zp+55lqdrvceymDZ4EUGdzmr8Mh+CzXly8UhS5OPLd+sap\/QKdF1\/oOFPK5FHJFMVRcbCK80ASZsQhu5JPmcJ3MbWr\/EfpFcel54oD8LJ3yJ6qrpHKb\/Ys+jIopf15FZMJz9UQ1j2ncZksffj+xakfvyerXidxmzxxvAZQe24bvd9gR1C7s2hGEKYu+W9at71Udwfr8+KvTCPCNj4uiCve4UtTi0V8NQh7RgAhKSm95ykXiEFNAw\/2z68DMZ84B77w7Kt3PelY+1FhSASrlpHSZ0yyvevXgyrM\/4Pj4R9dJSQJHDLh308p8kjC1SjMszxYkztenZcVe1iymEJ6mLHgzQZvA4By\/c7T3ctw4dvJU67rCjDhpHsd\/dZR5Vl2FMxU8cXTPFIlp7kCGc5qQmkki\/1yfCHDZz5iQyiCdOCRKWFpcHuaies3Tlf8fCLYqB4M7aLVH3UEw7I6GaBTXvV5r5F9f4RMEGxIJWv1+z2+3Tv2eP\/oNEW58iSobqD7oD\/wbv9c976KBdK\/O\/SvE6m+6V3hj5Axkj1b5ee\/6tNULhqPWaIwNcdMa+K1TRGH83P0tKMfEeNg672JxXPdH\/qX\/b9BUI9BYaBh90JeXXVCYaA0CBCMf1Xz0e2NQTXjVD67b3eGw5w9HiAigofyrcyyAQfesOwAF7YOKaENXgDHhI6rrwfV4hGmshu2L7mVr1MKt3wKnYQgDQ\/t1uLZrRYFuvLQYQE34bTSCEerzF7X3wV7iItigowoQ\/CE6Gvjn54j+w3gIPhS+GG787i1a5f7V1XXnNOhdt3\/GZhgNfkUmGP42DDpgPFHnXCXL2UirijMfzbGqyOTGH4zGrR4ySfuyj98mp13wdYNOtwcznw6+QIJBd9hFc\/4rHH1Qpf5Vp4s9hIHlsntphVigt9jRT07HZ2fa0rXOu0FvMLbA1AS3LR\/P\/1nZmy7028IX8q\/Ori3Qs2YAoVseTYLrrFdAzvxur4MNsqHgrNAtlSFtg5Y7a417I5hqX\/dvrwfY6g6IioYyndgWmHarfYENsx7ZqBPhkuayCxNAvPWIqpK5HnT98yu9uo+NU\/gvlmiX6+si9oMtFN1GyMHQ3d5iAUkxljEbaJZTqSac32EB5JIKiVV5yOM8SWWQCbbAYogmWDXTdMZSvftHKjSEBU3RKp\/maYg27qjefBUHMZ+hISgWBXrjd65ohAUxp3EWhETRGRcPqBB39GHJBa4gBI1JsW0PEULxjKGNC5amPJoELI3ofSAVUWi2oSQpSkQlSQFjwlJQFYVcsDiyOJ\/h7XjMBEfrlbpuXC8BCO4ZxWUAT21BBaq\/UCCgjUQZkwUNEiIVyIGZveyYINpcPASFXsBmAdt5hy4UvsR0qIp0qENUsYQGf\/CUogMEMSVZIGnIUzSfag2jz\/EplCCpZJgO3j6WQL+DgTn9x6qbhCHPUzy\/Tg+NQL8QTdKQolGYKbjUHu4MlFeYC4E4Jd+EmTOpEKeFe2HAwKRoFmaTSOZJQoBo8hCUXVkfmjSoCu8g5Rw8R8sR1VxQElkOqZWmzYizmE9IbBuhook5tEbFrYCsUXNbQJaouhWV\/epuD2nEYGBY1Ncs18Z7MDPBZ4IkVrLZaS32gNpoMbYxLbQaZpJUvAhvi93YQLLDcuxDssF2bHBZbj0OsVqnpA+BWqgKD6Fapwz3glqoDpeEWeM\/Fyx2KMANFhs0XwFkucrbgbRO1+0QrhbrbOOyUPnuMFqndTcJbVK3UwYloS8MG4pKA1oiF4uGo1FYIYFMmARoHSShibZ3tpqZXTx7DMwum00qfJfOHuW9xWaT2tYfCI+IIoH5wCAaRa7oPb714BP9CcJ99hUz3JxRYfKCZAIdC8fbSgQVZkTQqLoSht5owLT6aHlA9AfMzXavdMpmuUDdmLoPTAsut0pUBZHu4yHnImIpgQmhnYDFdi0b2KB\/pTRcHdrV1Sps9vS2meB5FoAdnJQtah0VHtBSm158PSqLb20\/+sNlPwqIUoibV0soS2AUdBcSgoJEZgBxgI+CuanYYBR\/GMP4AbggpeOGC4Hrm0lQIlRZoEYKDqvWYHaZsFdh1k5NqW7xQeaYr0g8UhRLCvgcmHt8i6LmUFmMN46LohjfF1DQ77nlkszwtqcfhDN3cLGMO2cZmBlVaH3JrMQtiGAmPf4wtwglS0gQ6G8ZQD9B+56BgQjBSuu3u8vvC+CyGAbUF7MMR0Qlm6V6ykqVYukMVyr0PuNCBYomWUwUnmkwMFOy4IIpvFVRDYG8lcIwpGTBZib7nEUMbxuFgcmiaaD\/Bhxu3xA0RNxsUyLgfpXAQEiyoJGkREBe3BYpyjMrvDaAoCv2orycQe1TZIEIEt5hqw3toBUL2egYZk0Wt0lQP+9k4v3lvMEGBu0iF3t70EbsARzUoOw2U\/E2mUU0RXw20I5iGlrTk9ZgmI1XfiZnkk+nq3CUgTOlWAaFum4Ag2xjmw9ybwKc9ZYMowUmulchToX2EtkkJb0OZZeUVkTIUjIzaIVt2sqdYZV9fuWbCrgNtsZaj33LwFa7+2zCWndyC6kUVyRG3GYoWIjn1ssAMoR3QaxH2TpsjbpEUCQPSK44IIWi8IuQl19LqPW3DJlUiA1X4hTx\/YAvqFgwukSmETTK04ikqhATYqy94NkOO1mBY03f2cYJlkzNSzfbBrQSaAp1rFhDgq4A8hQMbITewYvtX9i7z6SMkfdSrufNJCXxg2T4JGW\/pUJwIQMuQPeIFDNGtk1mzYja4hJ5qreK6a3zwecf4UJGhY6XMLx5\/jai5EIhrklv4+iIZ6ks0ZAeZIC7Qm4mPMgLw1UGCxaGD+CgfxzSnoXhPTR2LAwfBsNsPP2dZkR\/wyyNhTGR4HhUFhPIYobdXAfILKCS1cUzW3hWi1NW8FjTXPdvbQhublJYYMUOAqGqwl0qXEu2l8cOW\/Y1NNwmtDLQeRALNdT5SIW\/jgYodsVdDZBlkdcDTHZJyoro6wEmdEnZEYG9f2tpDLYKZlkUtopmVRz2EcyySOw2F2os9v6t\/tNQVMqY4b3xBxCy\/ND09iLoasqLt9pehatMvuGSVIJNcsyosWE7FNrCVKMl0xSEBdKikf7jhIgtaFkg+xHIlmDtFpB1ErIrYLsJZ1mACeBw46QAYE18ssJiXYRyl82iLmR\/lHIXEjlOuQtkQaTy\/q0NkcJNCitWWW2MFu5SYa+yWhsx\/BoabhPaG7Y7yGYFl02huwqRJcG7FdGBRnvz+lXdi9gCDvTh\/G\/NSy6o468rrHtwUd\/LY\/3rVT1mzTpx5oJOG+5cqezE85bLZU3SMNdv8pOkFvLEK08fBNVbbaX3Y6f\/6eq4\/4+\/d2tzlcQuPKOYUdVwg0lM0ju3+T8XVfdIs+4B1V46CWXStLZkdyyjESM1LmaePvOGv\/TAK9E7guEp9\/N8Y+avE0AZMOUQ+byWkAVTeUqKp\/o9Pnos4QgalSg5p1Qd8bvcOyieZ5f0JFsGmo9KlfAUZtq1lCrPlHBkitgs20se9Pme+orUB6m\/Yx1Pt7buQXxJZGZay8zca9k8M03mP93e35T9SalO+GTycFQMUtNIB2Wzk7Jadt0zo64YonqEwr9igBf\/F1feFHcqAxlO4NgxGrvhhjElwm0eSMSihisfJNhA80J9me5VnaVZrhxtExvuJFdKC21B4hxOb2AcOhc0ztxVFRnP8ixYJeNpO2bhXcP9QhZEhoJl6gRSjLP3zrtazYOfRR6nVJAJi5liVHp6ZAdzKFHL+idAgg7A\/rIa+Y2YL985H9ym8yTVkOcwwfi+XNKU+RSZliWJ2SxtuDGdKrdZp0lzDFbAKOK6B2cOiRKWlg0I58OyFKdHFzQu00CJ6xT9i77fGZZ3IiZ1N4lWbXiwOaecK2pavGzLrNkhSerclE8XU+eWTpxW9vgRU+d95+a29cFZHNeOPzkfO5qHZ9or+giGormnh1XNBnTi6MEcg7UAldz8L3+6M6bfuAAA"}
00431{"flow_id":4,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348433,"pkt_ts_usec":546861,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Ww5AAD4GasqsEAABwKgKMo1qAFDC1CawgyTAzIAQARJuFAAAAQEICgE+f3ED6FDj"}
00431{"flow_id":4,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348433,"pkt_ts_usec":547279,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Ww9AAD4GasmsEAABwKgKMo1qAFDC1CawgyTFsYAQAShpGQAAAQEICgE+f3ED6FDj"}
00431{"flow_id":4,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348438,"pkt_ts_usec":551184,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA05bdAAEAG3iDAqAoyrBAAAQBQjWqDJMWxwtQmsIARAOxkcAAAAQEICgPoVccBPn9x"}
00432{"flow_id":4,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348438,"pkt_ts_usec":551823,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0WxBAAD4GasisEAABwKgKMo1qAFDC1CawgyTFsoARAShfUAAAAQEICgE+hFQD6FXH"}
00433{"flow_id":4,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348438,"pkt_ts_usec":551871,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA05bhAAEAG3h\/AqAoyrBAAAQBQjWqDJMWywtQmsYAQAOxfjAAAAQEICgPoVccBPoRU"}
00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":43,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1499348467295,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":36204,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00443{"flow_id":5,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348467,"pkt_ts_usec":295664,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8NrBAAD4GjyCsEAABwKgKMo1sAFAXzJbWAAAAAKACchCBAAAAAgQFtAQCCAoBPqBmAAAAAAEDAwc="}
00443{"flow_id":5,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348467,"pkt_ts_usec":295837,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQjWwuedQjF8yW16AScSAJgQAAAgQFtAQCCAoD6HHZAT6gZgEDAwc="}
00431{"flow_id":5,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348467,"pkt_ts_usec":296387,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NrFAAD4GjyesEAABwKgKMo1sAFAXzJbXLnnUJIAQAOWoiAAAAQEICgE+oGYD6HHZ"}
01236{"flow_id":5,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348467,"pkt_ts_usec":296717,"pkt_caplen":665,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":665,"pkt_l4_len":631,"pkt":"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"}
00858{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":46,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":4,"flow_first_seen":1499348467295,"flow_last_seen":1499348467296,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":599,"flow_tot_l4_payload_len":599,"flow_avg_l4_payload_len":149,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":36204,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"205.174.165.68","url":"205.174.165.68\/dv\/vulnerabilities\/sqli\/?id=1%27+and+1%3D1+union+select+user%2C+password+from+users%23&Submit=Submit","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64; rv:45.0) Gecko\/20100101 Firefox\/45.0"}}
00431{"flow_id":5,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348467,"pkt_ts_usec":296825,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0pf1AAEAGHdvAqAoyrBAAAQBQjWwuedQkF8yZLoAQAOymKgAAAQEICgPocdkBPqBm"}
03172{"flow_id":5,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348467,"pkt_ts_usec":301106,"pkt_caplen":2087,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":2087,"pkt_l4_len":2053,"pkt":"AMGxFOsxABm5CmnxCABFAAgZpf5AAEAGFfXAqAoyrBAAAQBQjWwuedQkF8yZLoAYAOx+9wAAAQEICgPocdoBPqBmSFRUUC8xLjEgMjAwIE9LDQpEYXRlOiBUaHUsIDA2IEp1bCAyMDE3IDEzOjQxOjA3IEdNVA0KU2VydmVyOiBBcGFjaGUvMi40LjE4IChVYnVudHUpDQpFeHBpcmVzOiBUdWUsIDIzIEp1biAyMDA5IDEyOjAwOjAwIEdNVA0KQ2FjaGUtQ29udHJvbDogbm8tY2FjaGUsIG11c3QtcmV2YWxpZGF0ZQ0KUHJhZ21hOiBuby1jYWNoZQ0KVmFyeTogQWNjZXB0LUVuY29kaW5nDQpDb250ZW50LUVuY29kaW5nOiBnemlwDQpDb250ZW50LUxlbmd0aDogMTY2OQ0KS2VlcC1BbGl2ZTogdGltZW91dD01LCBtYXg9MTAwDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpDb250ZW50LVR5cGU6IHRleHQvaHRtbDtjaGFyc2V0PXV0Zi04DQoNCh+LCAAAAAAAAAO1WG1v2zgS\/pwC\/Q88LnBtF2fRsuu3nK1FEjeXAOlurk7aPeAAg5JGMRtJVEXKju\/X35CSbeWtrtcNEMQUOS8PZ0jOQ75+Nfzb+I+Tq\/9cfiAzncTk8vr44vyE0AZjX9onjI2vxuTPs6uPF8R1mmSicxFoxj78TgmdaZ0dMrZYLJxF25H5Dbv6xO6MFdeoVc2GsjpOqEPqvX71+tXQ+rlL4lSNnrDhDgaDUrUUPxjOgIfYPDgYJqA5MSoN+FaI+YieyFRDqhtXywwoCcqvEdVwp5kx8U8SzHiuQI+ur04bfUpYafNgqIWOwftcxCnk3Bex0MtDMvn3BTlPv0KghUzJ4SEZ8yQlK6EYyBfwyVGWxSLgVuTt+POXo3dk7jpuk\/w6hjnEMksQw69DVnqo3MUivSU5xCOq9DIGNQPQlGiEXaENlKJklkM0oo7D8C+cL7jpZQkXqWOH2WNrAue8svNfkfAbYNh131LE50bMsQNrGyrIRabrEL7yOS97KVF5cA\/IV2V\/L9GB81VRb8hKySpFrMqRafsyXJIg5sqkVyZAy9yFYk5EOKImSTgjyKv01oaMkVr\/wVAkN4+Q2EkqFssb6WTpDSU8xoxvSdRm3ogV3T1ybYI8xcQVNe+PxqYZD0MIywmhQBGv5mlGj2MZ3JrQxILINEDXtyO6EGkoFw4OWRyjN+VMnDd0pYoK\/F66HOqdYdiGjGOUY+G9+hGDIsVtVth1q5xsln3H\/kNR6p3XenZzizuryLb4W8tQb2KahJFPgJ1kfFxzxorY2yOg89pGFrg8\/LzQwL6D6mkF6h2bX3Iq82DHDDw0CHcQ7ALAylPvRCYJT8PNMbQfikDl0S4orDyimHw63c9xJJjzW4ZbdSRQswhhyyr5IX3qnQrc3OemR+0dmyKLJQ93iU6lUcG4tl975odnGkvUTimqVOy+haDIgZwcXV6dnB3tB0V9i0UNh4IYF6A57bbgsXq4t+u1c38kUx+L3E7JqWk9QEPeHpvud\/uhWgC\/nYqdIK1UqPcFW2QCyqxacj7e8Zh9aPdOqelOQEoF6v05mSBn+ePjnqEw5vJd\/ecr\/58gKpfWT0ChdkWhVigmWub3IexZguxeRBq5tRxuxKhn+COui7Jrt3CgvkgjucVdTYp6l2eXuCsiuZsj7stCb3GzlqHekWn+vLAaorfV\/UaIehe2\/QBAxdjucb\/niaChsBsiiFcWM1r5NmN1Ijicud+9RiA3dktTJT2umZqv+eo0kCFMeQ68YsuRzBPCrYER\/YUSvPnMJML714erin4Os2pS1wpyPFIOK8qcZkWd1SOVF\/\/DttuhJOUJtgTifiyrCj8ReiUzqb7mPC42n5VjlnnlFYIZlCXeLAcPMRD3DTHsxR25pEjNWVeWEVIgyH+QDKe9kHlIolwmtk\/9MvRzJOenIlfaOj8kPExEWnZPirzex4ybF\/fVid6HQdD2O5z3up2w64b9dqsXgt\/vt4JoMHgBGDcoIVP\/ARAYDLjbD963+oHf7oedqNVt9jvtbq8\/aLWg2X4BIG673XuAoh+2O+122OtwaAXtQbcb9qAZvo+CoDtouV3\/BVBkuCfkAxjN0G32wuYg6vg+vG8GeFVsh9AJei4MYOD3XgCGwkU\/W\/6l1WEvxevzZThreR+x3NjDN094dS60rFh1OuFZuDnVas8iVb0AnjiBTNblI4e5gIVinfFl83f3stf94Ng3E6J5fgN4I0YqxNNb6v1lU+sT9El0Cm1C6izErcggFNy+3ZgvhqffVKxOv6fx\/KDy9xGgjQjyvJg5CZ8LXaS8nNW3uLG20AhmwLV9bWnI24I9G56dLW3FlkGqQelEprewdFLQzFpoWBP3bbNkab6f8NdYPRQ9jfon+tiebbOC5IKrzGYLizXcmYJrU3a+Pd8\/pL41qr70\/WVDm5qpbJKejc0jybrtihOUW3T13mP3efl\/VfifIQpV\/Q5i4Pm6Kj7FJtRSaUimhoGtX43qVdcvtDZBq+rsZ9yH5AzibM10MpkV2XQlJtOTkittnuoOUeI6e0ue4chmZ09naNHE+jeEZG5Jf1\/t\/FEsF2\/IO+qRragmssgD+Lm4lLW5DZmJJY\/FDRKhGCJkIUNIPEN67Hk8ZPhVL+NmdEWoyYV5ka1k0OJGApnw+XhSjYRCmWUSrnL4bDojKfW9B8rM2+eFOHuKitbLBjNks3w0t8\/Z3v8BD9S4i68XAAA="}
00431{"flow_id":5,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348467,"pkt_ts_usec":301783,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NrNAAD4GjyWsEAABwKgKMo1sAFAXzJkuLnncCYAQAQSeKgAAAQEICgE+oGgD6HHa"}
00431{"flow_id":5,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348472,"pkt_ts_usec":301832,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0pgBAAEAGHdjAqAoyrBAAAQBQjWwuedwJF8yZLoARAOyZXwAAAQEICgPodrwBPqBo"}
00431{"flow_id":5,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348472,"pkt_ts_usec":302316,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NrRAAD4GjySsEAABwKgKMo1sAFAXzJkuLnncCoARAQSUZAAAAQEICgE+pUoD6Ha8"}
00432{"flow_id":5,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348472,"pkt_ts_usec":302394,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0pgFAAEAGHdfAqAoyrBAAAQBQjWwuedwKF8yZL4AQAOyUewAAAQEICgPodr0BPqVK"}
00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":53,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1499348480992,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":36206,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00443{"flow_id":6,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348480,"pkt_ts_usec":992304,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8IqhAAD4GoyisEAABwKgKMo1uAFBrxY9uAAAAAKACchAnDQAAAgQFtAQCCAoBPq3GAAAAAAEDAwc="}
00443{"flow_id":6,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":54,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348480,"pkt_ts_usec":992428,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQjW5ct+zHa8WPb6AScSBbSwAAAgQFtAQCCAoD6H85AT6txgEDAwc="}
00431{"flow_id":6,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":55,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348480,"pkt_ts_usec":993219,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0IqlAAD4Goy+sEAABwKgKMo1uAFBrxY9vXLfsyIAQAOX6UQAAAQEICgE+rccD6H85"}
01137{"flow_id":6,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348480,"pkt_ts_usec":993268,"pkt_caplen":589,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":589,"pkt_l4_len":555,"pkt":"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"}
00804{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":56,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":4,"flow_first_seen":1499348480992,"flow_last_seen":1499348480993,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":523,"flow_tot_l4_payload_len":523,"flow_avg_l4_payload_len":130,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":36206,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"205.174.165.68","url":"205.174.165.68\/dv\/vulnerabilities\/sqli\/?id=1%27&Submit=Submit","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64; rv:45.0) Gecko\/20100101 Firefox\/45.0"}}
00432{"flow_id":6,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":57,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348480,"pkt_ts_usec":993311,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0k\/FAAEAGL+fAqAoyrBAAAQBQjW5ct+zIa8WReoAQAOv4QAAAAQEICgPofzkBPq3H"}
01144{"flow_id":6,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":58,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348480,"pkt_ts_usec":996075,"pkt_caplen":596,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":596,"pkt_l4_len":562,"pkt":"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"}
00431{"flow_id":6,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":59,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348480,"pkt_ts_usec":996659,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0IqtAAD4Goy2sEAABwKgKMo1uAFBrxZF6XLfu2oAQAO32KwAAAQEICgE+rccD6H86"}
00430{"flow_id":6,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348486,"pkt_ts_usec":1345,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0k\/NAAEAGL+XAqAoyrBAAAQBQjW5ct+7aa8WReoARAOvxSQAAAQEICgPohB0BPq3H"}
00429{"flow_id":6,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":61,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348486,"pkt_ts_usec":1932,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0IqxAAD4GoyysEAABwKgKMo1uAFBrxZF6XLfu24ARAO3sYgAAAQEICgE+sqsD6IQd"}
00431{"flow_id":6,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348486,"pkt_ts_usec":2003,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0k\/RAAEAGL+TAqAoyrBAAAQBQjW5ct+7ba8WRe4AQAOvsZAAAAQEICgPohB0BPrKr"}
00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":63,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1499348494345,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":36208,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00443{"flow_id":7,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348494,"pkt_ts_usec":345596,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8SndAAD4Ge1msEAABwKgKMo1wAFAblvCmAAAAAKACchAI9wAAAgQFtAQCCAoBPrrRAAAAAAEDAwc="}
00443{"flow_id":7,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348494,"pkt_ts_usec":345725,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQjXBGdqbdG5bwp6AScSCMVgAAAgQFtAQCCAoD6IxDAT660QEDAwc="}
00431{"flow_id":7,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":65,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348494,"pkt_ts_usec":346517,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0SnhAAD4Ge2CsEAABwKgKMo1wAFAblvCnRnam3oAQAOUrXgAAAQEICgE+utED6IxD"}
01151{"flow_id":7,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348494,"pkt_ts_usec":346566,"pkt_caplen":602,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":602,"pkt_l4_len":568,"pkt":"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"}
00817{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":66,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":4,"flow_first_seen":1499348494345,"flow_last_seen":1499348494346,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":536,"flow_tot_l4_payload_len":536,"flow_avg_l4_payload_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":36208,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"205.174.165.68","url":"205.174.165.68\/dv\/vulnerabilities\/sqli\/?id=1%27+and+1%3D1%23&Submit=Submit","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64; rv:45.0) Gecko\/20100101 Firefox\/45.0"}}
00431{"flow_id":7,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348494,"pkt_ts_usec":346614,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0KppAAEAGmT7AqAoyrBAAAQBQjXBGdqbeG5byv4AQAOspPwAAAQEICgPojEQBPrrR"}
02926{"flow_id":7,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348494,"pkt_ts_usec":350114,"pkt_caplen":1906,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1906,"pkt_l4_len":1872,"pkt":"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"}
00432{"flow_id":7,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":69,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348494,"pkt_ts_usec":350815,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0SnpAAD4Ge16sEAABwKgKMo1wAFAblvK\/RnauDoAQAQEh+AAAAQEICgE+utID6IxE"}
00431{"flow_id":7,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":70,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348499,"pkt_ts_usec":355269,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0Kp1AAEAGmTvAqAoyrBAAAQBQjXBGdq4OG5byv4ARAOsdKQAAAQEICgPokSgBPrrS"}
00432{"flow_id":7,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":71,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348499,"pkt_ts_usec":355896,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0SntAAD4Ge12sEAABwKgKMo1wAFAblvK\/RnauD4ARAQEYLwAAAQEICgE+v7UD6JEo"}
00432{"flow_id":7,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":72,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348499,"pkt_ts_usec":355969,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0Kp5AAEAGmTrAqAoyrBAAAQBQjXBGdq4PG5bywIAQAOsYRQAAAQEICgPokSgBPr+1"}
00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":73,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1499348506489,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":36210,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00443{"flow_id":8,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":73,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348506,"pkt_ts_usec":489087,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8gghAAD4GQ8isEAABwKgKMo1yAFDHw0SlAAAAAKACchD87AAAAgQFtAQCCAoBPsatAAAAAAEDAwc="}
00444{"flow_id":8,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":74,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348506,"pkt_ts_usec":489193,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQjXIW0CP4x8NEpqAScSAm\/AAAAgQFtAQCCAoD6JgfAT7GrQEDAwc="}
00431{"flow_id":8,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":75,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348506,"pkt_ts_usec":490001,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0gglAAD4GQ8+sEAABwKgKMo1yAFDHw0SmFtAj+YAQAOXGAwAAAQEICgE+xq0D6Jgf"}
01151{"flow_id":8,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":76,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348506,"pkt_ts_usec":490005,"pkt_caplen":603,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":603,"pkt_l4_len":569,"pkt":"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"}
00859{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":76,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":4,"flow_first_seen":1499348506489,"flow_last_seen":1499348506490,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":537,"flow_tot_l4_payload_len":537,"flow_avg_l4_payload_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":36210,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"205.174.165.68","url":"205.174.165.68\/dv\/vulnerabilities\/sqli\/?id=1%27+and+1%3D1+union+select+database%28%29%2C+user%28%29%23&Submit=Submit","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64; rv:45.0) Gecko\/20100101 Firefox\/45.0"}}
00432{"flow_id":8,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":77,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348506,"pkt_ts_usec":490071,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0u+ZAAEAGB\/LAqAoyrBAAAQBQjXIW0CP5x8NGv4AQAOvD5AAAAQEICgPomB8BPsat"}
02968{"flow_id":8,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":78,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348506,"pkt_ts_usec":495187,"pkt_caplen":1947,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1947,"pkt_l4_len":1913,"pkt":"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"}
00432{"flow_id":8,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":79,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348506,"pkt_ts_usec":495874,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ggtAAD4GQ82sEAABwKgKMo1yAFDHw0a\/FtArUoAQAQK8cQAAAQEICgE+xq4D6Jgh"}
00432{"flow_id":8,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":80,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348511,"pkt_ts_usec":496547,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ggxAAD4GQ8ysEAABwKgKMo1yAFDHw0a\/FtArUoARAQK3jgAAAQEICgE+y5AD6Jgh"}
00432{"flow_id":8,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":81,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348511,"pkt_ts_usec":496699,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0u+lAAEAGB+\/AqAoyrBAAAQBQjXIW0CtSx8NGwIARAOuywgAAAQEICgPonQMBPsuQ"}
00432{"flow_id":8,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":82,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348511,"pkt_ts_usec":497289,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0gg1AAD4GQ8usEAABwKgKMo1yAFDHw0bAFtArU4AQAQKyqgAAAQEICgE+y5ED6J0D"}
00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":83,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1499348514064,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":36212,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00442{"flow_id":9,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348514,"pkt_ts_usec":64531,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8tHhAAD4GEVisEAABwKgKMo10AFC7kHpqAAAAAKACchDL8wAAAgQFtAQCCAoBPs4SAAAAAAEDAwc="}
00442{"flow_id":9,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":84,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348514,"pkt_ts_usec":64644,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQjXSy4nMxu5B6a6AScSADUQAAAgQFtAQCCAoD6J+FAT7OEgEDAwc="}
00430{"flow_id":9,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":85,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348514,"pkt_ts_usec":65457,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0tHlAAD4GEV+sEAABwKgKMo10AFC7kHprsuJzMoAQAOWiVwAAAQEICgE+zhMD6J+F"}
01234{"flow_id":9,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":86,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348514,"pkt_ts_usec":65460,"pkt_caplen":666,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":666,"pkt_l4_len":632,"pkt":"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"}
00880{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":86,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":4,"flow_first_seen":1499348514064,"flow_last_seen":1499348514065,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":600,"flow_tot_l4_payload_len":600,"flow_avg_l4_payload_len":150,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":36212,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"205.174.165.68","url":"205.174.165.68\/dv\/vulnerabilities\/sqli\/?id=1%27+and+1%3D1+union+select+null%2C+table_name+from+information_schema.tables%23&Submit=Submit","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64; rv:45.0) Gecko\/20100101 Firefox\/45.0"}}
00430{"flow_id":9,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":87,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348514,"pkt_ts_usec":65524,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA07LdAAEAG1yDAqAoyrBAAAQBQjXSy4nMyu5B8w4AQAOyf+AAAAQEICgPon4UBPs4T"}
02393{"flow_id":9,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":88,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348514,"pkt_ts_usec":75711,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"}
04089{"flow_id":9,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":89,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348514,"pkt_ts_usec":75762,"pkt_caplen":2767,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":2767,"pkt_l4_len":2733,"pkt":"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"}
00430{"flow_id":9,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":90,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348514,"pkt_ts_usec":76460,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0tHtAAD4GEV2sEAABwKgKMo10AFC7kHzDsuJ42oAQAPuaPAAAAQEICgE+zhUD6J+I"}
00430{"flow_id":9,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":91,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348514,"pkt_ts_usec":76850,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0tHxAAD4GEVysEAABwKgKMo10AFC7kHzDsuKDZ4AQASWPhAAAAQEICgE+zhYD6J+I"}
00431{"flow_id":9,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":92,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348519,"pkt_ts_usec":77010,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0tH1AAD4GEVusEAABwKgKMo10AFC7kHzDsuKDZ4ARASWKoQAAAQEICgE+0vgD6J+I"}
00431{"flow_id":9,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":93,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348519,"pkt_ts_usec":77129,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA07LtAAEAG1xzAqAoyrBAAAQBQjXSy4oNnu5B8xIARAOyF9wAAAQEICgPopGoBPtL4"}
00431{"flow_id":9,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":94,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348519,"pkt_ts_usec":77716,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0tH5AAD4GEVqsEAABwKgKMo10AFC7kHzEsuKDaIAQASWFvgAAAQEICgE+0vgD6KRq"}
00504{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":94,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":11,"flow_first_seen":1499348407419,"flow_last_seen":1499348412425,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":530,"flow_tot_l4_payload_len":977,"flow_avg_l4_payload_len":88,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":36196,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00507{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":94,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":10,"flow_first_seen":1499348413192,"flow_last_seen":1499348418262,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1840,"flow_tot_l4_payload_len":2300,"flow_avg_l4_payload_len":230,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":36198,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00507{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":94,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":10,"flow_first_seen":1499348422024,"flow_last_seen":1499348427063,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1881,"flow_tot_l4_payload_len":2418,"flow_avg_l4_payload_len":241,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":36200,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00507{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":94,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":11,"flow_first_seen":1499348433464,"flow_last_seen":1499348438551,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":4149,"flow_tot_l4_payload_len":4749,"flow_avg_l4_payload_len":431,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":36202,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00507{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":94,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":10,"flow_first_seen":1499348467295,"flow_last_seen":1499348472302,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":2021,"flow_tot_l4_payload_len":2620,"flow_avg_l4_payload_len":262,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":36204,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00506{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":94,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":10,"flow_first_seen":1499348480992,"flow_last_seen":1499348486002,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":530,"flow_tot_l4_payload_len":1053,"flow_avg_l4_payload_len":105,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":36206,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00507{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":94,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":10,"flow_first_seen":1499348494345,"flow_last_seen":1499348499355,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1840,"flow_tot_l4_payload_len":2376,"flow_avg_l4_payload_len":237,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":36208,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00507{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":94,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":10,"flow_first_seen":1499348506489,"flow_last_seen":1499348511497,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1881,"flow_tot_l4_payload_len":2418,"flow_avg_l4_payload_len":241,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":36210,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00507{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":94,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":12,"flow_first_seen":1499348514064,"flow_last_seen":1499348519077,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":2701,"flow_tot_l4_payload_len":4749,"flow_avg_l4_payload_len":395,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":36212,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00135{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":94,"source":"WebattackSQLinj.pcap","alias":"nDPId-test"}
~~~~~~~~~~~~~~~~~~~~ SUMMARY ~~~~~~~~~~~~~~~~~~~~
~~ packets captured/processed: 94/94
~~ skipped flows.............: 0
~~ total layer4 data length..: 26812 bytes
~~ total detected protocols..: 9
~~ total active/idle flows...: 9/9
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~ total memory allocated....: 4849636 bytes
~~ total memory freed........: 4849636 bytes
~~ total allocations/frees...: 58503/58503
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~