1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
|
00611{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"cfgs\/default\/pcap\/dazn.pcapng","alias":"nDPId-test","version":"1.7.0","ndpi_version":"4.13.0-5173-c49d126","ndpi_api_version":11990,"size_per_flow":1400,"max-flows-per-thread":32768,"max-idle-flows-per-thread":1024,"reader-thread-count":1,"flow-scan-interval":10000000,"generic-max-idle-time":600000000,"icmp-max-idle-time":120000000,"udp-max-idle-time":180000000,"tcp-max-idle-time":7560000000,"max-packets-per-flow-to-send":5,"max-packets-per-flow-to-process":32,"max-packets-per-flow-to-analyse":32,"global_ts_usec":0}
00832{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":1,"source":"cfgs\/default\/pcap\/dazn.pcapng","alias":"nDPId-test","version":"1.7.0","ndpi_version":"4.13.0-5173-c49d126","ndpi_api_version":11990,"size_per_flow":1400,"packets-captured":1,"packets-processed":0,"pfring_active":false,"pfring_recv":0,"pfring_drop":0,"pfring_shunt":0,"total-skipped-flows":0,"total-l4-payload-len":0,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":0,"total-detection-updates":0,"total-updates":0,"current-active-flows":0,"total-active-flows":0,"total-idle-flows":0,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"global-alloc-count":0,"global-free-count":0,"global-alloc-bytes":0,"global-free-bytes":0,"total-events-serialized":2,"global_ts_usec":1653830614885814}
00772{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"cfgs\/default\/pcap\/dazn.pcapng","alias":"nDPId-test","flow_id":1,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1653830614885814,"flow_src_last_pkt_time":1653830614885814,"flow_dst_last_pkt_time":1653830614885814,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1653830614885814,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"52.84.223.58","src_port":54020,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00552{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"cfgs\/default\/pcap\/dazn.pcapng","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_src_last_pkt_time":1653830614885814,"flow_dst_last_pkt_time":1653830614885814,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1653830614885814,"pkt":"pJGxgjQ5PKn0qB\/sCABFAAA8nR9AAEAGx+XAqAGANFTfOtMEAbuvwsZTAAAAAKAC+vBmfAAAAgQFtAQCCAqWAjADAAAAAAEDAwc="}
00554{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"cfgs\/default\/pcap\/dazn.pcapng","alias":"nDPId-test","flow_id":1,"flow_packet_id":2,"flow_src_last_pkt_time":1653830614885814,"flow_dst_last_pkt_time":1653830614902501,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1653830614902501,"pkt":"PKn0qB\/spJGxgjQ5CABFAAA8gywAAPQGbdg0VN86wKgBgAG70wTy6KcPr8LGVKAS\/\/+ceQAAAgQFoAQCCAqKcaCKlgIwAwEDAwk="}
01238{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"cfgs\/default\/pcap\/dazn.pcapng","alias":"nDPId-test","flow_id":1,"flow_packet_id":3,"flow_src_last_pkt_time":1653830614904478,"flow_dst_last_pkt_time":1653830614902501,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"thread_ts_usec":1653830614904478,"pkt":"pJGxgjQ5PKn0qB\/sCABFAAI5nSFAAEAGxebAqAGANFTfOtMEAbuvwsZU8uinEIAYAfZtkgAAAQEICpYCMBWKcaCKFgMBAgABAAH8AwPGAVMbGSAdqErCRl+JXjKyqMchnfEu2B1zRzOaxV8o1iAgIXSPqMjljdeZ3z7HJVcJsXiZNidVLUq9BDfRlvUd8wAiEwETAxMCwCvAL8ypzKjALMAwwArACcATwBQAnACdAC8ANQEAAZEAAAARAA8AAAx3d3cuZGF6bi5jb20AFwAA\/wEAAQAACgAOAAwAHQAXABgAGQEAAQEACwACAQAAIwAAABAADgAMAmgyCGh0dHAvMS4xAAUABQEAAAAAACIACgAIBAMFAwYDAgMAMwBrAGkAHQAgb4BCLF1x\/xJ6a5y\/t336Oc1aPROIMgrb5TqghyKk8UgAFwBBBJ9JHh6PsEBzfFNPwetkTywSgp2rvZxjUd7cfOXHBFgNjkLd+otPjvJdROVP19OEA+JHkFvE7miAvh9c39D0acUAKwAFBAMEAwMADQAYABYEAwUDBgMIBAgFCAYEAQUBBgECAwIBAC0AAgEBABwAAkABABUAigAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="}
01210{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":3,"source":"cfgs\/default\/pcap\/dazn.pcapng","alias":"nDPId-test","flow_id":1,"flow_state":"info","flow_src_packets_processed":2,"flow_dst_packets_processed":1,"flow_first_seen":1653830614885814,"flow_src_last_pkt_time":1653830614904478,"flow_dst_last_pkt_time":1653830614902501,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1653830614904478,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"52.84.223.58","src_port":54020,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.Dazn","proto_id":"91.292","proto_by_ip":"AmazonAWS","proto_by_ip_id":265,"encrypted":1,"breed":"Fun","category_id":17,"category":"Streaming","hostname":"www.dazn.com","domainame":"www.dazn.com","tls": {"version":"TLSv1.2","ja3s":"","ja4":"t13d1715h2_5b57614c22b0_3d5424432f57","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2","blocks":0}}}
02468{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"cfgs\/default\/pcap\/dazn.pcapng","alias":"nDPId-test","flow_id":1,"flow_packet_id":4,"flow_src_last_pkt_time":1653830614904478,"flow_dst_last_pkt_time":1653830614920429,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"thread_ts_usec":1653830614920429,"pkt":"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"}
01255{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":4,"source":"cfgs\/default\/pcap\/dazn.pcapng","alias":"nDPId-test","flow_id":1,"flow_state":"info","flow_src_packets_processed":2,"flow_dst_packets_processed":2,"flow_first_seen":1653830614885814,"flow_src_last_pkt_time":1653830614904478,"flow_dst_last_pkt_time":1653830614920429,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":1428,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":1428,"midstream":0,"thread_ts_usec":1653830614920429,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"52.84.223.58","src_port":54020,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.Dazn","proto_id":"91.292","proto_by_ip":"AmazonAWS","proto_by_ip_id":265,"encrypted":1,"breed":"Fun","category_id":17,"category":"Streaming","hostname":"www.dazn.com","domainame":"www.dazn.com","tls": {"version":"TLSv1.3","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","ja4":"t13d1715h2_5b57614c22b0_3d5424432f57","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2","blocks":0}}}
00773{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5,"source":"cfgs\/default\/pcap\/dazn.pcapng","alias":"nDPId-test","flow_id":2,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1653830640613975,"flow_src_last_pkt_time":1653830640613975,"flow_dst_last_pkt_time":1653830640613975,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1653830640613975,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"13.226.244.27","src_port":46036,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00552{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"cfgs\/default\/pcap\/dazn.pcapng","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_src_last_pkt_time":1653830640613975,"flow_dst_last_pkt_time":1653830640613975,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1653830640613975,"pkt":"pJGxgjQ5PKn0qB\/sCABFAAA81ThAAEAGoV3AqAGADeL0G7PUAbsidLdlAAAAAKAC+vBeiAAAAgQFtAQCCArtba2JAAAAAAEDAwc="}
00555{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"cfgs\/default\/pcap\/dazn.pcapng","alias":"nDPId-test","flow_id":2,"flow_packet_id":2,"flow_src_last_pkt_time":1653830640613975,"flow_dst_last_pkt_time":1653830640629748,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1653830640629748,"pkt":"PKn0qB\/spJGxgjQ5CABFAAA8HAYAAPQG5o8N4vQbwKgBgAG7s9RejoeqInS3ZqAS\/\/\/XoAAAAgQFoAQCCApxJyp57W2tiQEDAwk="}
01237{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"cfgs\/default\/pcap\/dazn.pcapng","alias":"nDPId-test","flow_id":2,"flow_packet_id":3,"flow_src_last_pkt_time":1653830640634086,"flow_dst_last_pkt_time":1653830640629748,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"thread_ts_usec":1653830640634086,"pkt":"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"}
01239{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":7,"source":"cfgs\/default\/pcap\/dazn.pcapng","alias":"nDPId-test","flow_id":2,"flow_state":"info","flow_src_packets_processed":2,"flow_dst_packets_processed":1,"flow_first_seen":1653830640613975,"flow_src_last_pkt_time":1653830640634086,"flow_dst_last_pkt_time":1653830640629748,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1653830640634086,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"13.226.244.27","src_port":46036,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.Dazn","proto_id":"91.292","proto_by_ip":"AmazonAWS","proto_by_ip_id":265,"encrypted":1,"breed":"Fun","category_id":17,"category":"Streaming","hostname":"user-profile.ar.indazn.com","domainame":"user-profile.ar.indazn.com","tls": {"version":"TLSv1.2","ja3s":"","ja4":"t13d1715h2_5b57614c22b0_3d5424432f57","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2","blocks":0}}}
02481{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"cfgs\/default\/pcap\/dazn.pcapng","alias":"nDPId-test","flow_id":2,"flow_packet_id":4,"flow_src_last_pkt_time":1653830640634086,"flow_dst_last_pkt_time":1653830640651038,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"thread_ts_usec":1653830640651038,"pkt":"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"}
01284{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":8,"source":"cfgs\/default\/pcap\/dazn.pcapng","alias":"nDPId-test","flow_id":2,"flow_state":"info","flow_src_packets_processed":2,"flow_dst_packets_processed":2,"flow_first_seen":1653830640613975,"flow_src_last_pkt_time":1653830640634086,"flow_dst_last_pkt_time":1653830640651038,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":1428,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":1428,"midstream":0,"thread_ts_usec":1653830640651038,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"13.226.244.27","src_port":46036,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.Dazn","proto_id":"91.292","proto_by_ip":"AmazonAWS","proto_by_ip_id":265,"encrypted":1,"breed":"Fun","category_id":17,"category":"Streaming","hostname":"user-profile.ar.indazn.com","domainame":"user-profile.ar.indazn.com","tls": {"version":"TLSv1.3","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","ja4":"t13d1715h2_5b57614c22b0_3d5424432f57","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2","blocks":0}}}
00773{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9,"source":"cfgs\/default\/pcap\/dazn.pcapng","alias":"nDPId-test","flow_id":3,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1653830641480609,"flow_src_last_pkt_time":1653830641480609,"flow_dst_last_pkt_time":1653830641480609,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1653830641480609,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"13.226.244.30","src_port":40882,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00552{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"cfgs\/default\/pcap\/dazn.pcapng","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_src_last_pkt_time":1653830641480609,"flow_dst_last_pkt_time":1653830641480609,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1653830641480609,"pkt":"pJGxgjQ5PKn0qB\/sCABFAAA85BtAAEAGknfAqAGADeL0Hp+yAbsjfBE0AAAAAKAC+vA8bQAAAgQFtAQCCAp3jv7MAAAAAAEDAwc="}
00555{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"cfgs\/default\/pcap\/dazn.pcapng","alias":"nDPId-test","flow_id":3,"flow_packet_id":2,"flow_src_last_pkt_time":1653830641480609,"flow_dst_last_pkt_time":1653830641499729,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1653830641499729,"pkt":"PKn0qB\/spJGxgjQ5CABFAAA8XjkAAPQGpFkN4vQewKgBgAG7n7LhtoguI3wRNaAS\/\/8VuQAAAgQFoAQCCArbVdxqd47+zAEDAwk="}
01238{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"cfgs\/default\/pcap\/dazn.pcapng","alias":"nDPId-test","flow_id":3,"flow_packet_id":3,"flow_src_last_pkt_time":1653830641501966,"flow_dst_last_pkt_time":1653830641499729,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"thread_ts_usec":1653830641501966,"pkt":"pJGxgjQ5PKn0qB\/sCABFAAI55B1AAEAGkHjAqAGADeL0Hp+yAbsjfBE14baIL4AYAfZN2QAAAQEICneO\/uHbVdxqFgMBAgABAAH8AwP2xFVrrUUvT7baclvRUkGIqabLtROHVCH1j8n+tyIQOSBQFGnUgcb1RPrURqFyxAWNNtynXG\/2Smtg77i2bY+f2AAiEwETAxMCwCvAL8ypzKjALMAwwArACcATwBQAnACdAC8ANQEAAZEAAAAnACUAACJzdWJzY3JpcHRpb25zLXNlcnZpY2UuZGF6bi1hcGkuY29tABcAAP8BAAEAAAoADgAMAB0AFwAYABkBAAEBAAsAAgEAACMAAAAQAA4ADAJoMghodHRwLzEuMQAFAAUBAAAAAAAiAAoACAQDBQMGAwIDADMAawBpAB0AIFI+QFCwyxDx8rtg+zcI4aDG3vLdEXhdv9WlGPEzxkNWABcAQQRZp49grcHpoqyt72TjbH7tj6VIJDIKkQJbqcOiWq2yF5dYzF0IxbGxZvKD0AgVDvU5GFpnRplE+UiURWgGlLRaACsABQQDBAMDAA0AGAAWBAMFAwYDCAQIBQgGBAEFAQYBAgMCAQAtAAIBAQAcAAJAAQAVAHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="}
01256{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":11,"source":"cfgs\/default\/pcap\/dazn.pcapng","alias":"nDPId-test","flow_id":3,"flow_state":"info","flow_src_packets_processed":2,"flow_dst_packets_processed":1,"flow_first_seen":1653830641480609,"flow_src_last_pkt_time":1653830641501966,"flow_dst_last_pkt_time":1653830641499729,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1653830641501966,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"13.226.244.30","src_port":40882,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.Dazn","proto_id":"91.292","proto_by_ip":"AmazonAWS","proto_by_ip_id":265,"encrypted":1,"breed":"Fun","category_id":17,"category":"Streaming","hostname":"subscriptions-service.dazn-api.com","domainame":"subscriptions-service.dazn-api.com","tls": {"version":"TLSv1.2","ja3s":"","ja4":"t13d1715h2_5b57614c22b0_3d5424432f57","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2","blocks":0}}}
02492{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"cfgs\/default\/pcap\/dazn.pcapng","alias":"nDPId-test","flow_id":3,"flow_packet_id":4,"flow_src_last_pkt_time":1653830641501966,"flow_dst_last_pkt_time":1653830641520526,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"thread_ts_usec":1653830641520526,"pkt":"PKn0qB\/spJGxgjQ5CABFAAXIXjsAAPQGnssN4vQewKgBgAG7n7LhtogvI3wTOoAQAIN7lgAAAQEICttV3H93jv7hFgMDAHoCAAB2AwP19\/qDGjoXS4oSaU6\/9dZn\/bUvQ\/RVymcGAm1FbLA1CCBQFGnUgcb1RPrURqFyxAWNNtynXG\/2Smtg77i2bY+f2BMBAAAuACsAAgMEADMAJAAdACDYD+u6tIt\/u6lWfW4\/USRVqQQZbneP546oJkrzpXHzOBQDAwABARcDAwAbEzGkaMCM4EB1qRopJFv3Et16HjBgnzhrUzb7FwMDFT4tI29ZQugH\/QTN4Ro7RShzVYpVRbI9DrsTliKjXYlLRnAlN9AjWVd1EiKdmitOvNEnylHwvenvLB5kQ+Z117+7keP55OhwCA+bvNAR\/XzOUMewc\/5D3mL+3hwu2gEnMy7LQYfp9eqpiWywrkNMKmu8SIXZJzKmAdq034QXitu+7omz+VjKTyMv4nifq\/oX9igNJnv8gKkcmoZNma+TVO12I0DcE7O\/izsEwM3UNKFgSU8epUYsXUUtZ6onZuMQRfQ9pIqvx\/ulnPZhbrM5kLCVKgteSeZ0n95q5KNxSCPYnYfwmRTqdb7xwqwCTOr+xmLvaAACdShhMUhzuMpZulaHYCD3IWm2tXs857wDS1FzypwZQaloM61MqPQD20f6qgvF4Hx5fFm6XEeKK6EgLU0tB\/FG+af3AFrhG1P2jERIR+A0af84oPKXtU31i7PlyzJM1sktv59YM0hmFzSXnXSflNERf6EB65EA2x4+NTNK1RnVriahr8Qh+42GdQc3u+X8mnl4ClOEhxwGJoqyob\/4YOs5qxwIvEOTtDXG4icnFf\/KISF+rX31HB06GOm1196U2X\/IK2Ux8Oc6Q3+eMu0YZD15MFPIXlTLKBL430HoPwVMT9RPzqnnAsgdzM\/cw8DlWR\/7EE7D0xc2SoJFLTbpkhvv7W8BHM1EsSJtqLxbAzZ17razO0U18U+yWyGHoEXDLJ\/oMpqUp0U+nKS4ZYwc6twueukKJm\/WKQlLm+aTdK0JWzUErk99GDc5rONaVe\/VOsMz5S2t77vqhUIYQ4ifUCWk4of6V\/QVf3TsZRumOdFZsp+FY7fKUucRHHNbLoC5uo0HQfZkI9U1Wy9GsT88A\/hnynSDASUz2WWigrdXV9d\/4OOPUwTJ2ElTw5TjlnESaIuhm\/oy4szxgLqqDY+S17dpDRKLfJ28hnQ9fO0wCZ6e76G\/Td5e7NOwNTKmiTjIUyqbIMltnbLZgrAvJbHmcr\/OLyC01w\/NlXEubw2R8HPIPUEfof9HahFt5YJDm6qgxgktNhNfSxLIBSyiISnstXRMWvDbQ6bt4FUlj+BHGjWWswlkg0FA8iZT6y0jilw4DzNUvsDVhkuLhwBsh+ZHj3nWQFGujSCkLZv\/mpis0nBHtnhjinVVmLAjkvvfmLHN40pOJsl1OBhR4mv7HhMUxxKEOGTASHIkJZjHtX0jTPFaiq0rMBTnWwYOdKeM8faViEzFdrazD5WIys+HYd1e5BLoot7uAd7D80HdEGfQUpR\/+FCa\/OhxcTUUJdENDavcqekuhJ2NEv6chcAuElWZNkaV\/i7Q+dUUHLFBooDxl4P6O29trWcsQPGDFDC+XxpINz1cI9SED0bcTXLmE+8uUnq+\/As1ZViCRLFGUEelQhGLaF7Op\/GkJsUbU+OUAkvE6LM0dmqKSybd7JDamTXwtbUuRlAEvts9X\/q+1UCfZ\/BCKxtNA8Z\/YApHz6suoQ8QnP2ptRoyJhB2EyX2WFLrFQ1UP35Cg8EQ8yn7F46i7LcMaKJnW3lV37oQ54g5FntAypJSXpIL\/t6N4uBWOae0Y\/cYpwS80IA1A0Ye9yTQxsEcz86FGBwz3CZYd\/59M9DtI5Hd6sDQx860CsLLGNDworsyeuj2pIPItjxdGiqObIx1g673++fT09qe6R4yBLIb1iix9doxYsdt"}
01301{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":12,"source":"cfgs\/default\/pcap\/dazn.pcapng","alias":"nDPId-test","flow_id":3,"flow_state":"info","flow_src_packets_processed":2,"flow_dst_packets_processed":2,"flow_first_seen":1653830641480609,"flow_src_last_pkt_time":1653830641501966,"flow_dst_last_pkt_time":1653830641520526,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":1428,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":1428,"midstream":0,"thread_ts_usec":1653830641520526,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"13.226.244.30","src_port":40882,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.Dazn","proto_id":"91.292","proto_by_ip":"AmazonAWS","proto_by_ip_id":265,"encrypted":1,"breed":"Fun","category_id":17,"category":"Streaming","hostname":"subscriptions-service.dazn-api.com","domainame":"subscriptions-service.dazn-api.com","tls": {"version":"TLSv1.3","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","ja4":"t13d1715h2_5b57614c22b0_3d5424432f57","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2","blocks":0}}}
00975{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":12,"source":"cfgs\/default\/pcap\/dazn.pcapng","alias":"nDPId-test","flow_id":3,"flow_state":"info","flow_src_packets_processed":2,"flow_dst_packets_processed":2,"flow_first_seen":1653830641480609,"flow_src_last_pkt_time":1653830641501966,"flow_dst_last_pkt_time":1653830641520526,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":1428,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":1428,"midstream":0,"thread_ts_usec":1653830641520526,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"13.226.244.30","src_port":40882,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.Dazn","proto_id":"91.292","proto_by_ip":"AmazonAWS","proto_by_ip_id":265,"encrypted":1,"breed":"Fun","category_id":17,"category":"Streaming"}}
00975{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":12,"source":"cfgs\/default\/pcap\/dazn.pcapng","alias":"nDPId-test","flow_id":2,"flow_state":"info","flow_src_packets_processed":2,"flow_dst_packets_processed":2,"flow_first_seen":1653830640613975,"flow_src_last_pkt_time":1653830640634086,"flow_dst_last_pkt_time":1653830640651038,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":1428,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":1428,"midstream":0,"thread_ts_usec":1653830641520526,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"13.226.244.27","src_port":46036,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.Dazn","proto_id":"91.292","proto_by_ip":"AmazonAWS","proto_by_ip_id":265,"encrypted":1,"breed":"Fun","category_id":17,"category":"Streaming"}}
00974{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":12,"source":"cfgs\/default\/pcap\/dazn.pcapng","alias":"nDPId-test","flow_id":1,"flow_state":"info","flow_src_packets_processed":2,"flow_dst_packets_processed":2,"flow_first_seen":1653830614885814,"flow_src_last_pkt_time":1653830614904478,"flow_dst_last_pkt_time":1653830614920429,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":1428,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":1428,"midstream":0,"thread_ts_usec":1653830641520526,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"52.84.223.58","src_port":54020,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.Dazn","proto_id":"91.292","proto_by_ip":"AmazonAWS","proto_by_ip_id":265,"encrypted":1,"breed":"Fun","category_id":17,"category":"Streaming"}}
00841{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":12,"source":"cfgs\/default\/pcap\/dazn.pcapng","alias":"nDPId-test","version":"1.7.0","ndpi_version":"4.13.0-5173-c49d126","ndpi_api_version":11990,"size_per_flow":1400,"packets-captured":12,"packets-processed":12,"pfring_active":false,"pfring_recv":0,"pfring_drop":0,"pfring_shunt":0,"total-skipped-flows":0,"total-l4-payload-len":5835,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":3,"total-detection-updates":3,"total-updates":0,"current-active-flows":0,"total-active-flows":3,"total-idle-flows":3,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"global-alloc-count":0,"global-free-count":0,"global-alloc-bytes":0,"global-free-bytes":0,"total-events-serialized":27,"global_ts_usec":1653830641520526}
~~~~~~~~~~~~~~~~~~~~ SUMMARY ~~~~~~~~~~~~~~~~~~~~
~~ packets captured/processed: 12/12
~~ skipped flows.............: 0
~~ total layer4 data length..: 5835 bytes
~~ total detected protocols..: 3
~~ total active/idle flows...: 3/3
~~ total timeout flows.......: 0
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~ total memory allocated....: 8440024 bytes
~~ total memory freed........: 8440024 bytes
~~ total allocations/frees...: 144779/144779
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~ json message min len.......: 557 chars
~~ json message max len.......: 2497 chars
~~ json message avg len.......: 1526 chars
|