1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
|
00575{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"cfgs\/default\/pcap\/dtls_mid_sessions.pcapng","alias":"nDPId-test","version":"1.5.0","ndpi_version":"4.9.0-4361-0db12b13","max-flows-per-thread":2048,"max-idle-flows-per-thread":64,"reader-thread-count":1,"flow-scan-interval":10000000,"generic-max-idle-time":600000000,"icmp-max-idle-time":120000000,"udp-max-idle-time":180000000,"tcp-max-idle-time":7560000000,"max-packets-per-flow-to-send":5,"max-packets-per-flow-to-process":32,"max-packets-per-flow-to-analyse":32,"global_ts_usec":0}
00638{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":1,"source":"cfgs\/default\/pcap\/dtls_mid_sessions.pcapng","alias":"nDPId-test","version":"1.5.0","ndpi_version":"4.9.0-4361-0db12b13","packets-captured":1,"packets-processed":0,"total-skipped-flows":0,"total-l4-payload-len":0,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":0,"total-detection-updates":0,"total-updates":0,"current-active-flows":0,"total-active-flows":0,"total-idle-flows":0,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":2,"global_ts_usec":1644251732783352}
00790{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"cfgs\/default\/pcap\/dtls_mid_sessions.pcapng","alias":"nDPId-test","flow_id":1,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1644251732783352,"flow_src_last_pkt_time":1644251732783352,"flow_dst_last_pkt_time":1644251732783352,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":93,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":93,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":93,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1644251732783352,"l3_proto":"ip4","src_ip":"53.214.238.65","dst_ip":"199.186.151.155","src_port":53558,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5}
00651{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"cfgs\/default\/pcap\/dtls_mid_sessions.pcapng","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_src_last_pkt_time":1644251732783352,"flow_dst_last_pkt_time":1644251732783352,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":135,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":135,"pkt_l4_len":101,"thread_ts_usec":1644251732783352,"pkt":"AAAAAAAAAAUAH77DCABFAAB5TfQAAHkRcBI11u5Bx7qXm9E2AbsAZQC2FwEAAAEAAAAA1BUAUFbLHE7KkMRUAMa+BCcg\/DTD4cWbj4CR\/ou6\/eEj1qcEoJjrsJeHH7KwZMNGTwAG1rS\/\/iatJdFhJzn0FDJ0hSfdwvHN8cKVzNzbvFPCN5Gy"}
01053{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"cfgs\/default\/pcap\/dtls_mid_sessions.pcapng","alias":"nDPId-test","flow_id":1,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1644251732783352,"flow_src_last_pkt_time":1644251732783352,"flow_dst_last_pkt_time":1644251732783352,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":93,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":93,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":93,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1644251732783352,"l3_proto":"ip4","src_ip":"53.214.238.65","dst_ip":"199.186.151.155","src_port":53558,"dst_port":443,"l4_proto":"udp","ndpi": {"flow_risk": {"46": {"risk":"Unidirectional Traffic","severity":"Low","risk_score": {"total":500,"client":430,"server":70}}},"confidence": {"6":"DPI"},"proto":"DTLS","proto_id":"30","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Safe","category_id":5,"category":"Web"}}
00792{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2,"source":"cfgs\/default\/pcap\/dtls_mid_sessions.pcapng","alias":"nDPId-test","flow_id":2,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1644251732795618,"flow_src_last_pkt_time":1644251732795618,"flow_dst_last_pkt_time":1644251732795618,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":378,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":378,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":378,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1644251732795618,"l3_proto":"ip4","src_ip":"135.215.56.198","dst_ip":"124.73.140.89","src_port":443,"dst_port":61189,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5}
01033{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"cfgs\/default\/pcap\/dtls_mid_sessions.pcapng","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_src_last_pkt_time":1644251732795618,"flow_dst_last_pkt_time":1644251732795618,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":420,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":420,"pkt_l4_len":386,"thread_ts_usec":1644251732795618,"pkt":"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"}
01055{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":2,"source":"cfgs\/default\/pcap\/dtls_mid_sessions.pcapng","alias":"nDPId-test","flow_id":2,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1644251732795618,"flow_src_last_pkt_time":1644251732795618,"flow_dst_last_pkt_time":1644251732795618,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":378,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":378,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":378,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1644251732795618,"l3_proto":"ip4","src_ip":"135.215.56.198","dst_ip":"124.73.140.89","src_port":443,"dst_port":61189,"l4_proto":"udp","ndpi": {"flow_risk": {"46": {"risk":"Unidirectional Traffic","severity":"Low","risk_score": {"total":500,"client":430,"server":70}}},"confidence": {"6":"DPI"},"proto":"DTLS","proto_id":"30","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Safe","category_id":5,"category":"Web"}}
00797{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3,"source":"cfgs\/default\/pcap\/dtls_mid_sessions.pcapng","alias":"nDPId-test","flow_id":3,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1644251732819831,"flow_src_last_pkt_time":1644251732819831,"flow_dst_last_pkt_time":1644251732819831,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1243,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1243,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1243,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1644251732819831,"l3_proto":"ip4","src_ip":"170.151.105.215","dst_ip":"121.152.255.238","src_port":443,"dst_port":8460,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5}
02212{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"cfgs\/default\/pcap\/dtls_mid_sessions.pcapng","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_src_last_pkt_time":1644251732819831,"flow_dst_last_pkt_time":1644251732819831,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":1285,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1285,"pkt_l4_len":1251,"thread_ts_usec":1644251732819831,"pkt":"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"}
01060{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":3,"source":"cfgs\/default\/pcap\/dtls_mid_sessions.pcapng","alias":"nDPId-test","flow_id":3,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1644251732819831,"flow_src_last_pkt_time":1644251732819831,"flow_dst_last_pkt_time":1644251732819831,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1243,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1243,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1243,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1644251732819831,"l3_proto":"ip4","src_ip":"170.151.105.215","dst_ip":"121.152.255.238","src_port":443,"dst_port":8460,"l4_proto":"udp","ndpi": {"flow_risk": {"46": {"risk":"Unidirectional Traffic","severity":"Low","risk_score": {"total":500,"client":430,"server":70}}},"confidence": {"6":"DPI"},"proto":"DTLS","proto_id":"30","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Safe","category_id":5,"category":"Web"}}
00801{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"cfgs\/default\/pcap\/dtls_mid_sessions.pcapng","alias":"nDPId-test","flow_id":2,"flow_packet_id":2,"flow_src_last_pkt_time":1644251732824440,"flow_dst_last_pkt_time":1644251732795618,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":248,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":248,"pkt_l4_len":214,"thread_ts_usec":1644251732824440,"pkt":"AAAAAAAAAA0A4CzfCABFAADqm5gAAPMRYiqH1zjGfEmMWQG77wUA1gTeF\/79AAEAAAAMHEgAwbJE\/pYaT4jqSUPNYrxJL8Codo+NI1ON15wpo0UXGwutN5NqnUCtT4dyFWAwgXODy+FvALQSrXC5ZUWgnBdE5XT3NYf0YexgHZ5a2Idl8QW41Rj7Lf2MjzpVZcdBplQYlFQw8nR6sXhVOTnwn+aZxjvNjegLOT\/kssRbnCbEZBdFElSPioELBFUc51QWw1KkVU7sCAsrnomfJlGQXKgbAgDCxy96WQjMbwdI0DC9j1PjopVLRsWpCdrq61oMc+AXpbs="}
01067{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"cfgs\/default\/pcap\/dtls_mid_sessions.pcapng","alias":"nDPId-test","flow_id":2,"flow_packet_id":3,"flow_src_last_pkt_time":1644251732837695,"flow_dst_last_pkt_time":1644251732795618,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":444,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":444,"pkt_l4_len":410,"thread_ts_usec":1644251732837695,"pkt":"AAAAAAAAAA0A4CzfCABFAAGul4wAAPMRZXKH1zjGfEmMWQG77wUBmmGkF\/79AAEAAAAMHEsBhbJE\/pYaT4jtxwUFArtWMM0UapEkJqGElOoBLeIEH2dap\/HHoRfD+WZCZVeWcfs89omPS71pdPjHruF4M8hY0GDqFGaq4hwXSFhdKzQYz9O+XrC2R3kLNO+7d9ahfIZgOf3IzVC3go+4VnJWVPbutZawFrPDHu4OI2DkufkbgN2w2MdfyHY7tFIv3sv9Yec+tmHqp+TfY\/7K48nV\/SpID+BxX8vM1sjsa38xKBOp231zDMTPzXJ6BXVnEv38pt+e6QYodnl8j0\/\/iNXd\/0ygBx2Gbs+PMnBPhRl6mKflFEu+Rd1rHxB+cdW9TD5Zu0JuceAevKUzl8EhV8zP0uj8u2txE2Wy+x7Ur2Sf3iDsNtMEnmSFOBlZ4L0kTTNdryI+9vkWxgqkIpD+tTHrsbvnuosn8rINm4EEiwmOHxT5Txkfi0nQj3KhwBB\/CrnZUgKygw4AqCnOteFXYUOpGWPiW3ph5GOerUZvQJGtAXvFm9GNRbBLrfJbU+1TGc+0prjKcuXwKJXs"}
00630{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"cfgs\/default\/pcap\/dtls_mid_sessions.pcapng","alias":"nDPId-test","flow_id":2,"flow_packet_id":4,"flow_src_last_pkt_time":1644251732837958,"flow_dst_last_pkt_time":1644251732795618,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":120,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":120,"pkt_l4_len":86,"thread_ts_usec":1644251732837958,"pkt":"AAAAAAAAAA0A4CzfCABFAABqkNkAAPMRbWmH1zjGfEmMWQG77wUAVgPdF\/79AAEAAAAMHEwAQbJE\/pYaT4ju2lyWOdYn8AWXzOeZP9YfuPJmFLoZRQ9EQiI\/mSVoLE4x\/ugCyt7LSBuuDiFMmp0siRmpNoKie\/Hn"}
00629{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"cfgs\/default\/pcap\/dtls_mid_sessions.pcapng","alias":"nDPId-test","flow_id":2,"flow_packet_id":5,"flow_src_last_pkt_time":1644251732851054,"flow_dst_last_pkt_time":1644251732795618,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":120,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":120,"pkt_l4_len":86,"thread_ts_usec":1644251732851054,"pkt":"AAAAAAAAAA0A4CzfCABFAABqwREAAPMRPTGH1zjGfEmMWQG77wUAVufKF\/79AAEAAAAMHE4AQbJE\/pYaT4jwUol3s4QuC6\/6nhVjJxtmQ0Un4eeQFSWzpuXHQ7KdDtfj9v7vhGH+lGpo9426jLkf2k9\/7rN3LmmL"}
00797{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8,"source":"cfgs\/default\/pcap\/dtls_mid_sessions.pcapng","alias":"nDPId-test","flow_id":4,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1644251732859305,"flow_src_last_pkt_time":1644251732859305,"flow_dst_last_pkt_time":1644251732859305,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1453,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1453,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1453,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1644251732859305,"l3_proto":"ip4","src_ip":"170.151.105.215","dst_ip":"72.102.179.218","src_port":443,"dst_port":62811,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5}
02499{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"cfgs\/default\/pcap\/dtls_mid_sessions.pcapng","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_src_last_pkt_time":1644251732859305,"flow_dst_last_pkt_time":1644251732859305,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":1495,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1495,"pkt_l4_len":1461,"thread_ts_usec":1644251732859305,"pkt":"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"}
01060{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":8,"source":"cfgs\/default\/pcap\/dtls_mid_sessions.pcapng","alias":"nDPId-test","flow_id":4,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1644251732859305,"flow_src_last_pkt_time":1644251732859305,"flow_dst_last_pkt_time":1644251732859305,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1453,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1453,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1453,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1644251732859305,"l3_proto":"ip4","src_ip":"170.151.105.215","dst_ip":"72.102.179.218","src_port":443,"dst_port":62811,"l4_proto":"udp","ndpi": {"flow_risk": {"46": {"risk":"Unidirectional Traffic","severity":"Low","risk_score": {"total":500,"client":430,"server":70}}},"confidence": {"6":"DPI"},"proto":"DTLS","proto_id":"30","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Safe","category_id":5,"category":"Web"}}
00651{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"cfgs\/default\/pcap\/dtls_mid_sessions.pcapng","alias":"nDPId-test","flow_id":3,"flow_packet_id":2,"flow_src_last_pkt_time":1644251732819831,"flow_dst_last_pkt_time":1644251732895363,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":135,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":135,"pkt_l4_len":101,"thread_ts_usec":1644251732895363,"pkt":"AAAAAAAAAA0A4CzfCABFAAB5eiMAAHURPVt5mP\/uqpdp1yEMAbsAZRo2F\/79AAEAAAAMhRMAUKWzGmfeg9vDd7\/B3T+kirAR7zq6Tf8oB5f1Qe4Uo6LIUlneZEoesMiQtJMzhmqS3RqJKvvRB2aCGmdCfvmL62icrVJNR6\/VZ+07XbOviqwQ"}
00866{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"cfgs\/default\/pcap\/dtls_mid_sessions.pcapng","alias":"nDPId-test","flow_id":4,"flow_packet_id":2,"flow_src_last_pkt_time":1644251732859305,"flow_dst_last_pkt_time":1644251732899743,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":293,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":293,"pkt_l4_len":259,"thread_ts_usec":1644251732899743,"pkt":"AAAAAAAAAA0A4CzfCABFAAEXWbEAAHsR1HVIZrPaqpdp1\/VbAbsBA4vCF\/79AAEAAAABzVAA7sDAOt7ZNYadwFH6SHccSVCdGOeDS5VAVNAWpaw7BhQgb+1bCi82Zlyb4VWcAVH\/n1elQ7THJB3xDUKy4xtskzMRGshyDl5w6kBiV+\/uymBxK+YhMTQUTq1HeBxB7zUOp+X+xuu7HM616iGjTAfQnnvrYWz\/HmxBxjmowsnmxGXDMK7PSSumdsoeyWUI738iBD4CXuuT0D1mQ3mFUW6\/Pk13ysfBe5VqGzIqxDG7bUTMvbDlBM25yv2N52iEk51XTxj0yy9gjACGD6yvi0albjjmw6qqv2ayTvP7YsK8J5EjIW\/WNb6g+p99LqUDPkA="}
00653{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"cfgs\/default\/pcap\/dtls_mid_sessions.pcapng","alias":"nDPId-test","flow_id":3,"flow_packet_id":3,"flow_src_last_pkt_time":1644251732904039,"flow_dst_last_pkt_time":1644251732895363,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":135,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":135,"pkt_l4_len":101,"thread_ts_usec":1644251732904039,"pkt":"AAAAAAAAAAwAL85GCABFAAB5j\/YAAD8RXYiql2nXeZj\/7gG7IQwAZQo0F\/79AAEAAAAOADoAUJBZfrcT0WI3vKOvm48zQRKNwV9xk31D25d9i4LGPOZLsa\/MxEM\/iT8j5X2NeXzZcl7g81+pOvAYTMQ6CMg7uw6mEidESPz\/p+RCZ0ysmpq9"}
02493{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"cfgs\/default\/pcap\/dtls_mid_sessions.pcapng","alias":"nDPId-test","flow_id":3,"flow_packet_id":4,"flow_src_last_pkt_time":1644251732905529,"flow_dst_last_pkt_time":1644251732895363,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":1495,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1495,"pkt_l4_len":1461,"thread_ts_usec":1644251732905529,"pkt":"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"}
02499{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"cfgs\/default\/pcap\/dtls_mid_sessions.pcapng","alias":"nDPId-test","flow_id":3,"flow_packet_id":5,"flow_src_last_pkt_time":1644251732905668,"flow_dst_last_pkt_time":1644251732895363,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":1495,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1495,"pkt_l4_len":1461,"thread_ts_usec":1644251732905668,"pkt":"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"}
00720{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"cfgs\/default\/pcap\/dtls_mid_sessions.pcapng","alias":"nDPId-test","flow_id":4,"flow_packet_id":3,"flow_src_last_pkt_time":1644251733036484,"flow_dst_last_pkt_time":1644251732899743,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":186,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":186,"pkt_l4_len":152,"thread_ts_usec":1644251733036484,"pkt":"AAAAAAAAAAwAL85GCABFAACskrIAAD8R19+ql2nXSGaz2gG79VsAmK\/7F\/79AAEAAAAB\/fQAg13h0hdGzu1WNO2vU\/IbgHdYF0RFMS34pXUQgZKyQWeJANVsXGZq+9MFiIsKjl3D7HT8luq5HJMe4S4Zb3zMPZ6zO4gT5DOoVt7Is6ObHtcjGB0kUDwHIjrh3nhApNylKNWwtoR5rdprjwF7EWz\/b9mEcMLFaMAE3VniOUA3LqrIzirj"}
01007{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"cfgs\/default\/pcap\/dtls_mid_sessions.pcapng","alias":"nDPId-test","flow_id":4,"flow_packet_id":4,"flow_src_last_pkt_time":1644251733036484,"flow_dst_last_pkt_time":1644251733058590,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":398,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":398,"pkt_l4_len":364,"thread_ts_usec":1644251733058590,"pkt":"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"}
01594{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":54,"source":"cfgs\/default\/pcap\/dtls_mid_sessions.pcapng","alias":"nDPId-test","flow_id":4,"flow_packet_id":5,"flow_src_last_pkt_time":1644251733036484,"flow_dst_last_pkt_time":1644251733060599,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":833,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":833,"pkt_l4_len":799,"thread_ts_usec":1644251733060599,"pkt":"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"}
00972{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":91,"source":"cfgs\/default\/pcap\/dtls_mid_sessions.pcapng","alias":"nDPId-test","flow_id":2,"flow_state":"finished","flow_src_packets_processed":30,"flow_dst_packets_processed":0,"flow_first_seen":1644251732795618,"flow_src_last_pkt_time":1644251733063123,"flow_dst_last_pkt_time":1644251732795618,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":78,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1339,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":7981,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1644251736135259,"l3_proto":"ip4","src_ip":"135.215.56.198","dst_ip":"124.73.140.89","src_port":443,"dst_port":61189,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"DTLS","proto_id":"30","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Safe","category_id":5,"category":"Web"}}
00981{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":91,"source":"cfgs\/default\/pcap\/dtls_mid_sessions.pcapng","alias":"nDPId-test","flow_id":3,"flow_state":"finished","flow_src_packets_processed":17,"flow_dst_packets_processed":13,"flow_first_seen":1644251732819831,"flow_src_last_pkt_time":1644251733371724,"flow_dst_last_pkt_time":1644251733286733,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":93,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1453,"flow_dst_max_l4_payload_len":310,"flow_src_tot_l4_payload_len":15606,"flow_dst_tot_l4_payload_len":1540,"midstream":0,"thread_ts_usec":1644251736135259,"l3_proto":"ip4","src_ip":"170.151.105.215","dst_ip":"121.152.255.238","src_port":443,"dst_port":8460,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"DTLS","proto_id":"30","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Safe","category_id":5,"category":"Web"}}
00968{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":91,"source":"cfgs\/default\/pcap\/dtls_mid_sessions.pcapng","alias":"nDPId-test","flow_id":1,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1644251732783352,"flow_src_last_pkt_time":1644251732783352,"flow_dst_last_pkt_time":1644251732783352,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":93,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":93,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":93,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1644251736135259,"l3_proto":"ip4","src_ip":"53.214.238.65","dst_ip":"199.186.151.155","src_port":53558,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"DTLS","proto_id":"30","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Safe","category_id":5,"category":"Web"}}
00980{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":91,"source":"cfgs\/default\/pcap\/dtls_mid_sessions.pcapng","alias":"nDPId-test","flow_id":4,"flow_state":"finished","flow_src_packets_processed":13,"flow_dst_packets_processed":17,"flow_first_seen":1644251732859305,"flow_src_last_pkt_time":1644251736135259,"flow_dst_last_pkt_time":1644251736133006,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":93,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1453,"flow_dst_max_l4_payload_len":791,"flow_src_tot_l4_payload_len":5737,"flow_dst_tot_l4_payload_len":3089,"midstream":0,"thread_ts_usec":1644251736135259,"l3_proto":"ip4","src_ip":"170.151.105.215","dst_ip":"72.102.179.218","src_port":443,"dst_port":62811,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"DTLS","proto_id":"30","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Safe","category_id":5,"category":"Web"}}
00648{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":91,"source":"cfgs\/default\/pcap\/dtls_mid_sessions.pcapng","alias":"nDPId-test","version":"1.5.0","ndpi_version":"4.9.0-4361-0db12b13","packets-captured":91,"packets-processed":91,"total-skipped-flows":0,"total-l4-payload-len":34046,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":4,"total-detection-updates":0,"total-updates":0,"current-active-flows":0,"total-active-flows":4,"total-idle-flows":4,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":31,"global_ts_usec":1644251736135259}
~~~~~~~~~~~~~~~~~~~~ SUMMARY ~~~~~~~~~~~~~~~~~~~~
~~ packets captured/processed: 91/91
~~ skipped flows.............: 0
~~ total layer4 data length..: 34046 bytes
~~ total detected protocols..: 4
~~ total active/idle flows...: 4/4
~~ total timeout flows.......: 0
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~ total memory allocated....: 11484407 bytes
~~ total memory freed........: 11484407 bytes
~~ total allocations/frees...: 216749/216749
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~ json string min len.......: 580 chars
~~ json string max len.......: 2504 chars
~~ json string avg len.......: 1541 chars
|