1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
|
00569{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"cfgs\/default\/pcap\/google_meet.pcapng","alias":"nDPId-test","version":"1.7.0","ndpi_version":"4.11.0-4834-92507c0","max-flows-per-thread":2048,"max-idle-flows-per-thread":64,"reader-thread-count":1,"flow-scan-interval":10000000,"generic-max-idle-time":600000000,"icmp-max-idle-time":120000000,"udp-max-idle-time":180000000,"tcp-max-idle-time":7560000000,"max-packets-per-flow-to-send":5,"max-packets-per-flow-to-process":32,"max-packets-per-flow-to-analyse":32,"global_ts_usec":0}
00793{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":1,"source":"cfgs\/default\/pcap\/google_meet.pcapng","alias":"nDPId-test","version":"1.7.0","ndpi_version":"4.11.0-4834-92507c0","packets-captured":1,"packets-processed":0,"pfring_active":false,"pfring_recv":0,"pfring_drop":0,"pfring_shunt":0,"total-skipped-flows":0,"total-l4-payload-len":0,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":0,"total-detection-updates":0,"total-updates":0,"current-active-flows":0,"total-active-flows":0,"total-idle-flows":0,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"global-alloc-count":0,"global-free-count":0,"global-alloc-bytes":0,"global-free-bytes":0,"total-events-serialized":2,"global_ts_usec":1703652259039627}
00782{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"cfgs\/default\/pcap\/google_meet.pcapng","alias":"nDPId-test","flow_id":1,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1703652259039627,"flow_src_last_pkt_time":1703652259039627,"flow_dst_last_pkt_time":1703652259039627,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1703652259039627,"l3_proto":"ip4","src_ip":"192.168.88.231","dst_ip":"173.194.73.101","src_port":43268,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00558{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"cfgs\/default\/pcap\/google_meet.pcapng","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_src_last_pkt_time":1703652259039627,"flow_dst_last_pkt_time":1703652259039627,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1703652259039627,"pkt":"SKmKCiNt8C90rUP1CABFAAA8yC9AAEAGYdXAqFjnrcJJZakEAbv5xd30AAAAAKACfXgQ5gAAAgQFtAQCCAoH2CG3AAAAAAEDAwc="}
00560{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"cfgs\/default\/pcap\/google_meet.pcapng","alias":"nDPId-test","flow_id":1,"flow_packet_id":2,"flow_src_last_pkt_time":1703652259039627,"flow_dst_last_pkt_time":1703652259056157,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1703652259056157,"pkt":"8C90rUP1SKmKCiNtCABFAAA8AABAAHoG8AStwkllwKhY5wG7qQQhsMvn+cXd9aAS\/\/9kSwAAAgQFhAQCCAr2okLXB9ghtwEDAwg="}
00546{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"cfgs\/default\/pcap\/google_meet.pcapng","alias":"nDPId-test","flow_id":1,"flow_packet_id":3,"flow_src_last_pkt_time":1703652259056165,"flow_dst_last_pkt_time":1703652259056157,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1703652259056165,"pkt":"SKmKCiNt8C90rUP1CABFAAA0yDBAAEAGYdzAqFjnrcJJZakEAbv5xd31IbDL6IAQAPsQ3gAAAQEICgfYIcf2okLX"}
01269{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"cfgs\/default\/pcap\/google_meet.pcapng","alias":"nDPId-test","flow_id":1,"flow_packet_id":4,"flow_src_last_pkt_time":1703652259056259,"flow_dst_last_pkt_time":1703652259056157,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":601,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":601,"pkt_l4_len":567,"thread_ts_usec":1703652259056259,"pkt":"SKmKCiNt8C90rUP1CABFAAJLyDFAAEAGX8TAqFjnrcJJZakEAbv5xd31IbDL6IAYAPsS9QAAAQEICgfYIcf2okLXFgMBAhIBAAIOAwPU5W8uVyQohxt3ODr+uDrbvhkNCgbu10EcW2c+Z\/qtPCDFzhQoSF6KGfkTLLIVq45W2PoPWvsu+IRxbGz2LFPIvAAgSkoTARMCEwPAK8AvwCzAMMypzKjAE8AUAJwAnQAvADUBAAGlWloAAAAXAAAAKwAHBlpaAwQDAwASAAD+DQDaAAABAAGoACDXOJsYSQ8aTNOPlH9jMsLOeQwK1SvXkHTNAQgYBGbMLwCwTrSmygI1FPKOf72rMMYuNrfwMDq2q\/t56LegznolpgXFKd\/18mbOcm9SELCNSgkDDkNmzq18W7EI8dlFZYAayIqhFNp9q1BKZy5OdgkITAMYFoXXFhdGH1U2IY4T6uVi+FTEdjWhFT0dTZM4yBYjiCi8iF0Z4523hMTzncOnodiEKo2nPEWlAVQxL3yIGgjIcCZeutYvwAp2Ux1+gCpgRzrCOC3q3fq3RPhkuEMHQUFEaQAFAAMCaDIAGwADAgACAAUABQEAAAAA\/wEAAQAAMwArAClqagABAAAdACA49BByHp5T1RxvlCQHWdjuA87Bso4uU4IJqAiB3GtJdQAKAAoACGpqAB0AFwAYABAADgAMAmgyCGh0dHAvMS4xAC0AAgEBAAAAFAASAAAPbWVldC5nb29nbGUuY29tAAsAAgEAACMAAAANABIAEAQDCAQEAQUDCAUFAQgGBgF6egABAA=="}
01248{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"cfgs\/default\/pcap\/google_meet.pcapng","alias":"nDPId-test","flow_id":1,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1703652259039627,"flow_src_last_pkt_time":1703652259056259,"flow_dst_last_pkt_time":1703652259056157,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":535,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":535,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1703652259056259,"l3_proto":"ip4","src_ip":"192.168.88.231","dst_ip":"173.194.73.101","src_port":43268,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.GoogleMeet","proto_id":"91.201","proto_by_ip":"Google","proto_by_ip_id":126,"encrypted":1,"breed":"Acceptable","category_id":9,"category":"Chat","hostname":"meet.google.com","tls": {"version":"TLSv1.2","ja3":"f97d8fcbd3d1517f7bf0d2c536a503a1","ja3s":"","ja4":"t13d1516h2_8daaf6152771_02713d6af862","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2","blocks":0}}}
00546{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"cfgs\/default\/pcap\/google_meet.pcapng","alias":"nDPId-test","flow_id":1,"flow_packet_id":5,"flow_src_last_pkt_time":1703652259056259,"flow_dst_last_pkt_time":1703652259073151,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1703652259073151,"pkt":"8C90rUP1SKmKCiNtCABFAAA0mMYAAHoGl0atwkllwKhY5wG7qQQhsMvo+cXgDIAQAQWPqwAAAQEICvaiQugH2CHH"}
01293{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":6,"source":"cfgs\/default\/pcap\/google_meet.pcapng","alias":"nDPId-test","flow_id":1,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":3,"flow_first_seen":1703652259039627,"flow_src_last_pkt_time":1703652259056259,"flow_dst_last_pkt_time":1703652259073582,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":535,"flow_dst_max_l4_payload_len":1400,"flow_src_tot_l4_payload_len":535,"flow_dst_tot_l4_payload_len":1400,"midstream":0,"thread_ts_usec":1703652259073582,"l3_proto":"ip4","src_ip":"192.168.88.231","dst_ip":"173.194.73.101","src_port":43268,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.GoogleMeet","proto_id":"91.201","proto_by_ip":"Google","proto_by_ip_id":126,"encrypted":1,"breed":"Acceptable","category_id":9,"category":"Chat","hostname":"meet.google.com","tls": {"version":"TLSv1.3","ja3":"f97d8fcbd3d1517f7bf0d2c536a503a1","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","ja4":"t13d1516h2_8daaf6152771_02713d6af862","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2","blocks":0}}}
00790{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7,"source":"cfgs\/default\/pcap\/google_meet.pcapng","alias":"nDPId-test","flow_id":2,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1703652259263021,"flow_src_last_pkt_time":1703652259263021,"flow_dst_last_pkt_time":1703652259263021,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1250,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1250,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1250,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1703652259263021,"l3_proto":"ip4","src_ip":"192.168.88.231","dst_ip":"173.194.73.101","src_port":59369,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5}
02211{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"cfgs\/default\/pcap\/google_meet.pcapng","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_src_last_pkt_time":1703652259263021,"flow_dst_last_pkt_time":1703652259263021,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":1292,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1292,"pkt_l4_len":1258,"thread_ts_usec":1703652259263021,"pkt":"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"}
01234{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":7,"source":"cfgs\/default\/pcap\/google_meet.pcapng","alias":"nDPId-test","flow_id":2,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1703652259263021,"flow_src_last_pkt_time":1703652259263021,"flow_dst_last_pkt_time":1703652259263021,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1250,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1250,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1250,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1703652259263021,"l3_proto":"ip4","src_ip":"192.168.88.231","dst_ip":"173.194.73.101","src_port":59369,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"QUIC.GoogleMeet","proto_id":"188.201","proto_by_ip":"Google","proto_by_ip_id":126,"encrypted":1,"breed":"Acceptable","category_id":9,"category":"Chat","hostname":"meet.google.com","quic": {"quic_version":"V-1","tls": {"version":"TLSv1.3","ja3":"86ba0adabbe377daf6b620f07b59b45c","ja3s":"","ja4":"q13d0311h","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","advertised_alpns":"h3","tls_supported_versions":"TLSv1.3","blocks":13}}}}
02213{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"cfgs\/default\/pcap\/google_meet.pcapng","alias":"nDPId-test","flow_id":2,"flow_packet_id":2,"flow_src_last_pkt_time":1703652259263021,"flow_dst_last_pkt_time":1703652259281607,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":1292,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1292,"pkt_l4_len":1258,"thread_ts_usec":1703652259281607,"pkt":"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"}
02219{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"cfgs\/default\/pcap\/google_meet.pcapng","alias":"nDPId-test","flow_id":2,"flow_packet_id":3,"flow_src_last_pkt_time":1703652259263021,"flow_dst_last_pkt_time":1703652259281740,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":1292,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1292,"pkt_l4_len":1258,"thread_ts_usec":1703652259281740,"pkt":"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"}
02215{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"cfgs\/default\/pcap\/google_meet.pcapng","alias":"nDPId-test","flow_id":2,"flow_packet_id":4,"flow_src_last_pkt_time":1703652259263021,"flow_dst_last_pkt_time":1703652259281787,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":1292,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1292,"pkt_l4_len":1258,"thread_ts_usec":1703652259281787,"pkt":"8C90rUP1SKmKCiNtCABFAAT+AABAADsRKjitwkllwKhY5wG75+kE6pAi7gAAAAEACOMYJ8YNB+47RNGRHiriOcpfT9sQ5w5hxpujWrgntO8w6dkwU2E8vBxlV3c6VjbvTnoq6IRSFUt3IqgP\/E5B+sfNppendDt0rmgrgSg78K0HlImVfjr1KCMfbDAVucYlZT4uf0ANiyyJ4CBJ61+B12SJ6rFQhGnzlmF2pvuV+YiNmxxoROJCdRGWqMyeIgOttPE0u3Vjp2w+8osM\/8beAz4WWHjZxaeO\/HG30FARDpHk7eIDMDh18vvA04PEpBMPOLULuOmt0rzShUORhaoC8q4aSRjMXKcHfcHvTC8zwhKsyjhWiZ\/RYKVtkgtLfBM8dnmd14pPIclLvjGTNq3b9wEaGQtBegnwh\/S6xxZLK2PCGRreKOHvcxMDAA7XRdD24JtgmzF78psPvmJIES9oVJZ2HYssiVXAd2JBKG4QD4V0mhjLFhhyUlln56snpKlx0n\/FXEP58T1+JAWW38JS2FyDBoZKKcsABIvb0zrdGKY5+9v1dJZd37K2IEe5PtQlmsNF2YoUK1N63vQNLeg9h7BO0qwp\/xIRIx4wTkXil5\/iacqoPSQcsxIWc1RrYeph1EUYkl+TT9NCk20mkof8ZgXIf7H2rPdSEbb1wPTrLBA1X6OlVlvesQEJGUqw9bUIT4CoRZJ0\/hozcG0SacPc6VO40OO+J7ImuwasDdDzAJrklJKLa5xGqFIpLC2NhlvaWgsCVFERTIJoCxxGVgh7mIG+R16HhOkQBnv\/Xf5ECoJsN4Otjc9ZyShAE4tVlqXb4xKMcdkgC4wCrqkqkBGjX9dX3qsJHWeICwPdzhiaxVAfnBFgU7vdVmacP5Sadw6DQ4FM0T3xVKphH4ymiAHo1HVh2ElNbq2phi+waj5fK80rHV2sEhvj2OfWLcS7Jkf2TdVbAEAbluHQ7PQkMzPnl8ygAV6lc1ugpYAHEBIe70M2oA8wqtO5KYfRD+WrVq0DQBvmj29ueSUse3xazXrQ33caK6Mug+I4kfymZ0x8Whwg4iln9WMDhPtBfHMc2IOswWoR9M23Whatw2hNcKE1ZA3MZSeD3c6ZSEleafmGAZVQPRyw\/O0jVrwWtWC8jREMITeI3NqcEjcbryjXW8s8DCBKLw100GbB9KMd8+6DXW+99ogdviHAYztS3wgnLNP\/GFIclZBelcgUkDfmzkTOhsTJFsq2SArz7x8OKtX11v2Nf6IH5qa9QRWQvAcrgGTEovtcKMjxL3Ut8sHUdKjAoD6Q\/GclTFFvjahElpZ68fm\/4DRpNw2yPFP2AP\/AH5KPedSB3DoQUpsu4CX+swPpfn4YT5eJv1z3OHcscM\/pTTk3asbcKPf9iFTRIpoYTs2teWUyLYeODnT6DJ\/TfASyVLrzLCaBVn38kkf9uwVXMhyFcZHNSOjx1t+HDdpkp8b4l+G27FQj90q57R7tCuCYB5cj+PmWv\/PHxsaFlyso21PxzybUnMkOmPymZnus9zlTWtzKSni4D1+5Kk\/0amv79U22bx\/9\/PXVgWpQOsKeXin9e0HI16NQwcDBqS99j5\/JNqzaX0jixUqRqCwfgqt3ijqb\/Y96duvT3wQQLk1x\/ExRB+Mzez\/NW9r9HLRHMdtY5qK1QSBkKuvrVKM4j1eT84fdwg\/DCT707GUZuEf6zEJU0gOAzO\/8+g4OwQM="}
00567{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"cfgs\/default\/pcap\/google_meet.pcapng","alias":"nDPId-test","flow_id":2,"flow_packet_id":5,"flow_src_last_pkt_time":1703652259281814,"flow_dst_last_pkt_time":1703652259281787,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":81,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":81,"pkt_l4_len":47,"thread_ts_usec":1703652259281814,"pkt":"SKmKCiNt8C90rUP1CABFAABDWL5AAEAR0TTAqFjnrcJJZefpAbsALxD44wAAAAEI4xgnxg0H7jsAQBY\/UHCZ5amHNV483U22omo4yv0J4LBc"}
01025{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":12,"source":"cfgs\/default\/pcap\/google_meet.pcapng","alias":"nDPId-test","flow_id":2,"flow_state":"finished","flow_src_packets_processed":2,"flow_dst_packets_processed":4,"flow_first_seen":1703652259263021,"flow_src_last_pkt_time":1703652259281814,"flow_dst_last_pkt_time":1703652259298957,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":39,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1250,"flow_dst_max_l4_payload_len":1250,"flow_src_tot_l4_payload_len":1289,"flow_dst_tot_l4_payload_len":5000,"midstream":0,"thread_ts_usec":1703652259298957,"l3_proto":"ip4","src_ip":"192.168.88.231","dst_ip":"173.194.73.101","src_port":59369,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"QUIC.GoogleMeet","proto_id":"188.201","proto_by_ip":"Google","proto_by_ip_id":126,"encrypted":1,"breed":"Acceptable","category_id":9,"category":"Chat","hostname":"meet.google.com"}}
00988{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":12,"source":"cfgs\/default\/pcap\/google_meet.pcapng","alias":"nDPId-test","flow_id":1,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":3,"flow_first_seen":1703652259039627,"flow_src_last_pkt_time":1703652259056259,"flow_dst_last_pkt_time":1703652259073582,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":535,"flow_dst_max_l4_payload_len":1400,"flow_src_tot_l4_payload_len":535,"flow_dst_tot_l4_payload_len":1400,"midstream":0,"thread_ts_usec":1703652259298957,"l3_proto":"ip4","src_ip":"192.168.88.231","dst_ip":"173.194.73.101","src_port":43268,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.GoogleMeet","proto_id":"91.201","proto_by_ip":"Google","proto_by_ip_id":126,"encrypted":1,"breed":"Acceptable","category_id":9,"category":"Chat"}}
00802{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":12,"source":"cfgs\/default\/pcap\/google_meet.pcapng","alias":"nDPId-test","version":"1.7.0","ndpi_version":"4.11.0-4834-92507c0","packets-captured":12,"packets-processed":12,"pfring_active":false,"pfring_recv":0,"pfring_drop":0,"pfring_shunt":0,"total-skipped-flows":0,"total-l4-payload-len":8224,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":2,"total-detection-updates":1,"total-updates":0,"current-active-flows":0,"total-active-flows":2,"total-idle-flows":2,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"global-alloc-count":0,"global-free-count":0,"global-alloc-bytes":0,"global-free-bytes":0,"total-events-serialized":20,"global_ts_usec":1703652259298957}
~~~~~~~~~~~~~~~~~~~~ SUMMARY ~~~~~~~~~~~~~~~~~~~~
~~ packets captured/processed: 12/12
~~ skipped flows.............: 0
~~ total layer4 data length..: 8224 bytes
~~ total detected protocols..: 2
~~ total active/idle flows...: 2/2
~~ total timeout flows.......: 0
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~ total memory allocated....: 6662806 bytes
~~ total memory freed........: 6662806 bytes
~~ total allocations/frees...: 114069/114069
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~ json message min len.......: 551 chars
~~ json message max len.......: 2224 chars
~~ json message avg len.......: 1386 chars
|