1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
|
00567{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","version":"1.5.0","ndpi_version":"4.9.0-4361-0db12b13","max-flows-per-thread":2048,"max-idle-flows-per-thread":64,"reader-thread-count":1,"flow-scan-interval":10000000,"generic-max-idle-time":600000000,"icmp-max-idle-time":120000000,"udp-max-idle-time":180000000,"tcp-max-idle-time":7560000000,"max-packets-per-flow-to-send":5,"max-packets-per-flow-to-process":32,"max-packets-per-flow-to-analyse":32,"global_ts_usec":0}
00630{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":1,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","version":"1.5.0","ndpi_version":"4.9.0-4361-0db12b13","packets-captured":1,"packets-processed":0,"total-skipped-flows":0,"total-l4-payload-len":0,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":0,"total-detection-updates":0,"total-updates":0,"current-active-flows":0,"total-active-flows":0,"total-idle-flows":0,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":2,"global_ts_usec":1694275752994885}
00777{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":1,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1694275752994885,"flow_src_last_pkt_time":1694275752994885,"flow_dst_last_pkt_time":1694275752994885,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275752994885,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51398,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00563{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_src_last_pkt_time":1694275752994885,"flow_dst_last_pkt_time":1694275752994885,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"thread_ts_usec":1694275752994885,"pkt":"EBMx8Tl2nFg8p+7MCABFAABAAABAAEAGAADAqAEdTW\/3RcjGAbuXrZxyAAAAALAC\/\/8GrQAAAgQFtAEDAwYBAQgKE5KNpgAAAAAEAgAA"}
00777{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":2,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1694275753007782,"flow_src_last_pkt_time":1694275753007782,"flow_dst_last_pkt_time":1694275753007782,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275753007782,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51399,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00563{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_src_last_pkt_time":1694275753007782,"flow_dst_last_pkt_time":1694275753007782,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"thread_ts_usec":1694275753007782,"pkt":"EBMx8Tl2nFg8p+7MCABFAABAAABAAEAGAADAqAEdTW\/3RcjHAbt4TqO0AAAAALAC\/\/8GrQAAAgQFtAEDAwYBAQgKJksthwAAAAAEAgAA"}
00777{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":3,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1694275753008024,"flow_src_last_pkt_time":1694275753008024,"flow_dst_last_pkt_time":1694275753008024,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275753008024,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51400,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00563{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_src_last_pkt_time":1694275753008024,"flow_dst_last_pkt_time":1694275753008024,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"thread_ts_usec":1694275753008024,"pkt":"EBMx8Tl2nFg8p+7MCABFAABAAABAAEAGAADAqAEdTW\/3RcjIAbua4gaiAAAAALAC\/\/8GrQAAAgQFtAEDAwYBAQgKsEmNXQAAAAAEAgAA"}
00777{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":4,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1694275753008266,"flow_src_last_pkt_time":1694275753008266,"flow_dst_last_pkt_time":1694275753008266,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275753008266,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51401,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00563{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_src_last_pkt_time":1694275753008266,"flow_dst_last_pkt_time":1694275753008266,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"thread_ts_usec":1694275753008266,"pkt":"EBMx8Tl2nFg8p+7MCABFAABAAABAAEAGAADAqAEdTW\/3RcjJAbujVq2aAAAAALAC\/\/8GrQAAAgQFtAEDAwYBAQgKp7WUUgAAAAAEAgAA"}
00777{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":5,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1694275753008511,"flow_src_last_pkt_time":1694275753008511,"flow_dst_last_pkt_time":1694275753008511,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275753008511,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51402,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00564{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_src_last_pkt_time":1694275753008511,"flow_dst_last_pkt_time":1694275753008511,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"thread_ts_usec":1694275753008511,"pkt":"EBMx8Tl2nFg8p+7MCABFAABAAABAAEAGAADAqAEdTW\/3RcjKAbs\/5uDaAAAAALAC\/\/8GrQAAAgQFtAEDAwYBAQgKN2wSgQAAAAAEAgAA"}
00777{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":6,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1694275753008755,"flow_src_last_pkt_time":1694275753008755,"flow_dst_last_pkt_time":1694275753008755,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275753008755,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51403,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00563{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_src_last_pkt_time":1694275753008755,"flow_dst_last_pkt_time":1694275753008755,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"thread_ts_usec":1694275753008755,"pkt":"EBMx8Tl2nFg8p+7MCABFAABAAABAAEAGAADAqAEdTW\/3RcjLAbssMuJfAAAAALAC\/\/8GrQAAAgQFtAEDAwYBAQgKftuNFAAAAAAEAgAA"}
00777{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":7,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1694275753008879,"flow_src_last_pkt_time":1694275753008879,"flow_dst_last_pkt_time":1694275753008879,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275753008879,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51404,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00563{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_src_last_pkt_time":1694275753008879,"flow_dst_last_pkt_time":1694275753008879,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"thread_ts_usec":1694275753008879,"pkt":"EBMx8Tl2nFg8p+7MCABFAABAAABAAEAGAADAqAEdTW\/3RcjMAbs5XwxfAAAAALAC\/\/8GrQAAAgQFtAEDAwYBAQgK53msZgAAAAAEAgAA"}
00777{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":8,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1694275753009120,"flow_src_last_pkt_time":1694275753009120,"flow_dst_last_pkt_time":1694275753009120,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275753009120,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51405,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00563{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_src_last_pkt_time":1694275753009120,"flow_dst_last_pkt_time":1694275753009120,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"thread_ts_usec":1694275753009120,"pkt":"EBMx8Tl2nFg8p+7MCABFAABAAABAAEAGAADAqAEdTW\/3RcjNAbvi63bCAAAAALAC\/\/8GrQAAAgQFtAEDAwYBAQgKc0eleQAAAAAEAgAA"}
00777{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":9,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1694275753009419,"flow_src_last_pkt_time":1694275753009419,"flow_dst_last_pkt_time":1694275753009419,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275753009419,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51406,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00563{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_src_last_pkt_time":1694275753009419,"flow_dst_last_pkt_time":1694275753009419,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"thread_ts_usec":1694275753009419,"pkt":"EBMx8Tl2nFg8p+7MCABFAABAAABAAEAGAADAqAEdTW\/3RcjOAbsSQKX7AAAAALAC\/\/8GrQAAAgQFtAEDAwYBAQgKb6xZ3gAAAAAEAgAA"}
00779{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":10,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":10,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1694275753009538,"flow_src_last_pkt_time":1694275753009538,"flow_dst_last_pkt_time":1694275753009538,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275753009538,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51407,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00565{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_src_last_pkt_time":1694275753009538,"flow_dst_last_pkt_time":1694275753009538,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"thread_ts_usec":1694275753009538,"pkt":"EBMx8Tl2nFg8p+7MCABFAABAAABAAEAGAADAqAEdTW\/3RcjPAbtNFNYqAAAAALAC\/\/8GrQAAAgQFtAEDAwYBAQgKSkMm1gAAAAAEAgAA"}
00779{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":11,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":11,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1694275753009698,"flow_src_last_pkt_time":1694275753009698,"flow_dst_last_pkt_time":1694275753009698,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275753009698,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51408,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00565{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_src_last_pkt_time":1694275753009698,"flow_dst_last_pkt_time":1694275753009698,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"thread_ts_usec":1694275753009698,"pkt":"EBMx8Tl2nFg8p+7MCABFAABAAABAAEAGAADAqAEdTW\/3RcjQAbv7UAhZAAAAALAC\/\/8GrQAAAgQFtAEDAwYBAQgKGyigvgAAAAAEAgAA"}
00779{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":12,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":12,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1694275753009947,"flow_src_last_pkt_time":1694275753009947,"flow_dst_last_pkt_time":1694275753009947,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275753009947,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51409,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00565{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_src_last_pkt_time":1694275753009947,"flow_dst_last_pkt_time":1694275753009947,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"thread_ts_usec":1694275753009947,"pkt":"EBMx8Tl2nFg8p+7MCABFAABAAABAAEAGAADAqAEdTW\/3RcjRAbuZlc4bAAAAALAC\/\/8GrQAAAgQFtAEDAwYBAQgKyzhotAAAAAAEAgAA"}
00779{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":13,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":13,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1694275753010186,"flow_src_last_pkt_time":1694275753010186,"flow_dst_last_pkt_time":1694275753010186,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275753010186,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51410,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00565{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_src_last_pkt_time":1694275753010186,"flow_dst_last_pkt_time":1694275753010186,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"thread_ts_usec":1694275753010186,"pkt":"EBMx8Tl2nFg8p+7MCABFAABAAABAAEAGAADAqAEdTW\/3RcjSAbsaUzyLAAAAALAC\/\/8GrQAAAgQFtAEDAwYBAQgKUIIIAAAAAAAEAgAA"}
00779{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":14,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":14,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1694275753010306,"flow_src_last_pkt_time":1694275753010306,"flow_dst_last_pkt_time":1694275753010306,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275753010306,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51411,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00565{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_src_last_pkt_time":1694275753010306,"flow_dst_last_pkt_time":1694275753010306,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"thread_ts_usec":1694275753010306,"pkt":"EBMx8Tl2nFg8p+7MCABFAABAAABAAEAGAADAqAEdTW\/3RcjTAbu4aAnUAAAAALAC\/\/8GrQAAAgQFtAEDAwYBAQgKGBnucgAAAAAEAgAA"}
00779{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":15,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":15,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1694275753010307,"flow_src_last_pkt_time":1694275753010307,"flow_dst_last_pkt_time":1694275753010307,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275753010307,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51412,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00566{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_src_last_pkt_time":1694275753010307,"flow_dst_last_pkt_time":1694275753010307,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"thread_ts_usec":1694275753010307,"pkt":"EBMx8Tl2nFg8p+7MCABFAABAAABAAEAGAADAqAEdTW\/3RcjUAbtPXEsAAAAAALAC\/\/8GrQAAAgQFtAEDAwYBAQgKU+\/29AAAAAAEAgAA"}
00779{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":16,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":16,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1694275753010458,"flow_src_last_pkt_time":1694275753010458,"flow_dst_last_pkt_time":1694275753010458,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275753010458,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51413,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00565{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_src_last_pkt_time":1694275753010458,"flow_dst_last_pkt_time":1694275753010458,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"thread_ts_usec":1694275753010458,"pkt":"EBMx8Tl2nFg8p+7MCABFAABAAABAAEAGAADAqAEdTW\/3RcjVAbtX1BDNAAAAALAC\/\/8GrQAAAgQFtAEDAwYBAQgKd0UzngAAAAAEAgAA"}
00779{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":17,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":17,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1694275753010578,"flow_src_last_pkt_time":1694275753010578,"flow_dst_last_pkt_time":1694275753010578,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275753010578,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51414,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00565{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_src_last_pkt_time":1694275753010578,"flow_dst_last_pkt_time":1694275753010578,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"thread_ts_usec":1694275753010578,"pkt":"EBMx8Tl2nFg8p+7MCABFAABAAABAAEAGAADAqAEdTW\/3RcjWAbs4tAdsAAAAALAC\/\/8GrQAAAgQFtAEDAwYBAQgKKhNAmgAAAAAEAgAA"}
00779{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":18,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":18,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1694275753010697,"flow_src_last_pkt_time":1694275753010697,"flow_dst_last_pkt_time":1694275753010697,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275753010697,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51415,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00565{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_src_last_pkt_time":1694275753010697,"flow_dst_last_pkt_time":1694275753010697,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"thread_ts_usec":1694275753010697,"pkt":"EBMx8Tl2nFg8p+7MCABFAABAAABAAEAGAADAqAEdTW\/3RcjXAbtIZ0iBAAAAALAC\/\/8GrQAAAgQFtAEDAwYBAQgKIzJi6QAAAAAEAgAA"}
00779{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":19,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":19,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1694275753010817,"flow_src_last_pkt_time":1694275753010817,"flow_dst_last_pkt_time":1694275753010817,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275753010817,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51416,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00565{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_src_last_pkt_time":1694275753010817,"flow_dst_last_pkt_time":1694275753010817,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"thread_ts_usec":1694275753010817,"pkt":"EBMx8Tl2nFg8p+7MCABFAABAAABAAEAGAADAqAEdTW\/3RcjYAbu5Z+2KAAAAALAC\/\/8GrQAAAgQFtAEDAwYBAQgKpAoZ6gAAAAAEAgAA"}
00779{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":20,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":20,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1694275753010935,"flow_src_last_pkt_time":1694275753010935,"flow_dst_last_pkt_time":1694275753010935,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275753010935,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51417,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00565{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_src_last_pkt_time":1694275753010935,"flow_dst_last_pkt_time":1694275753010935,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"thread_ts_usec":1694275753010935,"pkt":"EBMx8Tl2nFg8p+7MCABFAABAAABAAEAGAADAqAEdTW\/3RcjZAbtZMflMAAAAALAC\/\/8GrQAAAgQFtAEDAwYBAQgKQaLZHQAAAAAEAgAA"}
00779{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":21,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":21,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1694275753011053,"flow_src_last_pkt_time":1694275753011053,"flow_dst_last_pkt_time":1694275753011053,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275753011053,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51418,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00565{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":21,"flow_packet_id":1,"flow_src_last_pkt_time":1694275753011053,"flow_dst_last_pkt_time":1694275753011053,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"thread_ts_usec":1694275753011053,"pkt":"EBMx8Tl2nFg8p+7MCABFAABAAABAAEAGAADAqAEdTW\/3RcjaAbtYJFV7AAAAALAC\/\/8GrQAAAgQFtAEDAwYBAQgKJNcyngAAAAAEAgAA"}
00779{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":22,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":22,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1694275753011053,"flow_src_last_pkt_time":1694275753011053,"flow_dst_last_pkt_time":1694275753011053,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275753011053,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51419,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00565{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":22,"flow_packet_id":1,"flow_src_last_pkt_time":1694275753011053,"flow_dst_last_pkt_time":1694275753011053,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"thread_ts_usec":1694275753011053,"pkt":"EBMx8Tl2nFg8p+7MCABFAABAAABAAEAGAADAqAEdTW\/3RcjbAbuOySM9AAAAALAC\/\/8GrQAAAgQFtAEDAwYBAQgKI4KHlQAAAAAEAgAA"}
00779{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":23,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":23,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1694275753011171,"flow_src_last_pkt_time":1694275753011171,"flow_dst_last_pkt_time":1694275753011171,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275753011171,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51420,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00565{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_src_last_pkt_time":1694275753011171,"flow_dst_last_pkt_time":1694275753011171,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"thread_ts_usec":1694275753011171,"pkt":"EBMx8Tl2nFg8p+7MCABFAABAAABAAEAGAADAqAEdTW\/3RcjcAbtdIhCtAAAAALAC\/\/8GrQAAAgQFtAEDAwYBAQgK9mbQ4AAAAAAEAgAA"}
00779{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":24,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":24,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1694275753011291,"flow_src_last_pkt_time":1694275753011291,"flow_dst_last_pkt_time":1694275753011291,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275753011291,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51421,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00566{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_src_last_pkt_time":1694275753011291,"flow_dst_last_pkt_time":1694275753011291,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"thread_ts_usec":1694275753011291,"pkt":"EBMx8Tl2nFg8p+7MCABFAABAAABAAEAGAADAqAEdTW\/3RcjdAbunjO\/XAAAAALAC\/\/8GrQAAAgQFtAEDAwYBAQgKaCqKPAAAAAAEAgAA"}
00779{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":25,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":25,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1694275753011292,"flow_src_last_pkt_time":1694275753011292,"flow_dst_last_pkt_time":1694275753011292,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275753011292,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51422,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00565{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":25,"flow_packet_id":1,"flow_src_last_pkt_time":1694275753011292,"flow_dst_last_pkt_time":1694275753011292,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"thread_ts_usec":1694275753011292,"pkt":"EBMx8Tl2nFg8p+7MCABFAABAAABAAEAGAADAqAEdTW\/3RcjeAbsmlThLAAAAALAC\/\/8GrQAAAgQFtAEDAwYBAQgKvXC9agAAAAAEAgAA"}
00779{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":26,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":26,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1694275753011411,"flow_src_last_pkt_time":1694275753011411,"flow_dst_last_pkt_time":1694275753011411,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275753011411,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51423,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00565{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":26,"flow_packet_id":1,"flow_src_last_pkt_time":1694275753011411,"flow_dst_last_pkt_time":1694275753011411,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"thread_ts_usec":1694275753011411,"pkt":"EBMx8Tl2nFg8p+7MCABFAABAAABAAEAGAADAqAEdTW\/3RcjfAbtXqe8HAAAAALAC\/\/8GrQAAAgQFtAEDAwYBAQgK6CBmeAAAAAAEAgAA"}
00559{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":1,"flow_packet_id":2,"flow_src_last_pkt_time":1694275752994885,"flow_dst_last_pkt_time":1694275753023076,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1694275753023076,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA8AABAADQGQEJNb\/dFwKgBHQG7yMYj3Z30l62cc6AS\/oghkgAAAgQFrAQCCAqZASa0E5KNpgEDAwc="}
00546{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":1,"flow_packet_id":3,"flow_src_last_pkt_time":1694275753023141,"flow_dst_last_pkt_time":1694275753023076,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275753023141,"pkt":"EBMx8Tl2nFg8p+7MCABFAAA0AABAAEAGAADAqAEdTW\/3RcjGAbuXrZxzI92d9YAQCBYGoQAAAQEIChOSjcOZASa0"}
01243{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":1,"flow_packet_id":4,"flow_src_last_pkt_time":1694275753023424,"flow_dst_last_pkt_time":1694275753023076,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"thread_ts_usec":1694275753023424,"pkt":"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"}
01187{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":29,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":1,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1694275752994885,"flow_src_last_pkt_time":1694275753023424,"flow_dst_last_pkt_time":1694275753023076,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275753023424,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51398,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.2","ja3":"b96f72c556a76c5b13acec3b59f520dd","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00559{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":2,"flow_packet_id":2,"flow_src_last_pkt_time":1694275753007782,"flow_dst_last_pkt_time":1694275753035867,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1694275753035867,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA8AABAADYGPkJNb\/dFwKgBHQG7yMcH4P5HeE6jtaAS\/ohCrwAAAgQFrAQCCAqZASbDJksthwEDAwc="}
00546{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":2,"flow_packet_id":3,"flow_src_last_pkt_time":1694275753035983,"flow_dst_last_pkt_time":1694275753035867,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275753035983,"pkt":"EBMx8Tl2nFg8p+7MCABFAAA0AABAAEAGAADAqAEdTW\/3RcjHAbt4TqO1B+D+SIAQCBYGoQAAAQEICiZLLaOZASbD"}
01244{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":2,"flow_packet_id":4,"flow_src_last_pkt_time":1694275753036367,"flow_dst_last_pkt_time":1694275753035867,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"thread_ts_usec":1694275753036367,"pkt":"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"}
01187{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":32,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":2,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1694275753007782,"flow_src_last_pkt_time":1694275753036367,"flow_dst_last_pkt_time":1694275753035867,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275753036367,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51399,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.2","ja3":"485d321608abf60490d88c6b010221af","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00559{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":3,"flow_packet_id":2,"flow_src_last_pkt_time":1694275753008024,"flow_dst_last_pkt_time":1694275753037252,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1694275753037252,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA8AABAADYGPkJNb\/dFwKgBHQG7yMgmGyyumuIGo6AS\/oiGtAAAAgQFrAQCCAqZASbFsEmNXQEDAwc="}
00546{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":3,"flow_packet_id":3,"flow_src_last_pkt_time":1694275753037353,"flow_dst_last_pkt_time":1694275753037252,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275753037353,"pkt":"EBMx8Tl2nFg8p+7MCABFAAA0AABAAEAGAADAqAEdTW\/3RcjIAbua4gajJhssr4AQCBYGoQAAAQEICrBJjXuZASbF"}
01244{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":3,"flow_packet_id":4,"flow_src_last_pkt_time":1694275753037849,"flow_dst_last_pkt_time":1694275753037252,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"thread_ts_usec":1694275753037849,"pkt":"EBMx8Tl2nFg8p+7MCABFAAI5AABAAEAGAADAqAEdTW\/3RcjIAbua4gajJhssr4AYCBYIpgAAAQEICrBJjXuZASbFFgMBAgABAAH8AwNL+atkM8wKSpDJQgNkwvRuXFo5ydk4Igg3EuddtJLY7yByKo1r+sVL5cokBL0V0OYFfUW3PxzvfUOEyYkhdywPlAAg+voTARMCEwPAK8AvwCzAMMypzKjAE8AUAJwAnQAvADUBAAGTiooAAAANABIAEAQDCAQEAQUDCAUFAQgGBgEABQAFAQAAAAAAFwAAAAsAAgEAAC0AAgEBAAAAFwAVAAASZXUwLnNlYy10dW5uZWwuY29tADMAKwAp+voAAQAAHQAg756NKqB\/Cf7tOGZ3m5gi5e1ynLLv\/BExgsR5ICRQX3kAEgAAACsABwba2gMEAwNEaQAFAAMCaDL\/AQABAAAKAAoACPr6AB0AFwAYACMAAAAQAA4ADAJoMghodHRwLzEuMQAbAAMCAAJ6egABAAAVAMUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="}
01187{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":35,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":3,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1694275753008024,"flow_src_last_pkt_time":1694275753037849,"flow_dst_last_pkt_time":1694275753037252,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275753037849,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51400,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.2","ja3":"f40971697b0dd2827eea54ea65d19395","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00559{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":4,"flow_packet_id":2,"flow_src_last_pkt_time":1694275753008266,"flow_dst_last_pkt_time":1694275753038325,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1694275753038325,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA8AABAADYGPkJNb\/dFwKgBHQG7yMlbRPVio1atm6AS\/ojbBgAAAgQFrAQCCAqZASbGp7WUUgEDAwc="}
00546{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":4,"flow_packet_id":3,"flow_src_last_pkt_time":1694275753038405,"flow_dst_last_pkt_time":1694275753038325,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275753038405,"pkt":"EBMx8Tl2nFg8p+7MCABFAAA0AABAAEAGAADAqAEdTW\/3RcjJAbujVq2bW0T1Y4AQCBYGoQAAAQEICqe1lHGZASbG"}
01242{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":4,"flow_packet_id":4,"flow_src_last_pkt_time":1694275753038526,"flow_dst_last_pkt_time":1694275753038325,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"thread_ts_usec":1694275753038526,"pkt":"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"}
01187{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":38,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":4,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1694275753008266,"flow_src_last_pkt_time":1694275753038526,"flow_dst_last_pkt_time":1694275753038325,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275753038526,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51401,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.2","ja3":"310fa0bcc8223ddf7149498a30f17097","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00559{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":6,"flow_packet_id":2,"flow_src_last_pkt_time":1694275753008755,"flow_dst_last_pkt_time":1694275753039487,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1694275753039487,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA8AABAADQGQEJNb\/dFwKgBHQG7yMuguxaSLDLiYKAS\/ojm1AAAAgQFrAQCCAqZASbHftuNFAEDAwc="}
00546{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":6,"flow_packet_id":3,"flow_src_last_pkt_time":1694275753039543,"flow_dst_last_pkt_time":1694275753039487,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275753039543,"pkt":"EBMx8Tl2nFg8p+7MCABFAAA0AABAAEAGAADAqAEdTW\/3RcjLAbssMuJgoLsWk4AQCBYGoQAAAQEICn7bjTOZASbH"}
01244{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":6,"flow_packet_id":4,"flow_src_last_pkt_time":1694275753039664,"flow_dst_last_pkt_time":1694275753039487,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"thread_ts_usec":1694275753039664,"pkt":"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"}
01187{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":41,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":6,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1694275753008755,"flow_src_last_pkt_time":1694275753039664,"flow_dst_last_pkt_time":1694275753039487,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275753039664,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51403,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.2","ja3":"58c47ed77ccd0602805bfe75ed4283ba","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00559{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":7,"flow_packet_id":2,"flow_src_last_pkt_time":1694275753008879,"flow_dst_last_pkt_time":1694275753040749,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1694275753040749,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA8AABAADQGQEJNb\/dFwKgBHQG7yMyG7XXhOV8MYKAS\/ojiNAAAAgQFrAQCCAqZASbI53msZgEDAwc="}
00546{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":7,"flow_packet_id":3,"flow_src_last_pkt_time":1694275753040797,"flow_dst_last_pkt_time":1694275753040749,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275753040797,"pkt":"EBMx8Tl2nFg8p+7MCABFAAA0AABAAEAGAADAqAEdTW\/3RcjMAbs5Xwxghu114oAQCBYGoQAAAQEICud5rIaZASbI"}
01244{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":7,"flow_packet_id":4,"flow_src_last_pkt_time":1694275753040918,"flow_dst_last_pkt_time":1694275753040749,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"thread_ts_usec":1694275753040918,"pkt":"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"}
01187{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":44,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":7,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1694275753008879,"flow_src_last_pkt_time":1694275753040918,"flow_dst_last_pkt_time":1694275753040749,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275753040918,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51404,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.2","ja3":"afd51562845a41020a43e5d659f59308","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00559{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":8,"flow_packet_id":2,"flow_src_last_pkt_time":1694275753009120,"flow_dst_last_pkt_time":1694275753042084,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1694275753042084,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA8AABAADQGQEJNb\/dFwKgBHQG7yM20aXnn4ut2w6AS\/ogX4AAAAgQFrAQCCAqZASbJc0eleQEDAwc="}
00546{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":8,"flow_packet_id":3,"flow_src_last_pkt_time":1694275753042116,"flow_dst_last_pkt_time":1694275753042084,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275753042116,"pkt":"EBMx8Tl2nFg8p+7MCABFAAA0AABAAEAGAADAqAEdTW\/3RcjNAbvi63bDtGl56IAQCBYGoQAAAQEICnNHpZqZASbJ"}
00560{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":9,"flow_packet_id":2,"flow_src_last_pkt_time":1694275753009419,"flow_dst_last_pkt_time":1694275753042241,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1694275753042241,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA8AABAADQGQEJNb\/dFwKgBHQG7yM5b1aswEkCl\/KAS\/ogv0gAAAgQFrAQCCAqZASbKb6xZ3gEDAwc="}
00546{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":9,"flow_packet_id":3,"flow_src_last_pkt_time":1694275753042269,"flow_dst_last_pkt_time":1694275753042241,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275753042269,"pkt":"EBMx8Tl2nFg8p+7MCABFAAA0AABAAEAGAADAqAEdTW\/3RcjOAbsSQKX8W9WrMYAQCBYGoQAAAQEICm+sWf+ZASbK"}
01243{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":8,"flow_packet_id":4,"flow_src_last_pkt_time":1694275753042389,"flow_dst_last_pkt_time":1694275753042084,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"thread_ts_usec":1694275753042389,"pkt":"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"}
01187{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":49,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":8,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1694275753009120,"flow_src_last_pkt_time":1694275753042389,"flow_dst_last_pkt_time":1694275753042084,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275753042389,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51405,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.2","ja3":"44f9748950032beeac19dc7e2f233d77","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
01241{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":9,"flow_packet_id":4,"flow_src_last_pkt_time":1694275753042389,"flow_dst_last_pkt_time":1694275753042241,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"thread_ts_usec":1694275753042389,"pkt":"EBMx8Tl2nFg8p+7MCABFAAI5AABAAEAGAADAqAEdTW\/3RcjOAbsSQKX8W9WrMYAYCBYIpgAAAQEICm+sWf+ZASbKFgMBAgABAAH8AwOf6G+piJ4EhpBoR6DjY1pXjhWeeBntMMEgc5THmSYHuiCcbUl9kHjWraAmyxNgZHE3pI7NjnPw5asZviecBH3KTAAg6uoTARMCEwPAK8AvwCzAMMypzKjAE8AUAJwAnQAvADUBAAGT2toAAAAtAAIBAURpAAUAAwJoMv8BAAEAAAoACgAI6uoAHQAXABgACwACAQAAAAAXABUAABJldTAuc2VjLXR1bm5lbC5jb20AMwArACnq6gABAAAdACBb78AgaBMHOaxwOTME+QtKdoakjvtm8m8nD990kSRUJAAbAAMCAAIADQASABAEAwgEBAEFAwgFBQEIBgYBABcAAAAjAAAAEgAAABAADgAMAmgyCGh0dHAvMS4xACsABwYqKgMEAwMABQAFAQAAAADq6gABAAAVAMUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="}
01187{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":50,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":9,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1694275753009419,"flow_src_last_pkt_time":1694275753042389,"flow_dst_last_pkt_time":1694275753042241,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275753042389,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51406,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.2","ja3":"31c32357f806723eb0eaab101578edf5","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00559{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":5,"flow_packet_id":2,"flow_src_last_pkt_time":1694275753008511,"flow_dst_last_pkt_time":1694275753043578,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1694275753043578,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA8AABAADQGQEJNb\/dFwKgBHQG7yMoGnMmSP+bg26AS\/oh9yQAAAgQFrAQCCAqZASbGN2wSgQEDAwc="}
00547{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":5,"flow_packet_id":3,"flow_src_last_pkt_time":1694275753043612,"flow_dst_last_pkt_time":1694275753043578,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275753043612,"pkt":"EBMx8Tl2nFg8p+7MCABFAAA0AABAAEAGAADAqAEdTW\/3RcjKAbs\/5uDbBpzJk4AQCBYGoQAAAQEICjdsEqWZASbG"}
00560{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":11,"flow_packet_id":2,"flow_src_last_pkt_time":1694275753009698,"flow_dst_last_pkt_time":1694275753043705,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1694275753043705,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA8AABAADQGQEJNb\/dFwKgBHQG7yNDMQDF5+1AIWqAS\/oj7TwAAAgQFrAQCCAqZASbMGyigvgEDAwc="}
00547{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":54,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":11,"flow_packet_id":3,"flow_src_last_pkt_time":1694275753043732,"flow_dst_last_pkt_time":1694275753043705,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275753043732,"pkt":"EBMx8Tl2nFg8p+7MCABFAAA0AABAAEAGAADAqAEdTW\/3RcjQAbv7UAhazEAxeoAQCBYGoQAAAQEIChsooOGZASbM"}
01242{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":55,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":5,"flow_packet_id":4,"flow_src_last_pkt_time":1694275753043733,"flow_dst_last_pkt_time":1694275753043578,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"thread_ts_usec":1694275753043733,"pkt":"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"}
01187{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":55,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":5,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1694275753008511,"flow_src_last_pkt_time":1694275753043733,"flow_dst_last_pkt_time":1694275753043578,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275753043733,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51402,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.2","ja3":"e415684488869452bd654e636a258ffc","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
01244{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":11,"flow_packet_id":4,"flow_src_last_pkt_time":1694275753043852,"flow_dst_last_pkt_time":1694275753043705,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"thread_ts_usec":1694275753043852,"pkt":"EBMx8Tl2nFg8p+7MCABFAAI5AABAAEAGAADAqAEdTW\/3RcjQAbv7UAhazEAxeoAYCBYIpgAAAQEIChsooOGZASbMFgMBAgABAAH8AwOQv40HvKuMY4T6dlmnD82RO8BDnsMdRsS4j5jvovKSfSCEZs8aZ4vmBrKxVDXepvEE9hFF21Fj9eO6NwGk5RgdYQAg+voTARMCEwPAK8AvwCzAMMypzKjAE8AUAJwAnQAvADUBAAGTSkoAAAAbAAMCAAL\/AQABAAALAAIBAAAXAAAAEgAAACsABwYqKgMEAwMABQAFAQAAAAAAEAAOAAwCaDIIaHR0cC8xLjEAIwAAAAoACgAI+voAHQAXABgALQACAQEAMwArACn6+gABAAAdACCuux4wuDlWUU1SvOvMtlp8m5VPG\/MGFM9oAB84+LhXKQANABIAEAQDCAQEAQUDCAUFAQgGBgFEaQAFAAMCaDIAAAAXABUAABJldTAuc2VjLXR1bm5lbC5jb22KigABAAAVAMUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="}
01188{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":56,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":11,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1694275753009698,"flow_src_last_pkt_time":1694275753043852,"flow_dst_last_pkt_time":1694275753043705,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275753043852,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51408,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.2","ja3":"0915bf8869a023d47778f806f5d3b256","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00560{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":57,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":14,"flow_packet_id":2,"flow_src_last_pkt_time":1694275753010306,"flow_dst_last_pkt_time":1694275753045777,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1694275753045777,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA8AABAADYGPkJNb\/dFwKgBHQG7yNPKGUHquGgJ1aAS\/ojjyQAAAgQFrAQCCAqZASbNGBnucgEDAwc="}
00547{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":58,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":14,"flow_packet_id":3,"flow_src_last_pkt_time":1694275753045813,"flow_dst_last_pkt_time":1694275753045777,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275753045813,"pkt":"EBMx8Tl2nFg8p+7MCABFAAA0AABAAEAGAADAqAEdTW\/3RcjTAbu4aAnVyhlB64AQCBYGoQAAAQEIChgZ7paZASbN"}
01242{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":59,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":14,"flow_packet_id":4,"flow_src_last_pkt_time":1694275753045932,"flow_dst_last_pkt_time":1694275753045777,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"thread_ts_usec":1694275753045932,"pkt":"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"}
01188{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":59,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":14,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1694275753010306,"flow_src_last_pkt_time":1694275753045932,"flow_dst_last_pkt_time":1694275753045777,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275753045932,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51411,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.2","ja3":"5ba1797d57b7ba42ce82582e43b0217f","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00779{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":60,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":27,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1694275753047174,"flow_src_last_pkt_time":1694275753047174,"flow_dst_last_pkt_time":1694275753047174,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275753047174,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51424,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00565{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":27,"flow_packet_id":1,"flow_src_last_pkt_time":1694275753047174,"flow_dst_last_pkt_time":1694275753047174,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"thread_ts_usec":1694275753047174,"pkt":"EBMx8Tl2nFg8p+7MCABFAABAAABAAEAGAADAqAEdTW\/3RcjgAbscW7MpAAAAALAC\/\/8GrQAAAgQFtAEDAwYBAQgKdtb7VQAAAAAEAgAA"}
00561{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":61,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":15,"flow_packet_id":2,"flow_src_last_pkt_time":1694275753010307,"flow_dst_last_pkt_time":1694275753047438,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1694275753047438,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA8AABAADYGPkJNb\/dFwKgBHQG7yNQr+nh1T1xLAaAS\/ogu5QAAAgQFrAQCCAqZASbNU+\/29AEDAwc="}
00548{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":15,"flow_packet_id":3,"flow_src_last_pkt_time":1694275753047496,"flow_dst_last_pkt_time":1694275753047438,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275753047496,"pkt":"EBMx8Tl2nFg8p+7MCABFAAA0AABAAEAGAADAqAEdTW\/3RcjUAbtPXEsBK\/p4doAQCBYGoQAAAQEIClPv9xmZASbN"}
00560{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":12,"flow_packet_id":2,"flow_src_last_pkt_time":1694275753009947,"flow_dst_last_pkt_time":1694275753047588,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1694275753047588,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA8AABAADYGPkJNb\/dFwKgBHQG7yNFQTSbJmZXOHKAS\/oil5AAAAgQFrAQCCAqZASbMyzhotAEDAwc="}
00547{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":12,"flow_packet_id":3,"flow_src_last_pkt_time":1694275753047616,"flow_dst_last_pkt_time":1694275753047588,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275753047616,"pkt":"EBMx8Tl2nFg8p+7MCABFAAA0AABAAEAGAADAqAEdTW\/3RcjRAbuZlc4cUE0myoAQCBYGoQAAAQEICss4aNmZASbM"}
01244{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":65,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":15,"flow_packet_id":4,"flow_src_last_pkt_time":1694275753047616,"flow_dst_last_pkt_time":1694275753047438,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"thread_ts_usec":1694275753047616,"pkt":"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"}
01188{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":65,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":15,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1694275753010307,"flow_src_last_pkt_time":1694275753047616,"flow_dst_last_pkt_time":1694275753047438,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275753047616,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51412,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.2","ja3":"5c72c0972b0ef2b8d71f00feaa086760","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
01244{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":12,"flow_packet_id":4,"flow_src_last_pkt_time":1694275753047738,"flow_dst_last_pkt_time":1694275753047588,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"thread_ts_usec":1694275753047738,"pkt":"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"}
01188{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":66,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":12,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1694275753009947,"flow_src_last_pkt_time":1694275753047738,"flow_dst_last_pkt_time":1694275753047588,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275753047738,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51409,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.2","ja3":"6bfdc9fce41022f28ac0de368e7164cc","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00560{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":17,"flow_packet_id":2,"flow_src_last_pkt_time":1694275753010578,"flow_dst_last_pkt_time":1694275753047740,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1694275753047740,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA8AABAADQGQEJNb\/dFwKgBHQG7yNbs0zQVOLQHbaAS\/ojs2gAAAgQFrAQCCAqZASbPKhNAmgEDAwc="}
00547{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":17,"flow_packet_id":3,"flow_src_last_pkt_time":1694275753047858,"flow_dst_last_pkt_time":1694275753047740,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275753047858,"pkt":"EBMx8Tl2nFg8p+7MCABFAAA0AABAAEAGAADAqAEdTW\/3RcjWAbs4tAdt7NM0FoAQCBYGoQAAAQEICioTQL+ZASbP"}
01246{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":69,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":17,"flow_packet_id":4,"flow_src_last_pkt_time":1694275753047858,"flow_dst_last_pkt_time":1694275753047740,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"thread_ts_usec":1694275753047858,"pkt":"EBMx8Tl2nFg8p+7MCABFAAI5AABAAEAGAADAqAEdTW\/3RcjWAbs4tAdt7NM0FoAYCBYIpgAAAQEICioTQL+ZASbPFgMBAgABAAH8AwO\/SkqFuTWKi3mCEUyoc\/hGYcyI\/Qf9TigwoYNTlyTC4iASbztcX0CmhjH3p2dGNgz3xzfHcl+zrympB8AgENMckwAg6uoTARMCEwPAK8AvwCzAMMypzKjAE8AUAJwAnQAvADUBAAGTmpoAAAAFAAUBAAAAAAAjAAAAKwAHBqqqAwQDAwAzACsAKSoqAAEAAB0AIG\/NOpJYBc6aA0lg5ELFLYFNUPj2SX8UNj+HBFZ29H1qABAADgAMAmgyCGh0dHAvMS4xAC0AAgEBABIAAP8BAAEAAAsAAgEAABcAAAAAABcAFQAAEmV1MC5zZWMtdHVubmVsLmNvbQAbAAMCAAJEaQAFAAMCaDIACgAKAAgqKgAdABcAGAANABIAEAQDCAQEAQUDCAUFAQgGBgGKigABAAAVAMUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="}
01188{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":69,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":17,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1694275753010578,"flow_src_last_pkt_time":1694275753047858,"flow_dst_last_pkt_time":1694275753047740,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275753047858,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51414,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.2","ja3":"353b63511e111884c0a2ae1b74da2093","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00560{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":70,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":16,"flow_packet_id":2,"flow_src_last_pkt_time":1694275753010458,"flow_dst_last_pkt_time":1694275753047901,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1694275753047901,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA8AABAADYGPkJNb\/dFwKgBHQG7yNU5JMQRV9QQzqAS\/oin1wAAAgQFrAQCCAqZASbPd0UzngEDAwc="}
00547{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":71,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":16,"flow_packet_id":3,"flow_src_last_pkt_time":1694275753047978,"flow_dst_last_pkt_time":1694275753047901,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275753047978,"pkt":"EBMx8Tl2nFg8p+7MCABFAAA0AABAAEAGAADAqAEdTW\/3RcjVAbtX1BDOOSTEEoAQCBYGoQAAAQEICndFM8OZASbP"}
01244{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":72,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":16,"flow_packet_id":4,"flow_src_last_pkt_time":1694275753047978,"flow_dst_last_pkt_time":1694275753047901,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"thread_ts_usec":1694275753047978,"pkt":"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"}
01188{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":72,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":16,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1694275753010458,"flow_src_last_pkt_time":1694275753047978,"flow_dst_last_pkt_time":1694275753047901,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275753047978,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51413,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.2","ja3":"65e9700415d3b43581aa12e23afbfd7e","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00560{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":73,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":18,"flow_packet_id":2,"flow_src_last_pkt_time":1694275753010697,"flow_dst_last_pkt_time":1694275753048063,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1694275753048063,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA8AABAADQGQEJNb\/dFwKgBHQG7yNfa6s+ESGdIgqAS\/oj3HAAAAgQFrAQCCAqZASbPIzJi6QEDAwc="}
00547{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":74,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":18,"flow_packet_id":3,"flow_src_last_pkt_time":1694275753048099,"flow_dst_last_pkt_time":1694275753048063,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275753048099,"pkt":"EBMx8Tl2nFg8p+7MCABFAAA0AABAAEAGAADAqAEdTW\/3RcjXAbtIZ0iC2urPhYAQCBYGoQAAAQEICiMyYw6ZASbP"}
01244{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":75,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":18,"flow_packet_id":4,"flow_src_last_pkt_time":1694275753048216,"flow_dst_last_pkt_time":1694275753048063,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"thread_ts_usec":1694275753048216,"pkt":"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"}
01188{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":75,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":18,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1694275753010697,"flow_src_last_pkt_time":1694275753048216,"flow_dst_last_pkt_time":1694275753048063,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275753048216,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51415,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.2","ja3":"409bb955d02abe4c9736d1184814780d","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00561{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":76,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":20,"flow_packet_id":2,"flow_src_last_pkt_time":1694275753010935,"flow_dst_last_pkt_time":1694275753049606,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1694275753049606,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA8AABAADYGPkJNb\/dFwKgBHQG7yNk\/HlZrWTH5TaAS\/oi1xQAAAgQFrAQCCAqZASbQQaLZHQEDAwc="}
00547{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":77,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":20,"flow_packet_id":3,"flow_src_last_pkt_time":1694275753049683,"flow_dst_last_pkt_time":1694275753049606,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275753049683,"pkt":"EBMx8Tl2nFg8p+7MCABFAAA0AABAAEAGAADAqAEdTW\/3RcjZAbtZMflNPx5WbIAQCBYGoQAAAQEICkGi2UWZASbQ"}
01247{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":78,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":20,"flow_packet_id":4,"flow_src_last_pkt_time":1694275753049809,"flow_dst_last_pkt_time":1694275753049606,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"thread_ts_usec":1694275753049809,"pkt":"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"}
01188{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":78,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":20,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1694275753010935,"flow_src_last_pkt_time":1694275753049809,"flow_dst_last_pkt_time":1694275753049606,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275753049809,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51417,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.2","ja3":"91ec3705bc708c10592467e78630e9bd","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00560{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":79,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":19,"flow_packet_id":2,"flow_src_last_pkt_time":1694275753010817,"flow_dst_last_pkt_time":1694275753050972,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1694275753050972,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA8AABAADYGPkJNb\/dFwKgBHQG7yNhkJIzQuWfti6AS\/ohisgAAAgQFrAQCCAqZASbQpAoZ6gEDAwc="}
00547{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":80,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":19,"flow_packet_id":3,"flow_src_last_pkt_time":1694275753051027,"flow_dst_last_pkt_time":1694275753050972,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275753051027,"pkt":"EBMx8Tl2nFg8p+7MCABFAAA0AABAAEAGAADAqAEdTW\/3RcjYAbu5Z+2LZCSM0YAQCBYGoQAAAQEICqQKGhOZASbQ"}
00560{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":81,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":10,"flow_packet_id":2,"flow_src_last_pkt_time":1694275753009538,"flow_dst_last_pkt_time":1694275753051136,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1694275753051136,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA8AABAADYGPkJNb\/dFwKgBHQG7yM9KI6qCTRTWK6AS\/ogvngAAAgQFrAQCCAqZASbLSkMm1gEDAwc="}
01245{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":82,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":19,"flow_packet_id":4,"flow_src_last_pkt_time":1694275753051145,"flow_dst_last_pkt_time":1694275753050972,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"thread_ts_usec":1694275753051145,"pkt":"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"}
01188{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":82,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":19,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1694275753010817,"flow_src_last_pkt_time":1694275753051145,"flow_dst_last_pkt_time":1694275753050972,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275753051145,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51416,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.2","ja3":"b2140846842f38b9416f56b0b940518a","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00560{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":22,"flow_packet_id":2,"flow_src_last_pkt_time":1694275753011053,"flow_dst_last_pkt_time":1694275753051253,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1694275753051253,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA8AABAADQGQEJNb\/dFwKgBHQG7yNvx7aeOjskjPqAS\/ojB7wAAAgQFrAQCCAqZASbRI4KHlQEDAwc="}
00547{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":84,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":10,"flow_packet_id":3,"flow_src_last_pkt_time":1694275753051266,"flow_dst_last_pkt_time":1694275753051136,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275753051266,"pkt":"EBMx8Tl2nFg8p+7MCABFAAA0AABAAEAGAADAqAEdTW\/3RcjPAbtNFNYrSiOqg4AQCBYGoQAAAQEICkpDJwCZASbL"}
01242{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":85,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":10,"flow_packet_id":4,"flow_src_last_pkt_time":1694275753051266,"flow_dst_last_pkt_time":1694275753051136,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"thread_ts_usec":1694275753051266,"pkt":"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"}
01188{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":85,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":10,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1694275753009538,"flow_src_last_pkt_time":1694275753051266,"flow_dst_last_pkt_time":1694275753051136,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275753051266,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51407,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.2","ja3":"ba575b0efbad4d121f0cf2b83747f586","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00547{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":86,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":22,"flow_packet_id":3,"flow_src_last_pkt_time":1694275753051386,"flow_dst_last_pkt_time":1694275753051253,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275753051386,"pkt":"EBMx8Tl2nFg8p+7MCABFAAA0AABAAEAGAADAqAEdTW\/3RcjbAbuOySM+8e2nj4AQCBYGoQAAAQEICiOCh72ZASbR"}
01244{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":87,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":22,"flow_packet_id":4,"flow_src_last_pkt_time":1694275753051386,"flow_dst_last_pkt_time":1694275753051253,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"thread_ts_usec":1694275753051386,"pkt":"EBMx8Tl2nFg8p+7MCABFAAI5AABAAEAGAADAqAEdTW\/3RcjbAbuOySM+8e2nj4AYCBYIpgAAAQEICiOCh72ZASbRFgMBAgABAAH8AwMC+V8XPTiT++k0blJmcrXuhw\/zDaf4ooGnYMn+WEeu9iCcpP+VNkIMCldWZPSjN8AwhdHURZq5Qdfv06nXawJ1xwAgCgoTARMCEwPAK8AvwCzAMMypzKjAE8AUAJwAnQAvADUBAAGTiooAAAArAAcGmpoDBAMDAA0AEgAQBAMIBAQBBQMIBQUBCAYGAQAbAAMCAAIACwACAQAAIwAAABAADgAMAmgyCGh0dHAvMS4xRGkABQADAmgyABcAAAAKAAoACFpaAB0AFwAYAAUABQEAAAAA\/wEAAQAAMwArAClaWgABAAAdACDynMECelNnzFT7h1N3x2erqt8tcFOJvePTTR2Q99LtDQAAABcAFQAAEmV1MC5zZWMtdHVubmVsLmNvbQASAAAALQACAQH6+gABAAAVAMUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="}
01188{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":87,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":22,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1694275753011053,"flow_src_last_pkt_time":1694275753051386,"flow_dst_last_pkt_time":1694275753051253,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275753051386,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51419,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.2","ja3":"5a30a421246b25d72f6088cfa70edd09","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00560{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":88,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":21,"flow_packet_id":2,"flow_src_last_pkt_time":1694275753011053,"flow_dst_last_pkt_time":1694275753051425,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1694275753051425,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA8AABAADQGQEJNb\/dFwKgBHQG7yNqXYK6fWCRVfKAS\/ohtdgAAAgQFrAQCCAqZASbRJNcyngEDAwc="}
00547{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":89,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":21,"flow_packet_id":3,"flow_src_last_pkt_time":1694275753051508,"flow_dst_last_pkt_time":1694275753051425,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275753051508,"pkt":"EBMx8Tl2nFg8p+7MCABFAAA0AABAAEAGAADAqAEdTW\/3RcjaAbtYJFV8l2CuoIAQCBYGoQAAAQEICiTXMsaZASbR"}
01245{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":90,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":21,"flow_packet_id":4,"flow_src_last_pkt_time":1694275753051508,"flow_dst_last_pkt_time":1694275753051425,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"thread_ts_usec":1694275753051508,"pkt":"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"}
01188{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":90,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":21,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1694275753011053,"flow_src_last_pkt_time":1694275753051508,"flow_dst_last_pkt_time":1694275753051425,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275753051508,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51418,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.2","ja3":"f19d35bfdfe64dff7bb24434aeb3e161","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00560{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":91,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":24,"flow_packet_id":2,"flow_src_last_pkt_time":1694275753011291,"flow_dst_last_pkt_time":1694275753051590,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1694275753051590,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA8AABAADYGPkJNb\/dFwKgBHQG7yN1CTBNdp4zv2KAS\/ojZEgAAAgQFrAQCCAqZASbSaCqKPAEDAwc="}
00548{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":92,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":24,"flow_packet_id":3,"flow_src_last_pkt_time":1694275753051634,"flow_dst_last_pkt_time":1694275753051590,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275753051634,"pkt":"EBMx8Tl2nFg8p+7MCABFAAA0AABAAEAGAADAqAEdTW\/3RcjdAbunjO\/YQkwTXoAQCBYGoQAAAQEICmgqimSZASbS"}
01245{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":93,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":24,"flow_packet_id":4,"flow_src_last_pkt_time":1694275753051758,"flow_dst_last_pkt_time":1694275753051590,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"thread_ts_usec":1694275753051758,"pkt":"EBMx8Tl2nFg8p+7MCABFAAI5AABAAEAGAADAqAEdTW\/3RcjdAbunjO\/YQkwTXoAYCBYIpgAAAQEICmgqimSZASbSFgMBAgABAAH8AwNxCfXm6mvBUrEkBnv1yB7PeVAhvC2noEcSr9WNGSeLqiDYiZskXSyIERuAJ6h\/jMu0\/9ajOZOF7Cy9z5z4RUrzwQAgGhoTARMCEwPAK8AvwCzAMMypzKjAE8AUAJwAnQAvADUBAAGTamoAAERpAAUAAwJoMgAFAAUBAAAAAAASAAAADQASABAEAwgEBAEFAwgFBQEIBgYBABcAAAAAABcAFQAAEmV1MC5zZWMtdHVubmVsLmNvbQAtAAIBAf8BAAEAACsABwZqagMEAwMAIwAAABsAAwIAAgAzACsAKUpKAAEAAB0AIObeazdPwzg5f7WnkTGuNIb59sijbpxLvTo+rI9+zLcqAAoACgAISkoAHQAXABgAEAAOAAwCaDIIaHR0cC8xLjEACwACAQC6ugABAAAVAMUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="}
01188{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":93,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":24,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1694275753011291,"flow_src_last_pkt_time":1694275753051758,"flow_dst_last_pkt_time":1694275753051590,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275753051758,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51421,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.2","ja3":"3c76792950691cbb72d98c45cc2edb5d","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00560{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":94,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":23,"flow_packet_id":2,"flow_src_last_pkt_time":1694275753011171,"flow_dst_last_pkt_time":1694275753052187,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1694275753052187,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA8AABAADQGQEJNb\/dFwKgBHQG7yNxEVH7MXSIQrqAS\/ojAUAAAAgQFrAQCCAqZASbS9mbQ4AEDAwc="}
00547{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":95,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":23,"flow_packet_id":3,"flow_src_last_pkt_time":1694275753052228,"flow_dst_last_pkt_time":1694275753052187,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275753052228,"pkt":"EBMx8Tl2nFg8p+7MCABFAAA0AABAAEAGAADAqAEdTW\/3RcjcAbtdIhCuRFR+zYAQCBYGoQAAAQEICvZm0QqZASbS"}
01244{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":96,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":23,"flow_packet_id":4,"flow_src_last_pkt_time":1694275753052349,"flow_dst_last_pkt_time":1694275753052187,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"thread_ts_usec":1694275753052349,"pkt":"EBMx8Tl2nFg8p+7MCABFAAI5AABAAEAGAADAqAEdTW\/3RcjcAbtdIhCuRFR+zYAYCBYIpgAAAQEICvZm0QqZASbSFgMBAgABAAH8AwNE3q3MUDkcFX\/OcURtFYtC0Z4IdyyDWkMduFL2lETNiSA8cc7dp1AHlr1knoJpaNCGUxVngsSYV7bWG7SAQpPM\/AAgCgoTARMCEwPAK8AvwCzAMMypzKjAE8AUAJwAnQAvADUBAAGT2toAAAAQAA4ADAJoMghodHRwLzEuMQAtAAIBAQAXAAAAKwAHBurqAwQDAwAjAAAAMwArAClqagABAAAdACBkMLGzA1Mp+CcrJjf6EL8cKEGSMOJJgd3s68WslFqgFgANABIAEAQDCAQEAQUDCAUFAQgGBgEAEgAAABsAAwIAAv8BAAEAAAUABQEAAAAAAAsAAgEAAAoACgAIamoAHQAXABhEaQAFAAMCaDIAAAAXABUAABJldTAuc2VjLXR1bm5lbC5jb20aGgABAAAVAMUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="}
01188{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":96,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":23,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1694275753011171,"flow_src_last_pkt_time":1694275753052349,"flow_dst_last_pkt_time":1694275753052187,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275753052349,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51420,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.2","ja3":"b549b9d91b0d29ef395d87455e4d4b34","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00546{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":97,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":1,"flow_packet_id":5,"flow_src_last_pkt_time":1694275753023424,"flow_dst_last_pkt_time":1694275753053361,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275753053361,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA0Rl9AADQG+epNb\/dFwKgBHQG7yMYj3Z31l62eeIAQAfpKogAAAQEICpkBJtUTko3D"}
00560{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":98,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":26,"flow_packet_id":2,"flow_src_last_pkt_time":1694275753011411,"flow_dst_last_pkt_time":1694275753053874,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1694275753053874,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA8AABAADQGQEJNb\/dFwKgBHQG7yN+MpzG4V6nvCKAS\/ohk2gAAAgQFrAQCCAqZASbT6CBmeAEDAwc="}
00547{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":99,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":26,"flow_packet_id":3,"flow_src_last_pkt_time":1694275753053911,"flow_dst_last_pkt_time":1694275753053874,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275753053911,"pkt":"EBMx8Tl2nFg8p+7MCABFAAA0AABAAEAGAADAqAEdTW\/3RcjfAbtXqe8IjKcxuYAQCBYGoQAAAQEICuggZqOZASbT"}
01246{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":100,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":26,"flow_packet_id":4,"flow_src_last_pkt_time":1694275753054030,"flow_dst_last_pkt_time":1694275753053874,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"thread_ts_usec":1694275753054030,"pkt":"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"}
01189{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":100,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":26,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1694275753011411,"flow_src_last_pkt_time":1694275753054030,"flow_dst_last_pkt_time":1694275753053874,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275753054030,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51423,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.2","ja3":"e88871a92704f433ae0f5850f26ad461","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
01233{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":101,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":1,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":3,"flow_first_seen":1694275752994885,"flow_src_last_pkt_time":1694275753023424,"flow_dst_last_pkt_time":1694275753054777,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":1440,"midstream":0,"thread_ts_usec":1694275753054777,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51398,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.3","ja3":"b96f72c556a76c5b13acec3b59f520dd","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00561{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":105,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":25,"flow_packet_id":2,"flow_src_last_pkt_time":1694275753011292,"flow_dst_last_pkt_time":1694275753055353,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1694275753055353,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA8AABAADYGPkJNb\/dFwKgBHQG7yN4RXjtKJpU4TKAS\/oiSIQAAAgQFrAQCCAqZASbTvXC9agEDAwc="}
00548{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":106,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":25,"flow_packet_id":3,"flow_src_last_pkt_time":1694275753055394,"flow_dst_last_pkt_time":1694275753055353,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275753055394,"pkt":"EBMx8Tl2nFg8p+7MCABFAAA0AABAAEAGAADAqAEdTW\/3RcjeAbsmlThMEV47S4AQCBYGoQAAAQEICr1wvZaZASbT"}
01244{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":107,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":25,"flow_packet_id":4,"flow_src_last_pkt_time":1694275753055633,"flow_dst_last_pkt_time":1694275753055353,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"thread_ts_usec":1694275753055633,"pkt":"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"}
01189{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":107,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":25,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1694275753011292,"flow_src_last_pkt_time":1694275753055633,"flow_dst_last_pkt_time":1694275753055353,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275753055633,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51422,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.2","ja3":"d53e8a0d8d816665d3b20df18429aa53","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00780{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":110,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":28,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1694275753060213,"flow_src_last_pkt_time":1694275753060213,"flow_dst_last_pkt_time":1694275753060213,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275753060213,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51425,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00566{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":110,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":28,"flow_packet_id":1,"flow_src_last_pkt_time":1694275753060213,"flow_dst_last_pkt_time":1694275753060213,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"thread_ts_usec":1694275753060213,"pkt":"EBMx8Tl2nFg8p+7MCABFAABAAABAAEAGAADAqAEdTW\/3RcjhAbsMLJvYAAAAALAC\/\/8GrQAAAgQFtAEDAwYBAQgK+1B6OAAAAAAEAgAA"}
00547{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":111,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":2,"flow_packet_id":5,"flow_src_last_pkt_time":1694275753036367,"flow_dst_last_pkt_time":1694275753063184,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275753063184,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA0MmhAADYGC+JNb\/dFwKgBHQG7yMcH4P5IeE6luoAQAfprxgAAAQEICpkBJt4mSy2j"}
01233{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":112,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":2,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":3,"flow_first_seen":1694275753007782,"flow_src_last_pkt_time":1694275753036367,"flow_dst_last_pkt_time":1694275753064783,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":1440,"midstream":0,"thread_ts_usec":1694275753064783,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51399,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.3","ja3":"485d321608abf60490d88c6b010221af","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00547{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":113,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":4,"flow_packet_id":5,"flow_src_last_pkt_time":1694275753038526,"flow_dst_last_pkt_time":1694275753064783,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275753064783,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA0hCNAADYGuiZNb\/dFwKgBHQG7yMlbRPVjo1avoIAQAfoEHAAAAQEICpkBJuCntZRx"}
00547{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":114,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":3,"flow_packet_id":5,"flow_src_last_pkt_time":1694275753037849,"flow_dst_last_pkt_time":1694275753064784,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275753064784,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA0y51AADYGcqxNb\/dFwKgBHQG7yMgmGyyvmuIIqIAQAfqvygAAAQEICpkBJt+wSY17"}
01233{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":118,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":3,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":3,"flow_first_seen":1694275753008024,"flow_src_last_pkt_time":1694275753037849,"flow_dst_last_pkt_time":1694275753066150,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":1440,"midstream":0,"thread_ts_usec":1694275753066150,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51400,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.3","ja3":"f40971697b0dd2827eea54ea65d19395","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
01233{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":122,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":4,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":3,"flow_first_seen":1694275753008266,"flow_src_last_pkt_time":1694275753038526,"flow_dst_last_pkt_time":1694275753066343,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":1440,"midstream":0,"thread_ts_usec":1694275753066343,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51401,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.3","ja3":"310fa0bcc8223ddf7149498a30f17097","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00547{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":130,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":6,"flow_packet_id":5,"flow_src_last_pkt_time":1694275753039664,"flow_dst_last_pkt_time":1694275753066673,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275753066673,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA09wBAADQGSUlNb\/dFwKgBHQG7yMuguxaTLDLkZYAQAfoP6gAAAQEICpkBJuF+240z"}
01233{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":133,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":6,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":3,"flow_first_seen":1694275753008755,"flow_src_last_pkt_time":1694275753039664,"flow_dst_last_pkt_time":1694275753067683,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":1440,"midstream":0,"thread_ts_usec":1694275753067683,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51403,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.3","ja3":"58c47ed77ccd0602805bfe75ed4283ba","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00547{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":137,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":7,"flow_packet_id":5,"flow_src_last_pkt_time":1694275753040918,"flow_dst_last_pkt_time":1694275753068057,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275753068057,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA0c9NAADQGzHZNb\/dFwKgBHQG7yMyG7XXiOV8OZYAQAfoLSQAAAQEICpkBJuLneayG"}
01233{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":140,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":7,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":3,"flow_first_seen":1694275753008879,"flow_src_last_pkt_time":1694275753040918,"flow_dst_last_pkt_time":1694275753068417,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":1440,"midstream":0,"thread_ts_usec":1694275753068417,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51404,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.3","ja3":"afd51562845a41020a43e5d659f59308","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00547{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":144,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":8,"flow_packet_id":5,"flow_src_last_pkt_time":1694275753042389,"flow_dst_last_pkt_time":1694275753068676,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275753068676,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA0L0ZAADQGEQRNb\/dFwKgBHQG7yM20aXno4ut4yIAQAfpA8gAAAQEICpkBJuRzR6Wa"}
01233{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":147,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":8,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":3,"flow_first_seen":1694275753009120,"flow_src_last_pkt_time":1694275753042389,"flow_dst_last_pkt_time":1694275753069758,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":1440,"midstream":0,"thread_ts_usec":1694275753069758,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51405,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.3","ja3":"44f9748950032beeac19dc7e2f233d77","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00548{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":150,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":9,"flow_packet_id":5,"flow_src_last_pkt_time":1694275753042389,"flow_dst_last_pkt_time":1694275753069903,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275753069903,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA0HcpAADQGIoBNb\/dFwKgBHQG7yM5b1asxEkCoAYAQAfpY5QAAAQEICpkBJuRvrFn\/"}
01233{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":153,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":9,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":3,"flow_first_seen":1694275753009419,"flow_src_last_pkt_time":1694275753042389,"flow_dst_last_pkt_time":1694275753070279,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":1440,"midstream":0,"thread_ts_usec":1694275753070279,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51406,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.3","ja3":"31c32357f806723eb0eaab101578edf5","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00548{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":157,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":11,"flow_packet_id":5,"flow_src_last_pkt_time":1694275753043852,"flow_dst_last_pkt_time":1694275753070550,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275753070550,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA0IIdAADQGH8NNb\/dFwKgBHQG7yNDMQDF6+1AKX4AQAfokYQAAAQEICpkBJuYbKKDh"}
01234{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":161,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":11,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":3,"flow_first_seen":1694275753009698,"flow_src_last_pkt_time":1694275753043852,"flow_dst_last_pkt_time":1694275753070896,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":1440,"midstream":0,"thread_ts_usec":1694275753070896,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51408,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.3","ja3":"0915bf8869a023d47778f806f5d3b256","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00548{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":167,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":14,"flow_packet_id":5,"flow_src_last_pkt_time":1694275753045932,"flow_dst_last_pkt_time":1694275753071853,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275753071853,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA0Mm1AADYGC91Nb\/dFwKgBHQG7yNPKGUHruGgL2oAQAfoM2gAAAQEICpkBJucYGe6W"}
01234{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":168,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":14,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":3,"flow_first_seen":1694275753010306,"flow_src_last_pkt_time":1694275753045932,"flow_dst_last_pkt_time":1694275753073432,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":1440,"midstream":0,"thread_ts_usec":1694275753073432,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51411,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.3","ja3":"5ba1797d57b7ba42ce82582e43b0217f","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00549{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":174,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":17,"flow_packet_id":5,"flow_src_last_pkt_time":1694275753047858,"flow_dst_last_pkt_time":1694275753074752,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275753074752,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA0oxxAADQGnS1Nb\/dFwKgBHQG7yNbs0zQWOLQJcoAQAfoV6AAAAQEICpkBJusqE0C\/"}
00547{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":175,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":5,"flow_packet_id":5,"flow_src_last_pkt_time":1694275753043733,"flow_dst_last_pkt_time":1694275753074821,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275753074821,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA0YOlAADQG32BNb\/dFwKgBHQG7yMoGnMmTP+bi4IAQAfqm0wAAAQEICpkBJuY3bBKl"}
00561{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":176,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":27,"flow_packet_id":2,"flow_src_last_pkt_time":1694275753047174,"flow_dst_last_pkt_time":1694275753074991,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1694275753074991,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA8AABAADQGQEJNb\/dFwKgBHQG7yOAj9thWHFuzKqAS\/oh6bwAAAgQFrAQCCAqZASbpdtb7VQEDAwc="}
00549{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":177,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":27,"flow_packet_id":3,"flow_src_last_pkt_time":1694275753075027,"flow_dst_last_pkt_time":1694275753074991,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275753075027,"pkt":"EBMx8Tl2nFg8p+7MCABFAAA0AABAAEAGAADAqAEdTW\/3RcjgAbscW7MqI\/bYV4AQCBYGoQAAAQEICnbW+3GZASbp"}
01246{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":178,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":27,"flow_packet_id":4,"flow_src_last_pkt_time":1694275753075147,"flow_dst_last_pkt_time":1694275753074991,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"thread_ts_usec":1694275753075147,"pkt":"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"}
01189{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":178,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":27,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1694275753047174,"flow_src_last_pkt_time":1694275753075147,"flow_dst_last_pkt_time":1694275753074991,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275753075147,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51424,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.2","ja3":"634bc7704b8a81fccb407b4db9998e0b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00780{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":179,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":29,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1694275753075692,"flow_src_last_pkt_time":1694275753075692,"flow_dst_last_pkt_time":1694275753075692,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275753075692,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51426,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00566{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":179,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":29,"flow_packet_id":1,"flow_src_last_pkt_time":1694275753075692,"flow_dst_last_pkt_time":1694275753075692,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"thread_ts_usec":1694275753075692,"pkt":"EBMx8Tl2nFg8p+7MCABFAABAAABAAEAGAADAqAEdTW\/3RcjiAbuHIvesAAAAALAC\/\/8GrQAAAgQFtAEDAwYBAQgKPiR2xQAAAAAEAgAA"}
01234{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":180,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":17,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":3,"flow_first_seen":1694275753010578,"flow_src_last_pkt_time":1694275753047858,"flow_dst_last_pkt_time":1694275753076003,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":1440,"midstream":0,"thread_ts_usec":1694275753076003,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51414,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.3","ja3":"353b63511e111884c0a2ae1b74da2093","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00549{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":184,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":15,"flow_packet_id":5,"flow_src_last_pkt_time":1694275753047616,"flow_dst_last_pkt_time":1694275753076208,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275753076208,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA0EsRAADYGK4ZNb\/dFwKgBHQG7yNQr+nh2T1xNBoAQAfpX8QAAAQEICpkBJupT7\/cZ"}
00548{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":185,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":18,"flow_packet_id":5,"flow_src_last_pkt_time":1694275753048216,"flow_dst_last_pkt_time":1694275753076209,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275753076209,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA0659AADQGVKpNb\/dFwKgBHQG7yNfa6s+FSGdKh4AQAfogKQAAAQEICpkBJusjMmMP"}
01234{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":188,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":15,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":3,"flow_first_seen":1694275753010307,"flow_src_last_pkt_time":1694275753047616,"flow_dst_last_pkt_time":1694275753076753,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":1440,"midstream":0,"thread_ts_usec":1694275753076753,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51412,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.3","ja3":"5c72c0972b0ef2b8d71f00feaa086760","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
01233{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":190,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":5,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":3,"flow_first_seen":1694275753008511,"flow_src_last_pkt_time":1694275753043733,"flow_dst_last_pkt_time":1694275753077419,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":1440,"midstream":0,"thread_ts_usec":1694275753077419,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51402,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.3","ja3":"e415684488869452bd654e636a258ffc","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
01234{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":198,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":18,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":3,"flow_first_seen":1694275753010697,"flow_src_last_pkt_time":1694275753048216,"flow_dst_last_pkt_time":1694275753077872,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":1440,"midstream":0,"thread_ts_usec":1694275753077872,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51415,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.3","ja3":"409bb955d02abe4c9736d1184814780d","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
02508{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":206,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":12,"flow_packet_id":5,"flow_src_last_pkt_time":1694275753047738,"flow_dst_last_pkt_time":1694275753078520,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"thread_ts_usec":1694275753078520,"pkt":"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"}
01234{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":206,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":12,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":2,"flow_first_seen":1694275753009947,"flow_src_last_pkt_time":1694275753047738,"flow_dst_last_pkt_time":1694275753078520,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":1440,"midstream":0,"thread_ts_usec":1694275753078520,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51409,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.3","ja3":"6bfdc9fce41022f28ac0de368e7164cc","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00548{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":210,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":16,"flow_packet_id":5,"flow_src_last_pkt_time":1694275753047978,"flow_dst_last_pkt_time":1694275753078940,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275753078940,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA0Rh9AADYG+CpNb\/dFwKgBHQG7yNU5JMQSV9QS04AQAfrQ4wAAAQEICpkBJux3RTPD"}
01234{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":213,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":16,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":3,"flow_first_seen":1694275753010458,"flow_src_last_pkt_time":1694275753047978,"flow_dst_last_pkt_time":1694275753079170,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":1440,"midstream":0,"thread_ts_usec":1694275753079170,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51413,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.3","ja3":"65e9700415d3b43581aa12e23afbfd7e","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00549{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":218,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":20,"flow_packet_id":5,"flow_src_last_pkt_time":1694275753049809,"flow_dst_last_pkt_time":1694275753079966,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275753079966,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA08S9AADYGTRpNb\/dFwKgBHQG7yNk\/HlZsWTH7UoAQAfrezgAAAQEICpkBJu1BotlF"}
01234{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":221,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":20,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":3,"flow_first_seen":1694275753010935,"flow_src_last_pkt_time":1694275753049809,"flow_dst_last_pkt_time":1694275753080428,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":1440,"midstream":0,"thread_ts_usec":1694275753080428,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51417,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.3","ja3":"91ec3705bc708c10592467e78630e9bd","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00548{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":224,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":22,"flow_packet_id":5,"flow_src_last_pkt_time":1694275753051386,"flow_dst_last_pkt_time":1694275753080518,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275753080518,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA0V+ZAADQG6GNNb\/dFwKgBHQG7yNvx7aePjsklQ4AQAfrq+AAAAQEICpkBJu4jgoe9"}
00548{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":225,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":19,"flow_packet_id":5,"flow_src_last_pkt_time":1694275753051145,"flow_dst_last_pkt_time":1694275753080518,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275753080518,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA0HV9AADYGIOtNb\/dFwKgBHQG7yNhkJIzRuWfvkIAQAfqLuQAAAQEICpkBJu6kChoT"}
01234{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":227,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":22,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":3,"flow_first_seen":1694275753011053,"flow_src_last_pkt_time":1694275753051386,"flow_dst_last_pkt_time":1694275753080768,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":1440,"midstream":0,"thread_ts_usec":1694275753080768,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51419,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.3","ja3":"5a30a421246b25d72f6088cfa70edd09","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00548{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":233,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":24,"flow_packet_id":5,"flow_src_last_pkt_time":1694275753051758,"flow_dst_last_pkt_time":1694275753081776,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275753081776,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA0sshAADYGi4FNb\/dFwKgBHQG7yN1CTBNep4zx3YAQAfoCHAAAAQEICpkBJu9oKopk"}
01234{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":236,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":19,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":3,"flow_first_seen":1694275753010817,"flow_src_last_pkt_time":1694275753051145,"flow_dst_last_pkt_time":1694275753082002,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":1440,"midstream":0,"thread_ts_usec":1694275753082002,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51416,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.3","ja3":"b2140846842f38b9416f56b0b940518a","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
01234{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":239,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":24,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":3,"flow_first_seen":1694275753011291,"flow_src_last_pkt_time":1694275753051758,"flow_dst_last_pkt_time":1694275753082207,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":1440,"midstream":0,"thread_ts_usec":1694275753082207,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51421,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.3","ja3":"3c76792950691cbb72d98c45cc2edb5d","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00548{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":245,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":21,"flow_packet_id":5,"flow_src_last_pkt_time":1694275753051508,"flow_dst_last_pkt_time":1694275753082450,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275753082450,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA0NypAADQGCSBNb\/dFwKgBHQG7yNqXYK6gWCRXgYAQAfqWfgAAAQEICpkBJu8k1zLG"}
01234{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":248,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":21,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":3,"flow_first_seen":1694275753011053,"flow_src_last_pkt_time":1694275753051508,"flow_dst_last_pkt_time":1694275753082954,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":1440,"midstream":0,"thread_ts_usec":1694275753082954,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51418,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.3","ja3":"f19d35bfdfe64dff7bb24434aeb3e161","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00548{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":254,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":23,"flow_packet_id":5,"flow_src_last_pkt_time":1694275753052349,"flow_dst_last_pkt_time":1694275753083220,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275753083220,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA0whFAADQGfjhNb\/dFwKgBHQG7yNxEVH7NXSISs4AQAfrpVQAAAQEICpkBJvH2ZtEK"}
00548{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":256,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":26,"flow_packet_id":5,"flow_src_last_pkt_time":1694275753054030,"flow_dst_last_pkt_time":1694275753083337,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275753083337,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA0ZNpAADQG229Nb\/dFwKgBHQG7yN+MpzG5V6nxDYAQAfqN3wAAAQEICpkBJvHoIGaj"}
01234{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":258,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":23,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":3,"flow_first_seen":1694275753011171,"flow_src_last_pkt_time":1694275753052349,"flow_dst_last_pkt_time":1694275753083724,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":1440,"midstream":0,"thread_ts_usec":1694275753083724,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51420,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.3","ja3":"b549b9d91b0d29ef395d87455e4d4b34","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
01234{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":262,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":26,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":3,"flow_first_seen":1694275753011411,"flow_src_last_pkt_time":1694275753054030,"flow_dst_last_pkt_time":1694275753083939,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":1440,"midstream":0,"thread_ts_usec":1694275753083939,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51423,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.3","ja3":"e88871a92704f433ae0f5850f26ad461","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00548{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":267,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":25,"flow_packet_id":5,"flow_src_last_pkt_time":1694275753055633,"flow_dst_last_pkt_time":1694275753085371,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275753085371,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA0h1hAADYGtvFNb\/dFwKgBHQG7yN4RXjtLJpU6UYAQAfq7JQAAAQEICpkBJvG9cL2W"}
01234{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":269,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":25,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":3,"flow_first_seen":1694275753011292,"flow_src_last_pkt_time":1694275753055633,"flow_dst_last_pkt_time":1694275753085635,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":1440,"midstream":0,"thread_ts_usec":1694275753085635,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51422,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.3","ja3":"d53e8a0d8d816665d3b20df18429aa53","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00548{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":274,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":10,"flow_packet_id":5,"flow_src_last_pkt_time":1694275753051266,"flow_dst_last_pkt_time":1694275753085843,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275753085843,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA09DhAADYGShFNb\/dFwKgBHQG7yM9KI6qDTRTYMIAQAfpYngAAAQEICpkBJu9KQycA"}
01234{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":278,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":10,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":3,"flow_first_seen":1694275753009538,"flow_src_last_pkt_time":1694275753051266,"flow_dst_last_pkt_time":1694275753086242,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":1440,"midstream":0,"thread_ts_usec":1694275753086242,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51407,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.3","ja3":"ba575b0efbad4d121f0cf2b83747f586","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00561{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":284,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":28,"flow_packet_id":2,"flow_src_last_pkt_time":1694275753060213,"flow_dst_last_pkt_time":1694275753087370,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1694275753087370,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA8AABAADQGQEJNb\/dFwKgBHQG7yOFaEOXgDCyb2aAS\/oha4AAAAgQFrAQCCAqZASb2+1B6OAEDAwc="}
00548{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":285,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":28,"flow_packet_id":3,"flow_src_last_pkt_time":1694275753087419,"flow_dst_last_pkt_time":1694275753087370,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275753087419,"pkt":"EBMx8Tl2nFg8p+7MCABFAAA0AABAAEAGAADAqAEdTW\/3RcjhAbsMLJvZWhDl4YAQCBYGoQAAAQEICvtQelOZASb2"}
01245{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":286,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":28,"flow_packet_id":4,"flow_src_last_pkt_time":1694275753087542,"flow_dst_last_pkt_time":1694275753087370,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"thread_ts_usec":1694275753087542,"pkt":"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"}
01189{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":286,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":28,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1694275753060213,"flow_src_last_pkt_time":1694275753087542,"flow_dst_last_pkt_time":1694275753087370,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275753087542,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51425,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.2","ja3":"36fbe47608c33e82b4919ff004bf468f","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00780{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":300,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":30,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1694275753095564,"flow_src_last_pkt_time":1694275753095564,"flow_dst_last_pkt_time":1694275753095564,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275753095564,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51427,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00567{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":300,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":30,"flow_packet_id":1,"flow_src_last_pkt_time":1694275753095564,"flow_dst_last_pkt_time":1694275753095564,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"thread_ts_usec":1694275753095564,"pkt":"EBMx8Tl2nFg8p+7MCABFAABAAABAAEAGAADAqAEdTW\/3RcjjAbtxmezmAAAAALAC\/\/8GrQAAAgQFtAEDAwYBAQgK\/yT5UAAAAAAEAgAA"}
00548{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":324,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":27,"flow_packet_id":5,"flow_src_last_pkt_time":1694275753075147,"flow_dst_last_pkt_time":1694275753102496,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275753102496,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA06KdAADQGV6JNb\/dFwKgBHQG7yOAj9thXHFu1L4AQAfqjhQAAAQEICpkBJwV21vtx"}
01234{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":325,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":27,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":3,"flow_first_seen":1694275753047174,"flow_src_last_pkt_time":1694275753075147,"flow_dst_last_pkt_time":1694275753102981,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":1440,"midstream":0,"thread_ts_usec":1694275753102981,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51424,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.3","ja3":"634bc7704b8a81fccb407b4db9998e0b","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00561{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":326,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":29,"flow_packet_id":2,"flow_src_last_pkt_time":1694275753075692,"flow_dst_last_pkt_time":1694275753102983,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1694275753102983,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA8AABAADQGQEJNb\/dFwKgBHQG7yOJTmkKUhyL3raAS\/ojuZwAAAgQFrAQCCAqZAScFPiR2xQEDAwc="}
00548{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":328,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":29,"flow_packet_id":3,"flow_src_last_pkt_time":1694275753103137,"flow_dst_last_pkt_time":1694275753102983,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275753103137,"pkt":"EBMx8Tl2nFg8p+7MCABFAAA0AABAAEAGAADAqAEdTW\/3RcjiAbuHIvetU5pClYAQCBYGoQAAAQEICj4kduGZAScF"}
01245{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":331,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":29,"flow_packet_id":4,"flow_src_last_pkt_time":1694275753103379,"flow_dst_last_pkt_time":1694275753102983,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"thread_ts_usec":1694275753103379,"pkt":"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"}
01189{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":331,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":29,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1694275753075692,"flow_src_last_pkt_time":1694275753103379,"flow_dst_last_pkt_time":1694275753102983,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275753103379,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51426,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.2","ja3":"18b2b5202ea281d1e8133ba4d9034218","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00780{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":406,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":31,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1694275753113486,"flow_src_last_pkt_time":1694275753113486,"flow_dst_last_pkt_time":1694275753113486,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275753113486,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51428,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00566{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":406,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":31,"flow_packet_id":1,"flow_src_last_pkt_time":1694275753113486,"flow_dst_last_pkt_time":1694275753113486,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"thread_ts_usec":1694275753113486,"pkt":"EBMx8Tl2nFg8p+7MCABFAABAAABAAEAGAADAqAEdTW\/3RcjkAbv10zkuAAAAALAC\/\/8GrQAAAgQFtAEDAwYBAQgKA94uygAAAAAEAgAA"}
00548{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":430,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":28,"flow_packet_id":5,"flow_src_last_pkt_time":1694275753087542,"flow_dst_last_pkt_time":1694275753116407,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275753116407,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA0EHFAADQGL9lNb\/dFwKgBHQG7yOFaEOXhDCyd3oAQAfqD9gAAAQEICpkBJxL7UHpU"}
01234{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":431,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":28,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":3,"flow_first_seen":1694275753060213,"flow_src_last_pkt_time":1694275753087542,"flow_dst_last_pkt_time":1694275753116834,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":1440,"midstream":0,"thread_ts_usec":1694275753116834,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51425,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.3","ja3":"36fbe47608c33e82b4919ff004bf468f","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
02157{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":456,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":1,"flow_state":"finished","flow_src_packets_processed":15,"flow_dst_packets_processed":17,"flow_first_seen":1694275752994885,"flow_src_last_pkt_time":1694275753121216,"flow_dst_last_pkt_time":1694275753121178,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1435,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2555,"flow_dst_tot_l4_payload_len":9721,"midstream":0,"thread_ts_usec":1694275753121216,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51398,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"data_analysis": {"iat": {"min":0,"avg":8149.2,"max":34618,"stddev":12737.5,"var":162242736.0,"ent":3.3,"data": [28191,28256,283,30285,1416,31381,64,120,948,119,28177,1,7508,34618,94,21,126,0,26424,2466,28884,208,153,177,2,183,1142,1139,116,1,121]},"pktlen": {"min":52,"avg":436.2,"max":1492,"stddev":558.2,"var":311541.9,"ent":3.9,"data": [64,60,52,569,52,1492,52,1129,52,116,1487,52,52,91,52,93,76,52,591,52,1098,52,1098,52,1492,704,52,1492,52,1492,88,52]},"bins": {"c_to_s": [11,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0],"s_to_c": [6,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,2,1,0,0,0,0,0,0,0,0,0,0,0,4,0,0]},"directions": [0,1,0,0,1,1,0,1,0,0,0,1,1,1,0,1,1,0,0,1,1,0,1,0,1,1,0,1,0,1,1,0],"entropies": [4.178360939,5.246035099,4.774691582,4.415835857,5.101991177,7.845096111,4.813152790,7.816174030,4.813152790,5.959872246,7.864091396,5.063529491,5.101990700,5.947135925,4.774691582,5.903012753,5.583068848,4.736229897,7.593397617,5.063529015,7.799862385,4.813152790,7.782990932,4.813152790,7.842496395,7.670236111,4.813152790,7.890326023,4.813152790,7.859270096,5.992159843,4.813152790]},"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00562{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":480,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":30,"flow_packet_id":2,"flow_src_last_pkt_time":1694275753095564,"flow_dst_last_pkt_time":1694275753122969,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1694275753122969,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA8AABAADQGQEJNb\/dFwKgBHQG7yOPTLOlNcZns56AS\/oikyQAAAgQFrAQCCAqZAScZ\/yT5UAEDAwc="}
00548{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":481,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":30,"flow_packet_id":3,"flow_src_last_pkt_time":1694275753123019,"flow_dst_last_pkt_time":1694275753122969,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275753123019,"pkt":"EBMx8Tl2nFg8p+7MCABFAAA0AABAAEAGAADAqAEdTW\/3RcjjAbtxmezn0yzpToAQCBYGoQAAAQEICv8k+WqZAScZ"}
01246{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":482,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":30,"flow_packet_id":4,"flow_src_last_pkt_time":1694275753123142,"flow_dst_last_pkt_time":1694275753122969,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"thread_ts_usec":1694275753123142,"pkt":"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"}
01189{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":482,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":30,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1694275753095564,"flow_src_last_pkt_time":1694275753123142,"flow_dst_last_pkt_time":1694275753122969,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275753123142,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51427,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.2","ja3":"6b5bd5ac6bb016b178ad970087122ccd","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00548{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":522,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":29,"flow_packet_id":5,"flow_src_last_pkt_time":1694275753103379,"flow_dst_last_pkt_time":1694275753130045,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275753130045,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA0UINAADQG78ZNb\/dFwKgBHQG7yOJTmkKVhyL5soAQAfoXfgAAAQEICpkBJyE+JHbh"}
01234{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":525,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":29,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":3,"flow_first_seen":1694275753075692,"flow_src_last_pkt_time":1694275753103379,"flow_dst_last_pkt_time":1694275753130960,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":1440,"midstream":0,"thread_ts_usec":1694275753130960,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51426,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.3","ja3":"18b2b5202ea281d1e8133ba4d9034218","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
02159{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":550,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":11,"flow_state":"finished","flow_src_packets_processed":16,"flow_dst_packets_processed":16,"flow_first_seen":1694275753009698,"flow_src_last_pkt_time":1694275753134178,"flow_dst_last_pkt_time":1694275753134052,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1415,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2535,"flow_dst_tot_l4_payload_len":8771,"midstream":0,"thread_ts_usec":1694275753134178,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51408,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"data_analysis": {"iat": {"min":0,"avg":8026.9,"max":34034,"stddev":12706.7,"var":161459696.0,"ent":3.3,"data": [34007,34034,120,26845,346,27090,181,236,237,0,25956,954,6635,33230,67,118,1011,961,118,26387,361,26641,249,1,247,838,838,491,25,487,123]},"pktlen": {"min":52,"avg":405.9,"max":1492,"stddev":517.2,"var":267501.9,"ent":3.9,"data": [64,60,52,569,52,1492,52,1127,52,116,1467,52,52,91,52,93,52,76,52,591,52,1098,52,1492,704,52,1308,52,1098,764,52,52]},"bins": {"c_to_s": [12,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0],"s_to_c": [6,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,1,0,0,0,0,0,0,0,0,0,2,1,0,0,0,0,0,1,0,0,0,0,0,2,0,0]},"directions": [0,1,0,0,1,1,0,1,0,0,0,1,1,1,0,1,0,1,0,0,1,1,0,1,1,0,1,0,1,1,0,0],"entropies": [4.178360939,5.100120068,4.630272388,4.446496964,5.025067329,7.849304199,4.721712589,7.817786694,4.683250904,5.830391407,7.874171257,4.868495941,4.986605644,5.938840389,4.683250904,5.952818394,4.683250904,5.583068848,4.683250904,7.597726345,4.986605644,7.836946011,4.721712589,7.867290497,7.710337639,4.683250904,7.851277351,4.721712589,7.801111221,7.717481613,4.683250904,4.721712589]},"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
02160{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":592,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":15,"flow_state":"finished","flow_src_packets_processed":15,"flow_dst_packets_processed":17,"flow_first_seen":1694275753010307,"flow_src_last_pkt_time":1694275753138329,"flow_dst_last_pkt_time":1694275753138409,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1431,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2551,"flow_dst_tot_l4_payload_len":8409,"midstream":0,"thread_ts_usec":1694275753138409,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51412,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"data_analysis": {"iat": {"min":0,"avg":8262.1,"max":37189,"stddev":13372.1,"var":178813616.0,"ent":3.3,"data": [37131,37189,120,28770,545,29160,956,1038,124,0,26740,1657,3275,31465,58,61,121,120,26978,870,27738,217,211,38,75,126,42,122,581,488,108]},"pktlen": {"min":52,"avg":395.1,"max":1492,"stddev":500.8,"var":250764.7,"ent":4.0,"data": [64,60,52,569,52,1492,52,1128,52,116,1483,52,52,91,52,93,76,52,591,52,1098,52,1492,52,704,1098,52,262,52,1098,52,401]},"bins": {"c_to_s": [11,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0],"s_to_c": [6,2,0,0,0,0,1,0,0,0,1,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,3,1,0,0,0,0,0,0,0,0,0,0,0,2,0,0]},"directions": [0,1,0,0,1,1,0,1,0,0,0,1,1,1,0,1,1,0,0,1,1,0,1,0,1,1,0,1,0,1,0,1],"entropies": [4.120111465,5.252541542,4.661227226,4.441981792,4.948143959,7.847444057,4.683250904,7.789011955,4.644789219,5.829818249,7.858657837,4.895165443,4.986605644,5.925158024,4.774691105,5.883030891,5.556753159,4.774691105,7.602227688,4.972088814,7.810331345,4.697768211,7.874945164,4.774691105,7.745232582,7.827443600,4.697768211,7.147191525,4.774691105,7.818018913,4.736229420,7.413194656]},"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
02160{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":618,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":18,"flow_state":"finished","flow_src_packets_processed":16,"flow_dst_packets_processed":16,"flow_first_seen":1694275753010697,"flow_src_last_pkt_time":1694275753141835,"flow_dst_last_pkt_time":1694275753141802,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1431,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2551,"flow_dst_tot_l4_payload_len":7566,"midstream":0,"thread_ts_usec":1694275753141835,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51415,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"data_analysis": {"iat": {"min":0,"avg":8459.5,"max":37402,"stddev":13521.3,"var":182824576.0,"ent":3.3,"data": [37366,37402,117,28146,1663,29721,111,122,119,118,27804,404,4631,32553,112,121,47,128,0,26100,3386,29397,42,119,612,539,200,202,480,1,480]},"pktlen": {"min":52,"avg":368.8,"max":1492,"stddev":501.9,"var":251883.6,"ent":3.9,"data": [64,60,52,569,52,1492,52,1129,52,116,1483,52,52,91,52,93,52,76,52,591,52,1098,52,258,52,1098,52,1098,52,1492,213,52]},"bins": {"c_to_s": [12,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0],"s_to_c": [6,2,0,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,1,0,0,0,0,0,0,0,0,0,0,0,2,0,0]},"directions": [0,1,0,0,1,1,0,1,0,0,0,1,1,1,0,1,0,1,0,0,1,1,0,1,0,1,0,1,0,1,1,0],"entropies": [4.178360939,5.179368496,4.697768211,4.427728176,5.063529015,7.851000309,4.813152790,7.845917702,4.813152790,5.983621120,7.867543221,5.101990700,5.063529491,5.947135925,4.813152790,6.003946304,4.813152790,5.601069927,4.813152790,7.593391895,5.101990700,7.833882809,4.813152790,7.234455585,4.813152790,7.825290203,4.813152790,7.825061321,4.813152790,7.862779140,6.971473694,4.813152790]},"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00561{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":635,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":31,"flow_packet_id":2,"flow_src_last_pkt_time":1694275753113486,"flow_dst_last_pkt_time":1694275753142675,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1694275753142675,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA8AABAADQGQEJNb\/dFwKgBHQG7yORhYSrT9dM5L6AS\/ojKRwAAAgQFrAQCCAqZAScsA94uygEDAwc="}
00548{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":636,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":31,"flow_packet_id":3,"flow_src_last_pkt_time":1694275753142784,"flow_dst_last_pkt_time":1694275753142675,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275753142784,"pkt":"EBMx8Tl2nFg8p+7MCABFAAA0AABAAEAGAADAqAEdTW\/3RcjkAbv10zkvYWEq1IAQCBYGoQAAAQEICgPeLueZAScs"}
01245{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":637,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":31,"flow_packet_id":4,"flow_src_last_pkt_time":1694275753142784,"flow_dst_last_pkt_time":1694275753142675,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"thread_ts_usec":1694275753142784,"pkt":"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"}
01189{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":637,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":31,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1694275753113486,"flow_src_last_pkt_time":1694275753142784,"flow_dst_last_pkt_time":1694275753142675,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275753142784,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51428,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.2","ja3":"6788ea2a94927e5619dd027181568c48","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
02164{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":638,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":2,"flow_state":"finished","flow_src_packets_processed":16,"flow_dst_packets_processed":16,"flow_first_seen":1694275753007782,"flow_src_last_pkt_time":1694275753142905,"flow_dst_last_pkt_time":1694275753142461,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1415,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2621,"flow_dst_tot_l4_payload_len":9162,"midstream":0,"thread_ts_usec":1694275753142905,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51399,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"data_analysis": {"iat": {"min":0,"avg":8703.3,"max":45949,"stddev":13302.1,"var":176947024.0,"ent":3.4,"data": [28085,28201,384,27317,1599,28469,1125,1106,357,0,25792,1376,19099,44,45949,800,799,122,26622,2279,28787,165,155,47,119,188,122,139,2,151,402]},"pktlen": {"min":52,"avg":420.8,"max":1492,"stddev":536.5,"var":287782.9,"ent":3.9,"data": [64,60,52,569,52,1492,52,1127,52,116,1467,52,52,91,93,52,76,52,591,52,1098,52,1492,52,704,52,1492,52,1318,751,52,138]},"bins": {"c_to_s": [11,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0],"s_to_c": [6,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0,0,0,0,0,0,0,0,0,0,1,1,0,0,0,0,0,1,0,0,0,0,0,3,0,0]},"directions": [0,1,0,0,1,1,0,1,0,0,0,1,1,1,1,0,1,0,0,1,1,0,1,0,1,0,1,0,1,1,0,0],"entropies": [4.178360939,5.179368496,4.697768211,4.465671062,5.101990700,7.854944706,4.697768211,7.809875011,4.697768211,5.873664379,7.864662647,4.986606121,5.025067806,5.925158024,6.076579094,4.736229897,5.645633221,4.736229897,7.572972775,5.101990700,7.820736408,4.697768211,7.844255924,4.774691582,7.700018883,4.774691582,7.863183498,4.774691582,7.845855713,7.759230137,4.736229897,6.349943638]},"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
02161{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":648,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":3,"flow_state":"finished","flow_src_packets_processed":15,"flow_dst_packets_processed":17,"flow_first_seen":1694275753008024,"flow_src_last_pkt_time":1694275753144458,"flow_dst_last_pkt_time":1694275753144423,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1419,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2539,"flow_dst_tot_l4_payload_len":8881,"midstream":0,"thread_ts_usec":1694275753144458,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51400,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"data_analysis": {"iat": {"min":0,"avg":8801.1,"max":47938,"stddev":13711.5,"var":188006496.0,"ent":3.3,"data": [29228,29329,496,27532,1366,28331,220,238,238,0,26638,1246,20216,47938,148,128,210,130,125,27634,166,27681,1407,1417,201,1,197,181,1,4,186]},"pktlen": {"min":52,"avg":409.5,"max":1492,"stddev":521.5,"var":271995.4,"ent":4.0,"data": [64,60,52,569,52,1492,52,1128,52,116,1471,52,52,91,52,93,52,76,52,591,52,1098,52,1098,52,1492,704,52,1492,272,469,52]},"bins": {"c_to_s": [11,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0],"s_to_c": [6,2,0,0,0,0,1,0,0,0,0,0,0,1,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,2,1,0,0,0,0,0,0,0,0,0,0,0,3,0,0]},"directions": [0,1,0,0,1,1,0,1,0,0,0,1,1,1,0,1,0,1,0,0,1,1,0,1,0,1,1,0,1,1,1,0],"entropies": [4.096405983,5.212701797,4.644789696,4.448392391,4.948143959,7.855043888,4.659306526,7.778649330,4.659306526,5.925388336,7.864681721,4.986606121,4.986606121,5.916862488,4.721712589,5.903012753,4.721712589,5.593001842,4.721712589,7.630004406,4.972088814,7.828086376,4.661227226,7.798528194,4.736229897,7.867074966,7.685452938,4.736229897,7.846663475,7.118988514,7.517958641,4.736229897]},"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
02156{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":662,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":20,"flow_state":"finished","flow_src_packets_processed":16,"flow_dst_packets_processed":16,"flow_first_seen":1694275753010935,"flow_src_last_pkt_time":1694275753146122,"flow_dst_last_pkt_time":1694275753146003,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1433,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2553,"flow_dst_tot_l4_payload_len":7460,"midstream":0,"thread_ts_usec":1694275753146122,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51417,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"data_analysis": {"iat": {"min":1,"avg":8717.9,"max":38748,"stddev":14019.5,"var":196545520.0,"ent":3.3,"data": [38671,38748,126,30360,462,30642,89,118,233,1,27599,252,6053,33665,105,127,447,509,1,27532,2440,29902,175,1,181,283,257,543,552,56,125]},"pktlen": {"min":52,"avg":365.5,"max":1492,"stddev":491.4,"var":241507.3,"ent":3.9,"data": [64,60,52,569,52,1492,52,1128,52,116,1485,52,52,91,52,93,52,76,52,591,52,1098,52,1492,704,52,626,52,1098,52,134,52]},"bins": {"c_to_s": [12,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0],"s_to_c": [6,2,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,1,0,0,0,0,0,0,0,0,0,0,0,2,1,0,0,0,0,0,0,0,0,0,0,0,2,0,0]},"directions": [0,1,0,0,1,1,0,1,0,0,0,1,1,1,0,1,0,1,0,0,1,1,0,1,1,0,1,0,1,0,1,0],"entropies": [4.147110939,5.212701797,4.644789219,4.419518471,5.010550022,7.853214264,4.774691105,7.858500004,4.721712589,5.816802502,7.850301266,5.025067329,4.945418835,5.753163815,4.699688435,5.800758362,4.699688435,5.445039272,4.661226749,7.578277588,5.025067329,7.822142601,4.774691105,7.862545013,7.686777592,4.774691105,7.647759438,4.697767735,7.804819107,4.774691105,6.356986523,4.774691105]},"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00549{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":693,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":30,"flow_packet_id":5,"flow_src_last_pkt_time":1694275753123142,"flow_dst_last_pkt_time":1694275753150312,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275753150312,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA0MK9AADQGD5tNb\/dFwKgBHQG7yOPTLOlOcZnu7IAQAfrN4QAAAQEICpkBJzX\/JPlq"}
02159{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":703,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":17,"flow_state":"finished","flow_src_packets_processed":15,"flow_dst_packets_processed":17,"flow_first_seen":1694275753010578,"flow_src_last_pkt_time":1694275753151836,"flow_dst_last_pkt_time":1694275753151965,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1415,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2535,"flow_dst_tot_l4_payload_len":8275,"midstream":0,"thread_ts_usec":1694275753151965,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51414,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"data_analysis": {"iat": {"min":0,"avg":9117.6,"max":45816,"stddev":14297.3,"var":204412768.0,"ent":3.3,"data": [37162,37280,0,27012,1251,28169,142,144,236,0,24468,55,1310,20125,101,45816,3,283,299,125,27321,439,27637,64,125,1224,1180,265,244,162,3]},"pktlen": {"min":52,"avg":390.4,"max":1492,"stddev":502.9,"var":252956.0,"ent":3.9,"data": [64,60,52,569,52,1492,52,1127,52,116,1467,52,52,52,91,93,52,52,76,52,591,52,1098,52,478,52,1098,52,1098,52,1492,704]},"bins": {"c_to_s": [11,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0],"s_to_c": [7,2,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,3,1,0,0,0,0,0,0,0,0,0,0,0,2,0,0]},"directions": [0,1,0,0,1,1,0,1,0,0,0,1,1,1,1,1,0,0,1,0,0,1,1,0,1,0,1,0,1,0,1,1],"entropies": [4.127655983,5.133453369,4.644789219,4.442614079,5.010550022,7.867527962,4.721712589,7.795043945,4.721712589,5.873665333,7.874347687,5.025067329,5.063529015,4.972088814,5.857666969,5.888303280,4.736229897,4.736229897,5.530437469,4.774691582,7.632213593,5.063529015,7.815135002,4.813152790,7.516163349,4.774691582,7.824700832,4.774691582,7.838304520,4.813152790,7.871241570,7.673780441]},"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
01234{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":709,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":30,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":3,"flow_first_seen":1694275753095564,"flow_src_last_pkt_time":1694275753123142,"flow_dst_last_pkt_time":1694275753152492,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":1440,"midstream":0,"thread_ts_usec":1694275753152492,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51427,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.3","ja3":"6b5bd5ac6bb016b178ad970087122ccd","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
02160{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":735,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":4,"flow_state":"finished","flow_src_packets_processed":16,"flow_dst_packets_processed":16,"flow_first_seen":1694275753008266,"flow_src_last_pkt_time":1694275753154865,"flow_dst_last_pkt_time":1694275753154833,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1425,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2545,"flow_dst_tot_l4_payload_len":8486,"midstream":0,"thread_ts_usec":1694275753154865,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51401,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"data_analysis": {"iat": {"min":0,"avg":9457.0,"max":57833,"stddev":15109.6,"var":228298688.0,"ent":3.3,"data": [30059,30139,121,26458,1560,27891,273,238,151,119,26523,1202,30388,57833,85,122,81,120,0,27714,879,28536,122,121,521,511,442,436,259,1,261]},"pktlen": {"min":52,"avg":397.3,"max":1492,"stddev":525.3,"var":275956.2,"ent":3.9,"data": [64,60,52,569,52,1492,52,1128,52,116,1477,52,52,91,52,93,52,76,52,591,52,1098,52,1098,52,1492,52,704,52,1492,294,52]},"bins": {"c_to_s": [12,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0],"s_to_c": [6,2,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,2,1,0,0,0,0,0,0,0,0,0,0,0,3,0,0]},"directions": [0,1,0,0,1,1,0,1,0,0,0,1,1,1,0,1,0,1,0,0,1,1,0,1,0,1,0,1,0,1,1,0],"entropies": [4.178360939,5.279368877,4.774691582,4.459428787,5.101990700,7.858173370,4.813153267,7.814331532,4.813153267,5.795908928,7.870773792,5.101990700,5.101990700,5.819097996,4.736229897,5.874914646,4.736229897,5.671948910,4.736229897,7.660532475,5.140452385,7.835998535,4.721712589,7.805009365,4.721712589,7.869886875,4.760174274,7.682819366,4.721712589,7.854982853,7.199785709,4.721712589]},"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
02157{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":764,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":9,"flow_state":"finished","flow_src_packets_processed":15,"flow_dst_packets_processed":17,"flow_first_seen":1694275753009419,"flow_src_last_pkt_time":1694275753158311,"flow_dst_last_pkt_time":1694275753158853,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1423,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2629,"flow_dst_tot_l4_payload_len":5409,"midstream":0,"thread_ts_usec":1694275753158853,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51406,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"data_analysis": {"iat": {"min":1,"avg":9623.4,"max":32850,"stddev":13236.8,"var":175211552.0,"ent":3.5,"data": [32822,32850,120,27662,376,27946,271,248,235,1,26293,93,195,4698,40,31099,4,93,128,330,26028,1860,27534,192,2,191,460,26582,1656,27746,571]},"pktlen": {"min":52,"avg":303.8,"max":1492,"stddev":468.3,"var":219308.0,"ent":3.8,"data": [64,60,52,569,52,1492,52,1128,52,116,1475,52,52,52,91,93,52,52,76,52,591,52,1098,52,1492,58,52,138,52,253,52,148]},"bins": {"c_to_s": [10,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0],"s_to_c": [9,2,0,1,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,2,0,0]},"directions": [0,1,0,0,1,1,0,1,0,0,0,1,1,1,1,1,0,0,1,0,0,1,1,0,1,1,0,0,1,1,0,1],"entropies": [4.127655983,5.133453369,4.683250904,4.385419369,4.830034256,7.850477219,4.608248234,7.807518482,4.608248234,5.853418827,7.877923965,4.834680080,4.796218395,4.906957626,5.894884586,5.904536724,4.721712589,4.721712589,5.593001842,4.668734074,7.673239231,4.986606121,7.827546597,4.721712589,7.875779629,5.149026394,4.721712589,6.340921402,4.948144436,7.214760303,4.721712589,6.508280754]},"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
02161{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":780,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":16,"flow_state":"finished","flow_src_packets_processed":15,"flow_dst_packets_processed":17,"flow_first_seen":1694275753010458,"flow_src_last_pkt_time":1694275753160166,"flow_dst_last_pkt_time":1694275753160196,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1417,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2537,"flow_dst_tot_l4_payload_len":8486,"midstream":0,"thread_ts_usec":1694275753160196,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51413,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"data_analysis": {"iat": {"min":0,"avg":9659.5,"max":47892,"stddev":14864.2,"var":220945344.0,"ent":3.4,"data": [37443,37520,0,31039,230,31281,756,693,168,119,26825,1309,20041,47892,47,125,1434,1377,127,27044,1932,28829,219,1,220,947,1,949,415,408,55]},"pktlen": {"min":52,"avg":397.1,"max":1492,"stddev":521.5,"var":271947.3,"ent":3.9,"data": [64,60,52,569,52,1492,52,1128,52,116,1469,52,52,91,52,93,52,76,52,591,52,1098,52,1492,84,52,1492,488,52,1098,52,478]},"bins": {"c_to_s": [11,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0],"s_to_c": [6,3,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0,0,0,0,0,0,0,0,0,0,0,3,0,0]},"directions": [0,1,0,0,1,1,0,1,0,0,0,1,1,1,0,1,0,1,0,0,1,1,0,1,1,0,1,1,0,1,0,1],"entropies": [4.166565895,5.266787052,4.683250904,4.450848103,5.049012184,7.868894100,4.760174274,7.809042931,4.760174274,6.025981426,7.854910374,5.010550499,5.049012184,5.960818291,4.721712589,5.823785782,4.721712589,5.583068848,4.721712589,7.577066422,5.010550499,7.844899654,4.721712589,7.868763924,5.716469765,4.683250904,7.879194260,7.500804424,4.668734074,7.816272259,4.668734074,7.492917061]},"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
02167{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":784,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":26,"flow_state":"finished","flow_src_packets_processed":16,"flow_dst_packets_processed":16,"flow_first_seen":1694275753011411,"flow_src_last_pkt_time":1694275753160289,"flow_dst_last_pkt_time":1694275753159777,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1415,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2637,"flow_dst_tot_l4_payload_len":7805,"midstream":0,"thread_ts_usec":1694275753160289,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51423,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"data_analysis": {"iat": {"min":1,"avg":9588.5,"max":42500,"stddev":14819.9,"var":219628112.0,"ent":3.4,"data": [42463,42500,119,29463,602,29958,1392,1439,247,122,27883,1112,12444,41014,45,92,125,125,28056,1293,29226,41,114,120,122,207,1,146,3152,3211,410]},"pktlen": {"min":52,"avg":378.9,"max":1492,"stddev":495.6,"var":245645.3,"ent":3.9,"data": [64,60,52,569,52,1492,52,1128,52,116,1467,52,52,91,52,93,76,52,591,52,1098,52,498,52,1098,52,1492,280,52,1031,52,154]},"bins": {"c_to_s": [11,0,1,1,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0],"s_to_c": [6,2,0,0,0,0,0,1,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,2,1,0,0,0,0,0,0,0,0,0,0,0,2,0,0]},"directions": [0,1,0,0,1,1,0,1,0,0,0,1,1,1,0,1,1,0,0,1,1,0,1,0,1,0,1,1,0,1,0,0],"entropies": [4.209610939,5.246035099,4.721712589,4.433995724,4.986605644,7.852614403,4.774691582,7.817167759,4.813152790,5.929040432,7.881704807,5.063529015,5.101990700,5.894884586,4.813152790,5.896419048,5.617452621,4.813152790,7.620222092,5.063529015,7.845986366,4.683250904,7.566019058,4.774691582,7.827028751,4.644789696,7.851744652,7.184281826,4.774691582,7.812285900,4.813152790,6.413293362]},"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
02164{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":801,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":7,"flow_state":"finished","flow_src_packets_processed":16,"flow_dst_packets_processed":16,"flow_first_seen":1694275753008879,"flow_src_last_pkt_time":1694275753162369,"flow_dst_last_pkt_time":1694275753162335,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1419,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2625,"flow_dst_tot_l4_payload_len":5446,"midstream":0,"thread_ts_usec":1694275753162369,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51404,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"data_analysis": {"iat": {"min":61,"avg":9901.5,"max":35392,"stddev":13373.8,"var":178858320.0,"ent":3.6,"data": [31870,31918,121,27308,360,27608,216,135,344,119,27071,91,8695,35392,71,129,454,392,117,26214,2368,73,28538,61,120,366,26467,1676,27723,461,468]},"pktlen": {"min":52,"avg":304.8,"max":1492,"stddev":439.8,"var":193461.1,"ent":3.9,"data": [64,60,52,569,52,1492,52,1127,52,116,1471,52,52,91,52,93,52,76,52,591,52,1098,1098,52,475,52,138,52,256,52,160,52]},"bins": {"c_to_s": [11,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0],"s_to_c": [7,2,0,1,0,0,1,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0,0,0,0,0,0,0,0,0,0,0,1,0,0]},"directions": [0,1,0,0,1,1,0,1,0,0,0,1,1,1,0,1,0,1,0,0,1,1,1,0,1,0,0,1,1,0,1,0],"entropies": [4.178360939,5.179368496,4.697768211,4.427928448,4.986605644,7.845541954,4.774691105,7.849080086,4.774691105,6.028837204,7.873513699,4.950065136,5.063529015,5.925158024,4.774691582,5.873390675,4.736229897,5.523987770,4.697768211,7.661135674,4.948144436,7.806570530,7.811303139,4.813152790,7.582667351,4.813152790,6.279094696,5.063529015,7.051534653,4.774691105,6.624751091,4.684499741]},"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
02163{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":831,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":25,"flow_state":"finished","flow_src_packets_processed":15,"flow_dst_packets_processed":17,"flow_first_seen":1694275753011292,"flow_src_last_pkt_time":1694275753166316,"flow_dst_last_pkt_time":1694275753166678,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1421,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2541,"flow_dst_tot_l4_payload_len":9163,"midstream":0,"thread_ts_usec":1694275753166678,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51422,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"data_analysis": {"iat": {"min":2,"avg":10013.2,"max":48988,"stddev":15986.5,"var":255567600.0,"ent":3.3,"data": [44061,44102,239,30018,264,30040,207,250,123,121,30414,88,18728,75,48988,80,122,121,27969,1800,29639,117,121,365,353,460,455,344,2,350,394]},"pktlen": {"min":52,"avg":418.4,"max":1492,"stddev":525.0,"var":275583.3,"ent":4.0,"data": [64,60,52,569,52,1492,52,1128,52,116,1473,52,52,91,93,52,76,52,591,52,1098,52,1098,52,1492,52,704,52,1492,272,52,751]},"bins": {"c_to_s": [11,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0],"s_to_c": [6,2,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0,0,0,0,0,0,0,0,0,0,2,1,0,0,0,0,0,0,0,0,0,0,0,3,0,0]},"directions": [0,1,0,0,1,1,0,1,0,0,0,1,1,1,1,0,1,0,0,1,1,0,1,0,1,0,1,0,1,1,0,1],"entropies": [4.178360939,5.246035099,4.697768211,4.444307327,4.986605644,7.858404160,4.683250904,7.859000683,4.683251381,5.785824299,7.825480938,5.010550499,4.972088814,5.791733265,5.917924881,4.668733597,5.504121304,4.668733597,7.698892593,4.972088337,7.790446758,4.774691105,7.834311962,4.736229420,7.876884937,4.736229420,7.700201511,4.774691105,7.851491928,7.204756260,4.774691105,7.708614826]},"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
02164{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":838,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":23,"flow_state":"finished","flow_src_packets_processed":16,"flow_dst_packets_processed":16,"flow_first_seen":1694275753011171,"flow_src_last_pkt_time":1694275753167066,"flow_dst_last_pkt_time":1694275753166584,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1429,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2635,"flow_dst_tot_l4_payload_len":8408,"midstream":0,"thread_ts_usec":1694275753167066,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51420,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"data_analysis": {"iat": {"min":2,"avg":10042.2,"max":50801,"stddev":15725.4,"var":247287696.0,"ent":3.3,"data": [41016,41057,121,31033,504,31399,60,120,121,121,29284,90,21659,50801,97,54,122,123,27483,995,28323,1260,2,1294,176,145,1654,1649,46,119,380]},"pktlen": {"min":52,"avg":397.7,"max":1492,"stddev":512.5,"var":262691.9,"ent":3.9,"data": [64,60,52,569,52,1492,52,1127,52,116,1481,52,52,91,52,93,76,52,591,52,1098,52,1492,704,52,1308,52,1098,52,401,52,138]},"bins": {"c_to_s": [11,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0],"s_to_c": [6,2,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,2,1,0,0,0,0,0,1,0,0,0,0,0,2,0,0]},"directions": [0,1,0,0,1,1,0,1,0,0,0,1,1,1,0,1,1,0,0,1,1,0,1,1,0,1,0,1,0,1,0,0],"entropies": [4.178360939,5.246035099,4.697768211,4.439740181,5.025067806,7.849346638,4.813152790,7.832521439,4.813152790,6.046078682,7.858734608,5.063529015,4.972088814,5.947135448,4.774691105,5.959411621,5.609384537,4.774691582,7.659573078,5.063529015,7.800069332,4.813152790,7.867509365,7.726592064,4.813152790,7.833529949,4.813152790,7.841988087,4.774691105,7.470952988,4.774691105,6.384398460]},"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
02166{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":854,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":6,"flow_state":"finished","flow_src_packets_processed":16,"flow_dst_packets_processed":16,"flow_first_seen":1694275753008755,"flow_src_last_pkt_time":1694275753168577,"flow_dst_last_pkt_time":1694275753168228,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1425,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2693,"flow_dst_tot_l4_payload_len":6724,"midstream":0,"thread_ts_usec":1694275753168577,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51403,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"data_analysis": {"iat": {"min":45,"avg":10299.8,"max":54249,"stddev":15529.8,"var":241174704.0,"ent":3.4,"data": [30732,30788,121,27186,1010,28059,320,308,250,119,26416,1146,47,27001,54249,45,82,125,126,27432,16741,44044,620,622,141,245,218,124,336,322,320]},"pktlen": {"min":52,"avg":346.9,"max":1492,"stddev":471.5,"var":222289.8,"ent":3.9,"data": [64,60,52,569,52,1492,52,1127,52,116,1477,52,52,52,91,52,93,76,52,591,52,1098,52,1098,52,922,52,1098,52,149,52,200]},"bins": {"c_to_s": [11,0,1,0,1,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0],"s_to_c": [7,2,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,3,1,0,0,0,0,0,0,0,0,0,0,0,1,0,0]},"directions": [0,1,0,0,1,1,0,1,0,0,0,1,1,1,1,0,1,1,0,0,1,1,0,1,0,1,0,1,0,1,0,0],"entropies": [4.209610939,5.212701797,4.697768211,4.393926620,4.911602974,7.839852333,4.774691105,7.844349861,4.774691105,5.884398460,7.869220257,5.025067329,4.972088814,4.950064659,5.741038799,4.736229420,5.917925358,5.466558933,4.774691105,7.588748932,4.986605644,7.821203709,4.721712589,7.844308853,4.721712589,7.750556469,4.683250904,7.837769032,4.774691582,6.556000710,4.774691105,6.785351276]},"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
02162{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":855,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":14,"flow_state":"finished","flow_src_packets_processed":16,"flow_dst_packets_processed":16,"flow_first_seen":1694275753010306,"flow_src_last_pkt_time":1694275753140859,"flow_dst_last_pkt_time":1694275753169011,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1431,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2647,"flow_dst_tot_l4_payload_len":8540,"midstream":0,"thread_ts_usec":1694275753169011,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51411,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"data_analysis": {"iat": {"min":0,"avg":9330.9,"max":35953,"stddev":13596.4,"var":184862544.0,"ent":3.5,"data": [35471,35507,119,26076,1579,27544,91,119,131,118,25702,1279,9274,35953,78,119,62,122,0,26721,2955,29610,279,257,260,7,269,85,120,565,28786]},"pktlen": {"min":52,"avg":402.2,"max":1492,"stddev":504.9,"var":254904.0,"ent":4.0,"data": [64,60,52,569,52,1492,52,1128,52,116,1483,52,52,91,52,93,52,76,52,591,52,1098,52,1098,52,1492,704,52,790,52,148,1050]},"bins": {"c_to_s": [11,0,1,1,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0],"s_to_c": [6,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,1,0,0,0,0,0,0,0,1,2,1,0,0,0,0,0,0,0,0,0,0,0,2,0,0]},"directions": [0,1,0,0,1,1,0,1,0,0,0,1,1,1,0,1,0,1,0,0,1,1,0,1,0,1,1,0,1,0,0,1],"entropies": [4.209610939,5.279368877,4.736229897,4.435394764,5.025067806,7.849986076,4.774691582,7.816172600,4.774691582,5.942630291,7.852092266,5.101990700,5.101990700,5.837246418,4.774691582,5.982440948,4.774691582,5.576618671,4.736229897,7.621116638,5.010550499,7.824245453,4.774691582,7.795956612,4.774691582,7.864316463,7.690004826,4.774691582,7.748708725,4.736229897,6.344797611,7.815868378]},"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00548{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":869,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":31,"flow_packet_id":5,"flow_src_last_pkt_time":1694275753142784,"flow_dst_last_pkt_time":1694275753171094,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275753171094,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA0vxVAADQGgTRNb\/dFwKgBHQG7yORhYSrU9dM7NIAQAfrzWwAAAQEICpkBJ0kD3i7n"}
01234{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":870,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":31,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":3,"flow_first_seen":1694275753113486,"flow_src_last_pkt_time":1694275753142784,"flow_dst_last_pkt_time":1694275753171568,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":1440,"midstream":0,"thread_ts_usec":1694275753171568,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51428,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.3","ja3":"6788ea2a94927e5619dd027181568c48","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
02168{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":883,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":19,"flow_state":"finished","flow_src_packets_processed":14,"flow_dst_packets_processed":18,"flow_first_seen":1694275753010817,"flow_src_last_pkt_time":1694275753177076,"flow_dst_last_pkt_time":1694275753177040,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1425,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2705,"flow_dst_tot_l4_payload_len":8575,"midstream":0,"thread_ts_usec":1694275753177076,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51416,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"data_analysis": {"iat": {"min":1,"avg":10725.2,"max":40210,"stddev":14136.1,"var":199829872.0,"ent":3.7,"data": [40155,40210,118,29546,1484,32,30956,130,118,29821,29534,73,5139,1,43,5341,249,21300,7591,1187,29771,1326,1,1305,322,1,339,513,26647,1554,27675]},"pktlen": {"min":52,"avg":405.9,"max":1492,"stddev":519.4,"var":269778.8,"ent":4.0,"data": [64,60,52,569,52,1492,1128,52,116,1477,64,116,52,91,93,76,52,591,64,52,1098,52,1492,704,52,1492,437,52,148,52,1044,52]},"bins": {"c_to_s": [8,0,2,1,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0],"s_to_c": [8,2,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,1,0,0,0,0,0,0,0,0,0,0,0,3,0,0]},"directions": [0,1,0,0,1,1,1,0,0,0,1,0,1,1,1,1,0,0,1,1,1,0,1,1,0,1,1,0,0,1,1,0],"entropies": [4.178360939,5.246035576,4.736229897,4.451525211,5.025067806,7.851028919,7.841320515,4.683251381,5.845689774,7.851963997,5.095714092,5.862931252,5.063529491,5.828950882,5.853408813,5.564821243,4.774691582,7.624622345,5.013759136,5.025067806,7.806596279,4.736229897,7.888963223,7.655417442,4.736229897,7.887620449,7.459178448,4.736229897,6.419945717,4.948144436,7.802871704,4.697768211]},"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
02165{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":902,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":22,"flow_state":"finished","flow_src_packets_processed":15,"flow_dst_packets_processed":17,"flow_first_seen":1694275753011053,"flow_src_last_pkt_time":1694275753181968,"flow_dst_last_pkt_time":1694275753181931,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1423,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2629,"flow_dst_tot_l4_payload_len":6694,"midstream":0,"thread_ts_usec":1694275753181968,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51419,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"data_analysis": {"iat": {"min":0,"avg":11025.6,"max":42176,"stddev":14970.6,"var":224118160.0,"ent":3.6,"data": [40200,40333,0,29265,250,29416,955,942,236,0,27565,267,14559,42176,48,64,120,122,27961,1022,28875,175,1,143,1506,56,1572,296,25767,1217,26684]},"pktlen": {"min":52,"avg":344.0,"max":1492,"stddev":469.5,"var":220464.4,"ent":3.9,"data": [64,60,52,569,52,1492,52,1128,52,116,1475,52,52,91,52,93,76,52,591,52,1098,52,1304,258,52,1098,408,52,138,52,220,52]},"bins": {"c_to_s": [10,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0],"s_to_c": [7,2,0,0,0,1,1,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0,0,0,0,0,1,0,0,0,0,0,1,0,0]},"directions": [0,1,0,0,1,1,0,1,0,0,0,1,1,1,0,1,1,0,0,1,1,0,1,1,0,1,1,0,0,1,1,0],"entropies": [4.178360939,5.212701797,4.736229897,4.457423210,5.101990700,7.859472275,4.813152790,7.821522236,4.774691105,5.908147335,7.865066528,5.101990700,5.063529015,5.960818291,4.760174274,5.969052792,5.655566216,4.760174274,7.669263363,5.025067806,7.837982178,4.736229897,7.822892189,7.107737064,4.697768211,7.815825462,7.463544846,4.774691105,6.328453064,5.063529015,6.893532276,4.760174274]},"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
02164{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":910,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":5,"flow_state":"finished","flow_src_packets_processed":16,"flow_dst_packets_processed":16,"flow_first_seen":1694275753008511,"flow_src_last_pkt_time":1694275753183247,"flow_dst_last_pkt_time":1694275753183183,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1417,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2623,"flow_dst_tot_l4_payload_len":6562,"midstream":0,"thread_ts_usec":1694275753183247,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51402,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"data_analysis": {"iat": {"min":0,"avg":11271.2,"max":37291,"stddev":15316.9,"var":234607568.0,"ent":3.6,"data": [35067,35101,121,31243,2598,33715,62,123,121,122,30764,1478,5295,37291,91,17,119,0,31795,2206,33934,52,121,454,401,354,339,394,31850,1346,32834]},"pktlen": {"min":52,"avg":339.7,"max":1492,"stddev":452.7,"var":204941.1,"ent":3.9,"data": [64,60,52,569,52,1492,52,1129,52,116,1469,52,52,91,52,93,76,52,591,52,1098,52,478,52,1098,52,831,52,138,52,696,52]},"bins": {"c_to_s": [11,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0],"s_to_c": [7,2,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,1,0,0,0,1,0,0,0,0,0,0,0,2,1,0,0,0,0,0,0,0,0,0,0,0,1,0,0]},"directions": [0,1,0,0,1,1,0,1,0,0,0,1,1,1,0,1,1,0,0,1,1,0,1,0,1,0,1,0,0,1,1,0],"entropies": [4.209610939,5.179368496,4.721712589,4.376677036,4.986605644,7.859937668,4.721712589,7.809227943,4.721712589,5.884397507,7.882050514,5.025067329,5.025067329,5.969113827,4.760174274,5.896419525,5.601069927,4.760174274,7.617297173,5.063529015,7.812593937,4.721712589,7.472612858,4.760174274,7.815999031,4.760174274,7.750735760,4.760174274,6.306466579,5.063529015,7.681465626,4.760174274]},"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
02165{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":926,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":12,"flow_state":"finished","flow_src_packets_processed":15,"flow_dst_packets_processed":17,"flow_first_seen":1694275753009947,"flow_src_last_pkt_time":1694275753190642,"flow_dst_last_pkt_time":1694275753190604,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1417,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2652,"flow_dst_tot_l4_payload_len":7050,"midstream":0,"thread_ts_usec":1694275753190642,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51409,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"data_analysis": {"iat": {"min":0,"avg":11656.5,"max":42830,"stddev":15509.2,"var":240534432.0,"ent":3.6,"data": [37641,37669,122,30932,30809,365,359,234,0,1081,28219,125,13538,90,42830,82,126,127,30589,8705,39120,209,1,217,210,2,212,369,27476,1392,28501]},"pktlen": {"min":52,"avg":355.8,"max":1492,"stddev":507.1,"var":257111.1,"ent":3.8,"data": [64,60,52,569,1492,52,1129,52,116,1469,52,52,52,91,93,52,76,52,591,52,1098,52,1492,104,52,1492,191,52,167,52,364,52]},"bins": {"c_to_s": [10,0,1,1,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0],"s_to_c": [7,3,0,0,1,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,3,0,0]},"directions": [0,1,0,0,1,0,1,0,0,0,1,1,1,1,1,0,1,0,0,1,1,0,1,1,0,1,1,0,0,1,1,0],"entropies": [4.178360939,5.212701797,4.659306526,4.447139740,7.836527824,4.736229420,7.767614841,4.736229420,5.894271851,7.877666473,5.025067329,5.025067329,5.063529015,5.769754887,5.939430714,4.736229420,5.566686153,4.697768211,7.623016357,5.025067329,7.805258274,4.697768211,7.847285748,6.048765182,4.736229420,7.855422497,6.871173859,4.736229420,6.530988693,5.063529015,7.389711380,4.697768211]},"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
02157{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":930,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":10,"flow_state":"finished","flow_src_packets_processed":16,"flow_dst_packets_processed":16,"flow_first_seen":1694275753009538,"flow_src_last_pkt_time":1694275753193215,"flow_dst_last_pkt_time":1694275753193132,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1415,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2621,"flow_dst_tot_l4_payload_len":5447,"midstream":0,"thread_ts_usec":1694275753193215,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51407,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"data_analysis": {"iat": {"min":0,"avg":11847.5,"max":41728,"stddev":16572.4,"var":274645792.0,"ent":3.5,"data": [41598,41728,0,34707,399,35026,175,154,163,121,34762,0,3302,37788,86,63,118,122,1,32235,2268,34416,220,2,211,493,31249,2458,33213,70,123]},"pktlen": {"min":52,"avg":304.8,"max":1492,"stddev":467.2,"var":218265.1,"ent":3.8,"data": [64,60,52,569,52,1492,52,1128,52,116,1467,52,52,91,52,93,76,52,52,591,52,1098,52,1492,81,52,138,52,256,52,160,52]},"bins": {"c_to_s": [11,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0],"s_to_c": [8,2,0,1,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,2,0,0]},"directions": [0,1,0,0,1,1,0,1,0,0,0,1,1,1,0,1,1,0,0,0,1,1,0,1,1,0,0,1,1,0,1,0],"entropies": [4.147110939,5.179368019,4.607576370,4.429833412,4.935547352,7.821596622,4.644789219,7.819688320,4.697767735,5.881542683,7.877672672,4.933627129,4.933627129,5.719061375,4.659306526,5.757747173,5.619317532,4.659306526,4.659306526,7.664516449,4.842186451,7.786534309,4.697768211,7.867120743,5.724120617,4.697768211,6.207040787,4.972088814,7.139867306,4.697768211,6.557415485,4.697768211]},"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
02161{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":964,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":28,"flow_state":"finished","flow_src_packets_processed":16,"flow_dst_packets_processed":16,"flow_first_seen":1694275753060213,"flow_src_last_pkt_time":1694275753198352,"flow_dst_last_pkt_time":1694275753197430,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1419,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2745,"flow_dst_tot_l4_payload_len":9164,"midstream":0,"thread_ts_usec":1694275753198352,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51425,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"data_analysis": {"iat": {"min":0,"avg":8882.5,"max":50345,"stddev":14003.5,"var":196096992.0,"ent":3.3,"data": [27157,27206,123,29037,427,29330,231,232,241,0,27359,222,22931,1,97,50345,121,124,27189,1143,28117,156,2,162,1144,1136,71,50,124,747,131]},"pktlen": {"min":52,"avg":424.8,"max":1492,"stddev":534.6,"var":285801.5,"ent":4.0,"data": [64,60,52,569,52,1492,52,1129,52,116,1471,52,52,91,93,76,52,52,591,52,1098,52,1492,704,52,1492,52,1318,751,52,138,172]},"bins": {"c_to_s": [10,0,2,1,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0],"s_to_c": [6,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0,0,0,0,0,0,0,0,0,0,1,1,0,0,0,0,0,1,0,0,0,0,0,3,0,0]},"directions": [0,1,0,0,1,1,0,1,0,0,0,1,1,1,1,1,0,0,0,1,1,0,1,1,0,1,0,1,1,0,0,0],"entropies": [4.209610939,5.212701797,4.697768211,4.430381775,4.972088814,7.831830978,4.774691582,7.834631920,4.736229897,6.007369518,7.874694824,4.972088814,4.972089291,5.916862488,5.917925358,5.581203938,4.630272388,4.683250904,7.641548634,5.010550499,7.824396610,4.697768211,7.855073452,7.695503235,4.736229897,7.858574867,4.722961426,7.844436646,7.722222328,4.813152790,6.238277912,6.529501915]},"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00780{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":995,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":32,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1694275753219923,"flow_src_last_pkt_time":1694275753219923,"flow_dst_last_pkt_time":1694275753219923,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275753219923,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51429,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00566{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":995,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":32,"flow_packet_id":1,"flow_src_last_pkt_time":1694275753219923,"flow_dst_last_pkt_time":1694275753219923,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"thread_ts_usec":1694275753219923,"pkt":"EBMx8Tl2nFg8p+7MCABFAABAAABAAEAGAADAqAEdTW\/3RcjlAbva25hvAAAAALAC\/\/8GrQAAAgQFtAEDAwYBAQgKfinbRgAAAAAEAgAA"}
02166{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":1001,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":24,"flow_state":"finished","flow_src_packets_processed":15,"flow_dst_packets_processed":17,"flow_first_seen":1694275753011291,"flow_src_last_pkt_time":1694275753180675,"flow_dst_last_pkt_time":1694275753221816,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1435,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2767,"flow_dst_tot_l4_payload_len":6420,"midstream":0,"thread_ts_usec":1694275753221816,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51421,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"data_analysis": {"iat": {"min":0,"avg":12255.1,"max":44216,"stddev":15125.0,"var":228764112.0,"ent":3.7,"data": [40299,40343,124,30186,431,30472,64,119,121,0,28424,28256,43,24580,44,24672,139,123,118,1066,25809,17441,44216,241,1,244,69,124,452,25369,16319]},"pktlen": {"min":52,"avg":340.5,"max":1492,"stddev":468.2,"var":219238.8,"ent":3.9,"data": [64,60,52,569,52,1492,52,1129,52,116,1487,64,116,52,91,93,52,76,52,591,64,52,1098,52,1492,528,52,627,52,200,52,314]},"bins": {"c_to_s": [9,0,2,0,1,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0],"s_to_c": [8,2,0,0,0,0,0,0,1,0,0,0,0,0,1,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,2,0,0]},"directions": [0,1,0,0,1,1,0,1,0,0,0,1,0,1,1,1,0,1,0,0,1,1,1,0,1,1,0,1,0,0,1,1],"entropies": [4.209610939,5.212701797,4.774691582,4.489540100,5.063529015,7.845232010,4.774691105,7.804675102,4.736229897,5.959010601,7.859256268,5.003524780,5.924528122,5.063529015,5.834337711,5.851885319,4.697768211,5.540369987,4.697768211,7.556878090,5.064464092,5.063529491,7.803599358,4.813152790,7.886528015,7.601737499,4.813152790,7.681864262,4.774691105,6.865619183,5.140452385,7.274557590]},"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
02162{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":1015,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":29,"flow_state":"finished","flow_src_packets_processed":17,"flow_dst_packets_processed":15,"flow_first_seen":1694275753075692,"flow_src_last_pkt_time":1694275753225736,"flow_dst_last_pkt_time":1694275753225564,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1405,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":4223,"flow_dst_tot_l4_payload_len":3280,"midstream":0,"thread_ts_usec":1694275753225736,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51426,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"data_analysis": {"iat": {"min":0,"avg":9674.7,"max":39115,"stddev":12958.0,"var":167909664.0,"ent":3.6,"data": [27291,27445,242,27062,915,27635,268,269,243,1,25746,2753,10885,39115,124,1,128,123,26644,50,26584,1506,127,0,26847,154,147,25515,985,987,124]},"pktlen": {"min":52,"avg":287.1,"max":1492,"stddev":439.4,"var":193071.9,"ent":3.8,"data": [64,60,52,569,52,1492,52,1127,52,116,1457,52,52,91,52,93,76,52,638,52,322,52,138,172,1444,52,52,329,52,166,52,105]},"bins": {"c_to_s": [9,1,2,1,0,0,0,0,0,0,0,0,0,0,0,0,1,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0],"s_to_c": [8,2,0,1,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,1,0,0]},"directions": [0,1,0,0,1,1,0,1,0,0,0,1,1,1,0,1,1,0,0,1,1,0,0,0,0,1,1,1,0,1,0,0],"entropies": [4.178360939,5.179368496,4.736229897,4.451442719,5.101990700,7.855612755,4.774691582,7.821052074,4.774691582,5.928754330,7.865749836,5.049012184,4.986606121,5.872906685,4.736229420,5.939430237,5.629250526,4.774691105,7.645300865,5.022342205,7.275319099,4.646709919,6.334646702,6.685357571,7.844326973,5.025067329,4.909682274,7.333026409,4.697768211,6.563022614,4.736229897,5.884029388]},"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
02159{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":1021,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":30,"flow_state":"finished","flow_src_packets_processed":14,"flow_dst_packets_processed":18,"flow_first_seen":1694275753095564,"flow_src_last_pkt_time":1694275753215265,"flow_dst_last_pkt_time":1694275753244261,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1407,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":3200,"flow_dst_tot_l4_payload_len":6066,"midstream":0,"thread_ts_usec":1694275753244261,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51427,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"data_analysis": {"iat": {"min":1,"avg":8658.0,"max":32709,"stddev":12376.3,"var":153173968.0,"ent":3.5,"data": [27405,27455,123,27343,2180,29389,115,120,240,126,26858,95,500,5575,91,32709,16,126,1,26132,265,26337,1265,2,41,1309,1639,127,27052,2,3760]},"pktlen": {"min":52,"avg":342.2,"max":1492,"stddev":472.2,"var":222950.1,"ent":3.9,"data": [64,60,52,569,52,1492,52,1127,52,116,1459,52,52,52,91,93,52,76,52,591,52,1098,52,1492,84,759,52,154,623,52,52,274]},"bins": {"c_to_s": [8,0,1,1,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0],"s_to_c": [9,3,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,2,0,0]},"directions": [0,1,0,0,1,1,0,1,0,0,0,1,1,1,1,1,0,1,0,0,1,1,0,1,1,1,0,0,0,1,1,1],"entropies": [4.166565418,5.212701321,4.736229897,4.447693825,5.063529015,7.850970268,4.644789219,7.831824303,4.774691105,5.828448296,7.865114689,5.025067329,5.025067329,5.063529015,5.947135925,5.904537201,4.736229420,5.645633221,4.736229420,7.688971996,5.025067329,7.810829163,4.736229420,7.880811214,5.807558537,7.653332710,4.646038055,6.559681416,7.595835686,4.950064659,4.950064659,7.108043671]},"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
02157{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":1055,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":31,"flow_state":"finished","flow_src_packets_processed":14,"flow_dst_packets_processed":18,"flow_first_seen":1694275753113486,"flow_src_last_pkt_time":1694275753247747,"flow_dst_last_pkt_time":1694275753248774,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1413,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2533,"flow_dst_tot_l4_payload_len":8800,"midstream":0,"thread_ts_usec":1694275753248774,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51428,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"data_analysis": {"iat": {"min":0,"avg":8695.1,"max":46206,"stddev":13620.0,"var":185505120.0,"ent":3.3,"data": [29189,29298,0,28419,474,28809,47,121,261,1,26368,45,20060,46206,97,42,126,127,26036,2857,28740,228,125,317,128,167,2,127,1084,47,1]},"pktlen": {"min":52,"avg":406.8,"max":1492,"stddev":492.9,"var":242924.9,"ent":4.0,"data": [64,60,52,569,52,1492,52,1128,52,116,1465,52,52,91,52,93,76,52,591,52,1098,52,478,1098,52,52,1492,488,52,1098,478,366]},"bins": {"c_to_s": [10,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0],"s_to_c": [6,2,0,0,0,0,0,0,0,1,0,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,1,0,0,0,0,0,0,0,0,0,0,0,2,0,0]},"directions": [0,1,0,0,1,1,0,1,0,0,0,1,1,1,0,1,1,0,0,1,1,0,1,1,0,0,1,1,0,1,1,1],"entropies": [4.135315895,5.133453369,4.736229897,4.413607597,4.948144436,7.837077618,4.736229420,7.809660912,4.644789219,5.945995808,7.872262478,4.972088337,4.895165443,5.776699543,4.683250904,5.823787212,5.514054298,4.683250904,7.623888969,4.948144436,7.840501308,4.774691105,7.500792027,7.821016312,4.774691105,4.774691105,7.866648197,7.538662910,4.774691105,7.828972340,7.548777103,7.435549259]},"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00562{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1066,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":32,"flow_packet_id":2,"flow_src_last_pkt_time":1694275753219923,"flow_dst_last_pkt_time":1694275753251061,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1694275753251061,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA8AABAADQGQEJNb\/dFwKgBHQG7yOVIKF9r2tuYcKAS\/ohDbAAAAgQFrAQCCAqZASeWfinbRgEDAwc="}
00549{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1067,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":32,"flow_packet_id":3,"flow_src_last_pkt_time":1694275753251177,"flow_dst_last_pkt_time":1694275753251061,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275753251177,"pkt":"EBMx8Tl2nFg8p+7MCABFAAA0AABAAEAGAADAqAEdTW\/3RcjlAbva25hwSChfbIAQCBYGoQAAAQEICn4p22WZASeW"}
01248{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1069,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":32,"flow_packet_id":4,"flow_src_last_pkt_time":1694275753251434,"flow_dst_last_pkt_time":1694275753251061,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"thread_ts_usec":1694275753251434,"pkt":"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"}
01292{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":1069,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":32,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1694275753219923,"flow_src_last_pkt_time":1694275753251434,"flow_dst_last_pkt_time":1694275753251061,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275753251434,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51429,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15": {"risk":"TLS (probably) Not Carrying HTTPS","severity":"Low","risk_score": {"total":460,"client":410,"server":50}}},"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.2","ja3":"b02753cad3bdb6463fc2bc97e8cc794c","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00549{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1136,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":32,"flow_packet_id":5,"flow_src_last_pkt_time":1694275753251434,"flow_dst_last_pkt_time":1694275753282014,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275753282014,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA0LwRAADQGEUZNb\/dFwKgBHQG7yOVIKF9s2tuadYAQAfpsfAAAAQEICpkBJ7V+Kdtl"}
01337{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":1138,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":32,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":3,"flow_first_seen":1694275753219923,"flow_src_last_pkt_time":1694275753251434,"flow_dst_last_pkt_time":1694275753283400,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":1440,"midstream":0,"thread_ts_usec":1694275753283400,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51429,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15": {"risk":"TLS (probably) Not Carrying HTTPS","severity":"Low","risk_score": {"total":460,"client":410,"server":50}}},"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.3","ja3":"b02753cad3bdb6463fc2bc97e8cc794c","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00781{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1142,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":33,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1694275753284172,"flow_src_last_pkt_time":1694275753284172,"flow_dst_last_pkt_time":1694275753284172,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275753284172,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51430,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00567{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1142,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":33,"flow_packet_id":1,"flow_src_last_pkt_time":1694275753284172,"flow_dst_last_pkt_time":1694275753284172,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"thread_ts_usec":1694275753284172,"pkt":"EBMx8Tl2nFg8p+7MCABFAABAAABAAEAGAADAqAEdTW\/3RcjmAbtQJVz7AAAAALAC\/\/8GrQAAAgQFtAEDAwYBAQgK+RQBPQAAAAAEAgAA"}
00564{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1235,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":33,"flow_packet_id":2,"flow_src_last_pkt_time":1694275753284172,"flow_dst_last_pkt_time":1694275753312288,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1694275753312288,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA8AABAADYGPkJNb\/dFwKgBHQG7yOYfynEvUCVc\/KAS\/oh\/DgAAAgQFrAQCCAqZASfW+RQBPQEDAwc="}
00549{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1236,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":33,"flow_packet_id":3,"flow_src_last_pkt_time":1694275753312381,"flow_dst_last_pkt_time":1694275753312288,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275753312381,"pkt":"EBMx8Tl2nFg8p+7MCABFAAA0AABAAEAGAADAqAEdTW\/3RcjmAbtQJVz8H8pxMIAQCBYGoQAAAQEICvkUAVmZASfW"}
01248{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1237,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":33,"flow_packet_id":4,"flow_src_last_pkt_time":1694275753312502,"flow_dst_last_pkt_time":1694275753312288,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"thread_ts_usec":1694275753312502,"pkt":"EBMx8Tl2nFg8p+7MCABFAAI5AABAAEAGAADAqAEdTW\/3RcjmAbtQJVz8H8pxMIAYCBYIpgAAAQEICvkUAVmZASfWFgMBAgABAAH8AwN0cGcIVOrXJL8XwB88mgODwv9vxvv5pXm2MzL\/0VrVTiDSBKD0SuFY9pYcsNQNRYQiY\/2hD8B11UK13eDBcfCc5gAg+voTARMCEwPAK8AvwCzAMMypzKjAE8AUAJwAnQAvADUBAAGTuroAAERpAAUAAwJoMgAKAAoACJqaAB0AFwAYADMAKwApmpoAAQAAHQAgT\/1RBvWNpdOMVIxT3TwBBCQunviPjrOX0EPQufzxincAKwAHBioqAwQDAwAQAA4ADAJoMghodHRwLzEuMQAFAAUBAAAAAAAjAAAACwACAQAALQACAQEADQASABAEAwgEBAEFAwgFBQEIBgYBABcAAAASAAAAGwADAgACAAAAFwAVAAASZXUwLnNlYy10dW5uZWwuY29t\/wEAAQBqagABAAAVAMUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="}
01190{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":1237,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":33,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1694275753284172,"flow_src_last_pkt_time":1694275753312502,"flow_dst_last_pkt_time":1694275753312288,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275753312502,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51430,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.2","ja3":"936e6ce83ab4f11d1ce3ffb026e44b8e","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
02167{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":1245,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":21,"flow_state":"finished","flow_src_packets_processed":16,"flow_dst_packets_processed":16,"flow_first_seen":1694275753011053,"flow_src_last_pkt_time":1694275753303434,"flow_dst_last_pkt_time":1694275753329187,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1419,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2751,"flow_dst_tot_l4_payload_len":5916,"midstream":0,"thread_ts_usec":1694275753329187,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51418,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"data_analysis": {"iat": {"min":0,"avg":19694.0,"max":107916,"stddev":28481.2,"var":811176192.0,"ent":3.5,"data": [40372,40455,0,31025,504,31473,64,120,123,121,29003,46,28780,26348,55847,82165,54,124,222,149,126,26281,81732,107916,74,66,120,53,121,588,26443]},"pktlen": {"min":52,"avg":324.2,"max":1492,"stddev":448.2,"var":200860.4,"ent":3.9,"data": [64,60,52,569,52,1492,52,1128,52,116,1471,64,52,116,64,91,52,93,52,76,52,591,52,1098,52,498,1098,52,810,52,200,52]},"bins": {"c_to_s": [10,0,2,0,1,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0],"s_to_c": [8,2,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,2,1,0,0,0,0,0,0,0,0,0,0,0,1,0,0]},"directions": [0,1,0,0,1,1,0,1,0,0,0,1,1,0,1,1,0,1,0,1,0,0,1,1,0,1,1,0,1,0,0,1],"entropies": [4.178360939,5.246035099,4.736229897,4.451611042,5.063529015,7.858956337,4.721712589,7.794020176,4.774691582,5.846198559,7.861629963,5.088054180,5.025067806,5.788827896,5.119304180,5.893327236,4.774691582,5.874913692,4.774691582,5.517536640,4.774691582,7.634633541,5.025067806,7.812478542,4.774691582,7.541460991,7.811731815,4.736229897,7.709799290,4.774691582,6.858570576,5.025067806]},"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00550{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1249,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":33,"flow_packet_id":5,"flow_src_last_pkt_time":1694275753312502,"flow_dst_last_pkt_time":1694275753340708,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275753340708,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA0rfdAADYGkFJNb\/dFwKgBHQG7yOYfynEwUCVfAYAQAfqoJAAAAQEICpkBJ\/L5FAFZ"}
01235{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":1250,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":33,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":3,"flow_first_seen":1694275753284172,"flow_src_last_pkt_time":1694275753312502,"flow_dst_last_pkt_time":1694275753342153,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":1440,"midstream":0,"thread_ts_usec":1694275753342153,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51430,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.3","ja3":"936e6ce83ab4f11d1ce3ffb026e44b8e","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
02301{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":1271,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":32,"flow_state":"finished","flow_src_packets_processed":16,"flow_dst_packets_processed":16,"flow_first_seen":1694275753219923,"flow_src_last_pkt_time":1694275753359055,"flow_dst_last_pkt_time":1694275753358210,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1272,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2678,"flow_dst_tot_l4_payload_len":9521,"midstream":0,"thread_ts_usec":1694275753359055,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51429,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"data_analysis": {"iat": {"min":2,"avg":8949.0,"max":36574,"stddev":13973.5,"var":195257968.0,"ent":3.4,"data": [31138,31254,257,30953,1386,32001,76,122,2814,124,33216,1227,5063,38,3,36574,123,31144,2873,33906,253,2,224,204,200,196,193,515,523,580,237]},"pktlen": {"min":52,"avg":433.8,"max":1492,"stddev":539.4,"var":290977.1,"ent":4.0,"data": [64,60,52,569,52,1492,52,1113,52,116,1324,52,52,91,93,76,52,591,52,1098,52,1492,704,52,1492,52,1492,52,950,52,138,252]},"bins": {"c_to_s": [10,0,2,0,0,0,1,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0],"s_to_c": [6,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,1,0,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,4,0,0]},"directions": [0,1,0,0,1,1,0,1,0,0,0,1,1,1,1,1,0,0,1,1,0,1,1,0,1,0,1,0,1,0,0,0],"entropies": [4.147110939,5.246035099,4.736229897,4.159043312,5.025067329,7.830972195,4.774691105,7.815896988,4.774691105,5.994354248,7.858992100,5.063529015,5.025067329,5.872906685,5.982440948,5.514054298,4.697767735,7.582472324,4.986605644,7.813449383,4.697767735,7.878967285,7.719236851,4.644789219,7.881211758,4.530653477,7.866177559,4.569114685,7.756382465,4.569115162,6.282574654,6.984082222]},"ndpi": {"flow_risk": {"15": {"risk":"TLS (probably) Not Carrying HTTPS","severity":"Low","risk_score": {"total":460,"client":410,"server":50}}},"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
02162{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":1307,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":33,"flow_state":"finished","flow_src_packets_processed":15,"flow_dst_packets_processed":17,"flow_first_seen":1694275753284172,"flow_src_last_pkt_time":1694275753403236,"flow_dst_last_pkt_time":1694275753403327,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1413,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2533,"flow_dst_tot_l4_payload_len":8778,"midstream":0,"thread_ts_usec":1694275753403327,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51430,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"data_analysis": {"iat": {"min":1,"avg":7684.5,"max":30516,"stddev":12314.1,"var":151637984.0,"ent":3.3,"data": [28116,28209,121,28420,1445,29693,83,119,119,121,26978,42,1,3719,23,47,30516,125,126,27397,1558,28748,106,127,112,124,266,202,721,714,121]},"pktlen": {"min":52,"avg":406.1,"max":1492,"stddev":507.8,"var":257847.6,"ent":4.0,"data": [64,60,52,569,52,1492,52,1128,52,116,1465,52,52,52,91,93,76,52,52,591,52,1098,52,1098,52,1098,52,1308,52,1098,52,770]},"bins": {"c_to_s": [11,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0],"s_to_c": [7,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,4,1,0,0,0,0,0,1,0,0,0,0,0,1,0,0]},"directions": [0,1,0,0,1,1,0,1,0,0,0,1,1,1,1,1,1,0,0,0,1,1,0,1,0,1,0,1,0,1,0,1],"entropies": [4.148671150,5.252541542,4.699688911,4.452308655,4.900255203,7.863777637,4.658501625,7.817848682,4.658502102,5.889846802,7.854816914,5.022342205,5.060803890,4.983880520,5.919770718,5.835650444,5.512189865,4.738150120,4.738150120,7.652456760,4.985801220,7.818130970,4.738150120,7.801731110,4.738150120,7.818451881,4.738150120,7.852583885,4.738150120,7.834556580,4.738150120,7.715612888]},"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
02174{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":1351,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":27,"flow_state":"finished","flow_src_packets_processed":15,"flow_dst_packets_processed":17,"flow_first_seen":1694275753047174,"flow_src_last_pkt_time":1694275753460341,"flow_dst_last_pkt_time":1694275753460301,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1419,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2577,"flow_dst_tot_l4_payload_len":10202,"midstream":0,"thread_ts_usec":1694275753460341,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51424,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"data_analysis": {"iat": {"min":1,"avg":26654.6,"max":180430,"stddev":53880.0,"var":2903055104.0,"ent":2.9,"data": [27817,27853,120,27505,485,27870,364,362,389,121,26699,1946,152292,180430,83,1,121,136,27341,146601,173862,1373,2,1303,114,121,157,5,141,342,338]},"pktlen": {"min":52,"avg":452.0,"max":1492,"stddev":548.4,"var":300791.0,"ent":4.0,"data": [64,60,52,569,52,1492,52,1128,52,116,1471,52,52,91,52,93,76,52,629,52,1098,52,1492,704,52,1098,52,1492,704,52,1358,52]},"bins": {"c_to_s": [11,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0],"s_to_c": [6,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,2,1,0,0,0,0,0,0,1,0,0,0,0,3,0,0]},"directions": [0,1,0,0,1,1,0,1,0,0,0,1,1,1,0,1,1,0,0,1,1,0,1,1,0,1,0,1,1,0,1,0],"entropies": [4.209610939,5.246035099,4.774691582,4.406749725,5.063529015,7.869228363,4.774691105,7.824818134,4.813152790,5.949138165,7.883416653,5.025067329,5.101990700,5.776699543,4.774691105,5.990557671,5.627385616,4.774691105,7.667889118,5.063529015,7.841457844,4.813152790,7.862190723,7.708991528,4.813152790,7.806630135,4.774691105,7.855051994,7.713768005,4.813152790,7.857409000,4.684499741]},"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00567{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1419,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":13,"flow_packet_id":2,"flow_src_last_pkt_time":1694275754010923,"flow_dst_last_pkt_time":1694275753010186,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"thread_ts_usec":1694275754010923,"pkt":"EBMx8Tl2nFg8p+7MCABFAABAAABAAEAGAADAqAEdTW\/3RcjSAbsaUzyLAAAAALAC\/\/8GrQAAAgQFtAEDAwYBAQgKUIIL6QAAAAAEAgAA"}
00562{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1420,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":13,"flow_packet_id":3,"flow_src_last_pkt_time":1694275754010923,"flow_dst_last_pkt_time":1694275754038464,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1694275754038464,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA8AABAADYGPkJNb\/dFwKgBHQG7yNLpJ5fDGlM8jKAS\/oiAgwAAAgQFrAQCCAqZASqsUIIL6QEDAwc="}
00549{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1421,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":13,"flow_packet_id":4,"flow_src_last_pkt_time":1694275754038604,"flow_dst_last_pkt_time":1694275754038464,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275754038604,"pkt":"EBMx8Tl2nFg8p+7MCABFAAA0AABAAEAGAADAqAEdTW\/3RcjSAbsaUzyM6SeXxIAQCBYGoQAAAQEIClCCDAWZASqs"}
01246{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1422,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":13,"flow_packet_id":5,"flow_src_last_pkt_time":1694275754038928,"flow_dst_last_pkt_time":1694275754038464,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"thread_ts_usec":1694275754038928,"pkt":"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"}
01190{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":1422,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":13,"flow_state":"info","flow_src_packets_processed":4,"flow_dst_packets_processed":1,"flow_first_seen":1694275753010186,"flow_src_last_pkt_time":1694275754038928,"flow_dst_last_pkt_time":1694275754038464,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275754038928,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51410,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.2","ja3":"cd653a825c6c269bdd28283252c5ca8c","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
01235{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":1424,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":13,"flow_state":"info","flow_src_packets_processed":4,"flow_dst_packets_processed":3,"flow_first_seen":1694275753010186,"flow_src_last_pkt_time":1694275754038928,"flow_dst_last_pkt_time":1694275754067676,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":1440,"midstream":0,"thread_ts_usec":1694275754067676,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51410,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.3","ja3":"cd653a825c6c269bdd28283252c5ca8c","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00781{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1431,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":34,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1694275754087463,"flow_src_last_pkt_time":1694275754087463,"flow_dst_last_pkt_time":1694275754087463,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275754087463,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51432,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00567{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1431,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":34,"flow_packet_id":1,"flow_src_last_pkt_time":1694275754087463,"flow_dst_last_pkt_time":1694275754087463,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"thread_ts_usec":1694275754087463,"pkt":"EBMx8Tl2nFg8p+7MCABFAABAAABAAEAGAADAqAEdTW\/3RcjoAbtXdiucAAAAALAC\/\/8GrQAAAgQFtAEDAwYBAQgKSZgLiAAAAAAEAgAA"}
00781{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1442,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":35,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1694275754109202,"flow_src_last_pkt_time":1694275754109202,"flow_dst_last_pkt_time":1694275754109202,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275754109202,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51433,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00568{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1442,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":35,"flow_packet_id":1,"flow_src_last_pkt_time":1694275754109202,"flow_dst_last_pkt_time":1694275754109202,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"thread_ts_usec":1694275754109202,"pkt":"EBMx8Tl2nFg8p+7MCABFAABAAABAAEAGAADAqAEdTW\/3RcjpAbvjtpAFAAAAALAC\/\/8GrQAAAgQFtAEDAwYBAQgK\/e7LrAAAAAAEAgAA"}
00562{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1447,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":34,"flow_packet_id":2,"flow_src_last_pkt_time":1694275754087463,"flow_dst_last_pkt_time":1694275754114575,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1694275754114575,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA8AABAADYGPkJNb\/dFwKgBHQG7yOhElg3jV3YrnaAS\/oiJqQAAAgQFrAQCCAqZASr5SZgLiAEDAwc="}
00549{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1448,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":34,"flow_packet_id":3,"flow_src_last_pkt_time":1694275754114687,"flow_dst_last_pkt_time":1694275754114575,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275754114687,"pkt":"EBMx8Tl2nFg8p+7MCABFAAA0AABAAEAGAADAqAEdTW\/3RcjoAbtXdiudRJYN5IAQCBYGoQAAAQEICkmYC6SZASr5"}
01248{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1449,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":34,"flow_packet_id":4,"flow_src_last_pkt_time":1694275754115657,"flow_dst_last_pkt_time":1694275754114575,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"thread_ts_usec":1694275754115657,"pkt":"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"}
01190{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":1449,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":34,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1694275754087463,"flow_src_last_pkt_time":1694275754115657,"flow_dst_last_pkt_time":1694275754114575,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275754115657,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51432,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.2","ja3":"4afc46d232d77551effc9cce3df35f16","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00781{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1451,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":36,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1694275754128769,"flow_src_last_pkt_time":1694275754128769,"flow_dst_last_pkt_time":1694275754128769,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275754128769,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51435,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00567{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1451,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":36,"flow_packet_id":1,"flow_src_last_pkt_time":1694275754128769,"flow_dst_last_pkt_time":1694275754128769,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"thread_ts_usec":1694275754128769,"pkt":"EBMx8Tl2nFg8p+7MCABFAABAAABAAEAGAADAqAEdTW\/3RcjrAbskWJ9iAAAAALAC\/\/8GrQAAAgQFtAEDAwYBAQgKkoTmRgAAAAAEAgAA"}
00563{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1458,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":35,"flow_packet_id":2,"flow_src_last_pkt_time":1694275754109202,"flow_dst_last_pkt_time":1694275754135968,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1694275754135968,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA8AABAADYGPkJNb\/dFwKgBHQG7yOmxIYcq47aQBqAS\/og+mgAAAgQFrAQCCAqZASsP\/e7LrAEDAwc="}
00549{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1460,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":35,"flow_packet_id":3,"flow_src_last_pkt_time":1694275754136155,"flow_dst_last_pkt_time":1694275754135968,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275754136155,"pkt":"EBMx8Tl2nFg8p+7MCABFAAA0AABAAEAGAADAqAEdTW\/3RcjpAbvjtpAGsSGHK4AQCBYGoQAAAQEICv3uy8eZASsP"}
01247{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1461,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":35,"flow_packet_id":4,"flow_src_last_pkt_time":1694275754136275,"flow_dst_last_pkt_time":1694275754135968,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"thread_ts_usec":1694275754136275,"pkt":"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"}
01190{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":1461,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":35,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1694275754109202,"flow_src_last_pkt_time":1694275754136275,"flow_dst_last_pkt_time":1694275754135968,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275754136275,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51433,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.2","ja3":"263749057f858bb5c2f786931adb108e","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00549{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1468,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":34,"flow_packet_id":5,"flow_src_last_pkt_time":1694275754115657,"flow_dst_last_pkt_time":1694275754143203,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275754143203,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA0islAADYGs4BNb\/dFwKgBHQG7yOhElg3kV3YtooAQAfqyvgAAAQEICpkBKxZJmAuk"}
01235{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":1469,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":34,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":3,"flow_first_seen":1694275754087463,"flow_src_last_pkt_time":1694275754115657,"flow_dst_last_pkt_time":1694275754144689,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":1440,"midstream":0,"thread_ts_usec":1694275754144689,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51432,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.3","ja3":"4afc46d232d77551effc9cce3df35f16","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00562{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1478,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":36,"flow_packet_id":2,"flow_src_last_pkt_time":1694275754128769,"flow_dst_last_pkt_time":1694275754156159,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1694275754156159,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA8AABAADQGQEJNb\/dFwKgBHQG7yOsw6MPGJFifY6AS\/oiC8wAAAgQFrAQCCAqZASsjkoTmRgEDAwc="}
00549{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1479,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":36,"flow_packet_id":3,"flow_src_last_pkt_time":1694275754156249,"flow_dst_last_pkt_time":1694275754156159,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275754156249,"pkt":"EBMx8Tl2nFg8p+7MCABFAAA0AABAAEAGAADAqAEdTW\/3RcjrAbskWJ9jMOjDx4AQCBYGoQAAAQEICpKE5mKZASsj"}
01246{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1480,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":36,"flow_packet_id":4,"flow_src_last_pkt_time":1694275754156498,"flow_dst_last_pkt_time":1694275754156159,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"thread_ts_usec":1694275754156498,"pkt":"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"}
01190{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":1480,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":36,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1694275754128769,"flow_src_last_pkt_time":1694275754156498,"flow_dst_last_pkt_time":1694275754156159,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275754156498,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51435,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.2","ja3":"2d6e42ac63c9ed1a1694e4165bde6d99","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00549{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1481,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":35,"flow_packet_id":5,"flow_src_last_pkt_time":1694275754136275,"flow_dst_last_pkt_time":1694275754163249,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275754163249,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA0PaZAADYGAKRNb\/dFwKgBHQG7yOmxIYcr47aSC4AQAfpnsgAAAQEICpkBKyr97svH"}
01235{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":1482,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":35,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":3,"flow_first_seen":1694275754109202,"flow_src_last_pkt_time":1694275754136275,"flow_dst_last_pkt_time":1694275754163811,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":1440,"midstream":0,"thread_ts_usec":1694275754163811,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51433,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.3","ja3":"263749057f858bb5c2f786931adb108e","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
02178{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":1489,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":13,"flow_state":"finished","flow_src_packets_processed":16,"flow_dst_packets_processed":16,"flow_first_seen":1694275753010186,"flow_src_last_pkt_time":1694275754138286,"flow_dst_last_pkt_time":1694275754165611,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1407,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2642,"flow_dst_tot_l4_payload_len":6894,"midstream":0,"thread_ts_usec":1694275754165611,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51410,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"data_analysis": {"iat": {"min":3,"avg":73662.1,"max":1028278,"stddev":247407.8,"var":61210599424.0,"ent":1.8,"data": [1000737,1028278,27681,324,28645,567,28844,691,697,1111,253,27150,1201,8852,39,35837,4,101,123,600,27345,2874,29634,1307,3,1324,123,129,802,27302,947]},"pktlen": {"min":52,"avg":351.0,"max":1492,"stddev":482.3,"var":232616.9,"ent":3.9,"data": [64,64,60,52,569,52,1492,52,1129,52,116,1459,52,52,91,93,52,52,76,52,591,52,1098,52,1492,528,52,1067,52,167,52,348]},"bins": {"c_to_s": [11,0,1,1,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0],"s_to_c": [7,2,0,0,0,0,0,0,0,1,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1,0,0,0,0,0,0,0,0,0,0,0,2,0,0]},"directions": [0,0,1,0,0,1,1,0,1,0,0,0,1,1,1,1,0,0,1,0,0,1,1,0,1,1,0,1,0,0,1,1],"entropies": [4.088861465,4.209610939,5.212701797,4.774691582,4.424145699,5.101990700,7.850503922,4.813152790,7.848980427,4.736229420,5.914655209,7.855607510,5.063529015,5.010550022,5.849371433,5.990558147,4.697768211,4.697767735,5.653701305,4.699688435,7.598402977,4.947340012,7.796793461,4.813152790,7.865888596,7.585998535,4.813152790,7.790732861,4.684499741,6.595388412,5.101990700,7.308109760]},"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00781{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1494,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":37,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1694275754173951,"flow_src_last_pkt_time":1694275754173951,"flow_dst_last_pkt_time":1694275754173951,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275754173951,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51436,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00567{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1494,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":37,"flow_packet_id":1,"flow_src_last_pkt_time":1694275754173951,"flow_dst_last_pkt_time":1694275754173951,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"thread_ts_usec":1694275754173951,"pkt":"EBMx8Tl2nFg8p+7MCABFAABAAABAAEAGAADAqAEdTW\/3RcjsAbtXXCyTAAAAALAC\/\/8GrQAAAgQFtAEDAwYBAQgKjSiZ1wAAAAAEAgAA"}
00549{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1495,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":36,"flow_packet_id":5,"flow_src_last_pkt_time":1694275754156498,"flow_dst_last_pkt_time":1694275754183341,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275754183341,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA07A5AADQGVDtNb\/dFwKgBHQG7yOsw6MPHJFihaIAQAfqsCgAAAQEICpkBKz6ShOZi"}
01235{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":1496,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":36,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":3,"flow_first_seen":1694275754128769,"flow_src_last_pkt_time":1694275754156498,"flow_dst_last_pkt_time":1694275754184697,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":1440,"midstream":0,"thread_ts_usec":1694275754184697,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51435,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.3","ja3":"2d6e42ac63c9ed1a1694e4165bde6d99","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00781{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1502,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":38,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1694275754185416,"flow_src_last_pkt_time":1694275754185416,"flow_dst_last_pkt_time":1694275754185416,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275754185416,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51437,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00567{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1502,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":38,"flow_packet_id":1,"flow_src_last_pkt_time":1694275754185416,"flow_dst_last_pkt_time":1694275754185416,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"thread_ts_usec":1694275754185416,"pkt":"EBMx8Tl2nFg8p+7MCABFAABAAABAAEAGAADAqAEdTW\/3RcjtAbv3qQ1dAAAAALAC\/\/8GrQAAAgQFtAEDAwYBAQgK8GJ7VAAAAAAEAgAA"}
00781{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1504,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":39,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1694275754188438,"flow_src_last_pkt_time":1694275754188438,"flow_dst_last_pkt_time":1694275754188438,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275754188438,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51438,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00567{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1504,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":39,"flow_packet_id":1,"flow_src_last_pkt_time":1694275754188438,"flow_dst_last_pkt_time":1694275754188438,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"thread_ts_usec":1694275754188438,"pkt":"EBMx8Tl2nFg8p+7MCABFAABAAABAAEAGAADAqAEdTW\/3RcjuAbtbos4HAAAAALAC\/\/8GrQAAAgQFtAEDAwYBAQgKDw8BxQAAAAAEAgAA"}
00562{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1517,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":37,"flow_packet_id":2,"flow_src_last_pkt_time":1694275754173951,"flow_dst_last_pkt_time":1694275754202041,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1694275754202041,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA8AABAADQGQEJNb\/dFwKgBHQG7yOyTSe32V1wslKAS\/oiHygAAAgQFrAQCCAqZAStQjSiZ1wEDAwc="}
00549{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1518,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":37,"flow_packet_id":3,"flow_src_last_pkt_time":1694275754202105,"flow_dst_last_pkt_time":1694275754202041,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275754202105,"pkt":"EBMx8Tl2nFg8p+7MCABFAAA0AABAAEAGAADAqAEdTW\/3RcjsAbtXXCyUk0nt94AQCBYGoQAAAQEICo0omfOZAStQ"}
01247{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1519,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":37,"flow_packet_id":4,"flow_src_last_pkt_time":1694275754202227,"flow_dst_last_pkt_time":1694275754202041,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"thread_ts_usec":1694275754202227,"pkt":"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"}
01190{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":1519,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":37,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1694275754173951,"flow_src_last_pkt_time":1694275754202227,"flow_dst_last_pkt_time":1694275754202041,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275754202227,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51436,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.2","ja3":"9b0e7583c7ef3a345ec5a06e7cb11acc","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00562{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1532,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":39,"flow_packet_id":2,"flow_src_last_pkt_time":1694275754188438,"flow_dst_last_pkt_time":1694275754215808,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1694275754215808,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA8AABAADQGQEJNb\/dFwKgBHQG7yO5wE5csW6LOCKAS\/ohyKgAAAgQFrAQCCAqZAStgDw8BxQEDAwc="}
00549{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1533,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":39,"flow_packet_id":3,"flow_src_last_pkt_time":1694275754215878,"flow_dst_last_pkt_time":1694275754215808,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275754215878,"pkt":"EBMx8Tl2nFg8p+7MCABFAAA0AABAAEAGAADAqAEdTW\/3RcjuAbtbos4IcBOXLYAQCBYGoQAAAQEICg8PAeGZAStg"}
01248{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1534,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":39,"flow_packet_id":4,"flow_src_last_pkt_time":1694275754216002,"flow_dst_last_pkt_time":1694275754215808,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"thread_ts_usec":1694275754216002,"pkt":"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"}
01190{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":1534,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":39,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1694275754188438,"flow_src_last_pkt_time":1694275754216002,"flow_dst_last_pkt_time":1694275754215808,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275754216002,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51438,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.2","ja3":"1cd1a944e2d3347798156aa08a0a306a","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00562{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1535,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":38,"flow_packet_id":2,"flow_src_last_pkt_time":1694275754185416,"flow_dst_last_pkt_time":1694275754217215,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1694275754217215,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA8AABAADQGQEJNb\/dFwKgBHQG7yO07+LOT96kNXqAS\/ohTpAAAAgQFrAQCCAqZAStb8GJ7VAEDAwc="}
00550{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1536,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":38,"flow_packet_id":3,"flow_src_last_pkt_time":1694275754217283,"flow_dst_last_pkt_time":1694275754217215,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275754217283,"pkt":"EBMx8Tl2nFg8p+7MCABFAAA0AABAAEAGAADAqAEdTW\/3RcjtAbv3qQ1eO\/izlIAQCBYGoQAAAQEICvBie3SZAStb"}
01246{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1537,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":38,"flow_packet_id":4,"flow_src_last_pkt_time":1694275754217409,"flow_dst_last_pkt_time":1694275754217215,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"thread_ts_usec":1694275754217409,"pkt":"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"}
01190{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":1537,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":38,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1694275754185416,"flow_src_last_pkt_time":1694275754217409,"flow_dst_last_pkt_time":1694275754217215,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275754217409,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51437,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.2","ja3":"443c0128c0380aacb46492308cacdcaf","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
02163{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":1550,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":35,"flow_state":"finished","flow_src_packets_processed":15,"flow_dst_packets_processed":17,"flow_first_seen":1694275754109202,"flow_src_last_pkt_time":1694275754222775,"flow_dst_last_pkt_time":1694275754222809,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1415,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2535,"flow_dst_tot_l4_payload_len":8486,"midstream":0,"thread_ts_usec":1694275754222809,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51433,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"data_analysis": {"iat": {"min":53,"avg":7328.4,"max":29008,"stddev":11707.9,"var":137075808.0,"ent":3.3,"data": [26766,26953,120,27281,562,27629,813,839,433,121,25853,1242,2546,29008,63,61,121,118,26073,1611,53,27591,133,175,125,306,255,75,54,127,73]},"pktlen": {"min":52,"avg":397.0,"max":1492,"stddev":481.5,"var":231822.5,"ent":4.0,"data": [64,60,52,569,52,1492,52,1128,52,116,1467,52,52,91,52,93,76,52,591,52,1098,478,52,52,1098,52,1098,52,882,1098,52,478]},"bins": {"c_to_s": [11,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0],"s_to_c": [6,2,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,4,1,0,0,0,0,0,0,0,0,0,0,0,1,0,0]},"directions": [0,1,0,0,1,1,0,1,0,0,0,1,1,1,0,1,1,0,0,1,1,1,0,0,1,0,1,0,1,1,0,1],"entropies": [4.178360939,5.212701797,4.683251381,4.451683044,5.026988029,7.857296467,4.697768211,7.828640461,4.774691582,5.911512852,7.851897717,5.065449715,5.065449715,5.871349335,4.813152790,5.937906265,5.653701305,4.813152790,7.646155357,5.026988029,7.825329781,7.531569481,4.736229897,4.736229897,7.828527451,4.736229897,7.810995102,4.736229897,7.729085922,7.824745655,4.736229897,7.451065063]},"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00549{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1561,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":37,"flow_packet_id":5,"flow_src_last_pkt_time":1694275754202227,"flow_dst_last_pkt_time":1694275754229437,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275754229437,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA0CLlAADQGN5FNb\/dFwKgBHQG7yOyTSe33V1wumYAQAfqw4AAAAQEICpkBK2yNKJnz"}
01235{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":1562,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":37,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":3,"flow_first_seen":1694275754173951,"flow_src_last_pkt_time":1694275754202227,"flow_dst_last_pkt_time":1694275754230968,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":1440,"midstream":0,"thread_ts_usec":1694275754230968,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51436,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.3","ja3":"9b0e7583c7ef3a345ec5a06e7cb11acc","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
02167{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":1579,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":34,"flow_state":"finished","flow_src_packets_processed":16,"flow_dst_packets_processed":16,"flow_first_seen":1694275754087463,"flow_src_last_pkt_time":1694275754234003,"flow_dst_last_pkt_time":1694275754234527,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1425,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2545,"flow_dst_tot_l4_payload_len":8833,"midstream":0,"thread_ts_usec":1694275754234527,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51432,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"data_analysis": {"iat": {"min":50,"avg":9471.1,"max":57872,"stddev":15017.5,"var":225526784.0,"ent":3.3,"data": [27112,27224,970,28628,1486,29076,93,121,228,122,26977,75,31206,57872,54,125,1121,1044,121,26899,2278,29074,159,50,173,133,201,126,164,131,561]},"pktlen": {"min":52,"avg":408.2,"max":1492,"stddev":535.4,"var":286624.8,"ent":3.9,"data": [64,60,52,569,52,1492,52,1127,52,116,1477,52,52,91,52,93,52,76,52,591,52,1098,52,1492,704,52,52,1492,52,1318,52,422]},"bins": {"c_to_s": [12,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0],"s_to_c": [6,2,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,1,1,0,0,0,0,0,1,0,0,0,0,0,3,0,0]},"directions": [0,1,0,0,1,1,0,1,0,0,0,1,1,1,0,1,0,1,0,0,1,1,0,1,1,0,0,1,0,1,0,1],"entropies": [4.209610939,5.279368401,4.774691582,4.405547142,5.101990700,7.842993259,4.813152790,7.800993443,4.774691582,5.883537769,7.866736889,5.101990700,5.101990700,5.842633247,4.813152790,5.929789066,4.774691582,5.655566216,4.813152790,7.597860336,5.140452385,7.840083122,4.774691105,7.865912437,7.702890873,4.813152790,4.813152790,7.872797966,4.738150120,7.842354298,4.813152790,7.483771801]},"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00549{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1584,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":39,"flow_packet_id":5,"flow_src_last_pkt_time":1694275754216002,"flow_dst_last_pkt_time":1694275754242059,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275754242059,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA004pAADQGbL9Nb\/dFwKgBHQG7yO5wE5ctW6LQDYAQAfqbQwAAAQEICpkBK3kPDwHh"}
01235{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":1585,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":39,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":3,"flow_first_seen":1694275754188438,"flow_src_last_pkt_time":1694275754216002,"flow_dst_last_pkt_time":1694275754243526,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":1440,"midstream":0,"thread_ts_usec":1694275754243526,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51438,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.3","ja3":"1cd1a944e2d3347798156aa08a0a306a","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00549{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1591,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":38,"flow_packet_id":5,"flow_src_last_pkt_time":1694275754217409,"flow_dst_last_pkt_time":1694275754248180,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275754248180,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA0aa1AADQG1pxNb\/dFwKgBHQG7yO07+LOU96kPY4AQAfp8sgAAAQEICpkBK3vwYnt0"}
01235{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":1593,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":38,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":3,"flow_first_seen":1694275754185416,"flow_src_last_pkt_time":1694275754217409,"flow_dst_last_pkt_time":1694275754249808,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":1440,"midstream":0,"thread_ts_usec":1694275754249808,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51437,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.3","ja3":"443c0128c0380aacb46492308cacdcaf","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
02165{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":1615,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":36,"flow_state":"finished","flow_src_packets_processed":15,"flow_dst_packets_processed":17,"flow_first_seen":1694275754128769,"flow_src_last_pkt_time":1694275754253928,"flow_dst_last_pkt_time":1694275754254386,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1417,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2537,"flow_dst_tot_l4_payload_len":8915,"midstream":0,"thread_ts_usec":1694275754254386,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51435,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"data_analysis": {"iat": {"min":2,"avg":8089.5,"max":39082,"stddev":12490.1,"var":156003200.0,"ent":3.4,"data": [27390,27480,249,27182,1356,28286,92,124,218,120,25685,1244,12558,39082,57,53,128,120,26494,1303,27676,948,933,253,252,356,358,124,2,133,520]},"pktlen": {"min":52,"avg":410.5,"max":1492,"stddev":518.8,"var":269178.6,"ent":4.0,"data": [64,60,52,569,52,1492,52,1129,52,116,1469,52,52,91,52,93,76,52,591,52,1098,52,478,52,1098,52,1492,52,1492,520,52,480]},"bins": {"c_to_s": [11,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0],"s_to_c": [6,2,0,0,0,0,0,0,0,0,0,0,0,2,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0,0,0,0,0,0,0,0,0,0,0,3,0,0]},"directions": [0,1,0,0,1,1,0,1,0,0,0,1,1,1,0,1,1,0,0,1,1,0,1,0,1,0,1,0,1,1,0,1],"entropies": [4.209610939,5.279368401,4.774691582,4.462305069,5.063529491,7.853986740,4.774691105,7.855288506,4.774691105,5.946134090,7.851401806,5.025067329,5.063529015,5.938840866,4.813152790,5.967528820,5.698264599,4.813152790,7.638842583,5.063529015,7.796915054,4.813152790,7.480909824,4.813152790,7.834682941,4.813152790,7.873820305,4.813152790,7.873530388,7.590673923,4.813152790,7.535659313]},"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00781{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1626,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":40,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1694275754263304,"flow_src_last_pkt_time":1694275754263304,"flow_dst_last_pkt_time":1694275754263304,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275754263304,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51440,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00567{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1626,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":40,"flow_packet_id":1,"flow_src_last_pkt_time":1694275754263304,"flow_dst_last_pkt_time":1694275754263304,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"thread_ts_usec":1694275754263304,"pkt":"EBMx8Tl2nFg8p+7MCABFAABAAABAAEAGAADAqAEdTW\/3RcjwAbuqEt3PAAAAALAC\/\/8GrQAAAgQFtAEDAwYBAQgKkvM+WAAAAAAEAgAA"}
00562{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1654,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":40,"flow_packet_id":2,"flow_src_last_pkt_time":1694275754263304,"flow_dst_last_pkt_time":1694275754291134,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1694275754291134,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA8AABAADQGQEJNb\/dFwKgBHQG7yPAm9ybIqhLd0KAS\/ogMsAAAAgQFrAQCCAqZASupkvM+WAEDAwc="}
00549{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1655,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":40,"flow_packet_id":3,"flow_src_last_pkt_time":1694275754291189,"flow_dst_last_pkt_time":1694275754291134,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275754291189,"pkt":"EBMx8Tl2nFg8p+7MCABFAAA0AABAAEAGAADAqAEdTW\/3RcjwAbuqEt3QJvcmyYAQCBYGoQAAAQEICpLzPnSZASup"}
01249{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1657,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":40,"flow_packet_id":4,"flow_src_last_pkt_time":1694275754291310,"flow_dst_last_pkt_time":1694275754291134,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"thread_ts_usec":1694275754291310,"pkt":"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"}
01190{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":1657,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":40,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1694275754263304,"flow_src_last_pkt_time":1694275754291310,"flow_dst_last_pkt_time":1694275754291134,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275754291310,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51440,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.2","ja3":"4de89109ff6576c4d8b4a6688718f393","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00549{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1669,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":40,"flow_packet_id":5,"flow_src_last_pkt_time":1694275754291310,"flow_dst_last_pkt_time":1694275754318236,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275754318236,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA0xMFAADQGe4hNb\/dFwKgBHQG7yPAm9ybJqhLf1YAQAfo1xgAAAQEICpkBK8WS8z50"}
01235{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":1670,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":40,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":3,"flow_first_seen":1694275754263304,"flow_src_last_pkt_time":1694275754291310,"flow_dst_last_pkt_time":1694275754318782,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":1440,"midstream":0,"thread_ts_usec":1694275754318782,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51440,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.3","ja3":"4de89109ff6576c4d8b4a6688718f393","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
02163{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":1681,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":37,"flow_state":"finished","flow_src_packets_processed":14,"flow_dst_packets_processed":18,"flow_first_seen":1694275754173951,"flow_src_last_pkt_time":1694275754292941,"flow_dst_last_pkt_time":1694275754328160,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1405,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2611,"flow_dst_tot_l4_payload_len":7674,"midstream":0,"thread_ts_usec":1694275754328160,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51436,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"data_analysis": {"iat": {"min":1,"avg":8812.9,"max":31849,"stddev":12624.9,"var":159387984.0,"ent":3.5,"data": [28090,28154,122,27396,1531,28788,99,125,193,123,28156,1244,2735,31849,112,25,122,123,27184,1733,28734,219,1,215,186,2,1,198,244,27002,8493]},"pktlen": {"min":52,"avg":374.0,"max":1492,"stddev":504.4,"var":254392.6,"ent":3.9,"data": [64,60,52,569,52,1492,52,1129,52,116,1457,52,52,91,52,93,76,52,591,52,1098,52,1492,104,52,1492,280,367,52,138,52,584]},"bins": {"c_to_s": [9,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0],"s_to_c": [7,3,0,0,0,0,0,1,0,1,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,3,0,0]},"directions": [0,1,0,0,1,1,0,1,0,0,0,1,1,1,0,1,1,0,0,1,1,0,1,1,0,1,1,1,0,0,1,1],"entropies": [4.209610939,5.246035099,4.697768211,4.397861958,4.933627129,7.849544525,4.736229897,7.854951859,4.697768211,5.908147812,7.836333752,4.986606121,4.895165920,5.871349335,4.736229897,5.888302803,5.497672081,4.721712589,7.584928513,5.010550499,7.818240643,4.813152790,7.867399693,6.028574944,4.813152790,7.871778011,7.226988792,7.308317184,4.813152790,6.285698891,4.986605644,7.638573647]},"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
02163{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":1772,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":40,"flow_state":"finished","flow_src_packets_processed":16,"flow_dst_packets_processed":16,"flow_first_seen":1694275754263304,"flow_src_last_pkt_time":1694275754389266,"flow_dst_last_pkt_time":1694275754415554,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1423,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":3051,"flow_dst_tot_l4_payload_len":5838,"midstream":0,"thread_ts_usec":1694275754415554,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51440,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"data_analysis": {"iat": {"min":1,"avg":8974.6,"max":35635,"stddev":12697.2,"var":161217744.0,"ent":3.5,"data": [27830,27885,121,27102,546,27529,840,830,274,126,26171,1039,8743,35,35635,102,131,1,26009,5343,31325,209,25,1,154,122,1581,125,123,26933,1322]},"pktlen": {"min":52,"avg":330.4,"max":1492,"stddev":469.3,"var":220240.5,"ent":3.9,"data": [64,60,52,569,52,1492,52,1128,52,116,1475,52,52,91,93,52,76,52,591,52,1098,52,1492,704,132,52,52,154,172,338,52,52]},"bins": {"c_to_s": [9,0,1,2,0,0,0,0,1,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0],"s_to_c": [8,2,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,2,0,0]},"directions": [0,1,0,0,1,1,0,1,0,0,0,1,1,1,1,0,1,0,0,1,1,0,1,1,1,0,0,0,0,0,1,1],"entropies": [4.209610939,5.146035194,4.697768211,4.450056553,5.025067806,7.871761799,4.774691105,7.827337265,4.774691105,5.826527119,7.855667114,4.986606121,5.063529015,5.820655346,5.916401386,4.774691105,5.655566216,4.774691105,7.614426613,4.986605644,7.813764095,4.736229897,7.864622593,7.699440479,6.489213943,4.736229420,4.774691105,6.518905640,6.645439148,7.327331066,4.986606121,5.025067806]},"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
02163{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":1842,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":39,"flow_state":"finished","flow_src_packets_processed":14,"flow_dst_packets_processed":18,"flow_first_seen":1694275754188438,"flow_src_last_pkt_time":1694275754475502,"flow_dst_last_pkt_time":1694275754475507,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1413,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2533,"flow_dst_tot_l4_payload_len":8279,"midstream":0,"thread_ts_usec":1694275754475507,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51438,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"data_analysis": {"iat": {"min":0,"avg":18520.4,"max":122292,"stddev":34250.8,"var":1173117056.0,"ent":3.1,"data": [27370,27440,124,26251,1467,27581,100,125,157,123,25729,67,66,96709,2,0,122292,121,27232,81194,37,108357,4,312,254,158,1,174,324,312,50]},"pktlen": {"min":52,"avg":390.5,"max":1492,"stddev":496.9,"var":246958.9,"ent":4.0,"data": [64,60,52,569,52,1492,52,1128,52,116,1465,52,52,52,91,93,76,52,591,52,1098,478,52,52,1098,52,1492,488,52,1098,52,271]},"bins": {"c_to_s": [10,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0],"s_to_c": [7,2,0,0,0,0,1,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,1,0,0,0,0,0,0,0,0,0,0,0,2,0,0]},"directions": [0,1,0,0,1,1,0,1,0,0,0,1,1,1,1,1,1,0,0,1,1,1,0,0,1,0,1,1,0,1,0,1],"entropies": [4.117421150,5.152541161,4.608248711,4.401409626,4.983880997,7.842836380,4.699688911,7.824921131,4.581578732,5.856733322,7.868278027,4.823332310,4.784870625,4.900255680,5.703821182,5.805127621,5.574754238,4.736229897,7.640416622,5.025067806,7.817220211,7.464954376,4.774691582,4.774691582,7.829095840,4.774691582,7.861445904,7.528592587,4.774691582,7.822453022,4.774691582,7.145882607]},"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
02164{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":1857,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":38,"flow_state":"finished","flow_src_packets_processed":16,"flow_dst_packets_processed":16,"flow_first_seen":1694275754185416,"flow_src_last_pkt_time":1694275754496344,"flow_dst_last_pkt_time":1694275754497122,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1440,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2563,"flow_dst_tot_l4_payload_len":8121,"midstream":0,"thread_ts_usec":1694275754497122,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51437,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"data_analysis": {"iat": {"min":0,"avg":20085.0,"max":125695,"stddev":35873.1,"var":1286878848.0,"ent":3.2,"data": [31799,31867,126,30965,1628,32465,1019,1033,262,1,0,31031,1096,93829,43,125695,4,89,120,120,31052,87826,46,118780,6,267,258,180,3,191,833]},"pktlen": {"min":52,"avg":386.5,"max":1492,"stddev":502.3,"var":252311.9,"ent":3.9,"data": [64,60,52,569,52,1492,52,1129,52,116,1492,55,52,52,91,93,52,52,76,52,591,52,1098,498,52,52,1098,52,1492,528,52,1098]},"bins": {"c_to_s": [12,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0],"s_to_c": [6,2,0,0,0,0,0,0,0,0,0,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,1,0,0,0,0,0,0,0,0,0,0,0,2,0,0]},"directions": [0,1,0,0,1,1,0,1,0,0,0,0,1,1,1,1,0,0,1,0,0,1,1,1,0,0,1,0,1,1,0,1],"entropies": [4.178360939,5.246035099,4.736229897,4.456433773,5.025067806,7.868185997,4.736229897,7.769486904,4.774691105,6.000862122,7.872904778,4.784469604,4.986606121,5.025067806,5.938840389,5.931313515,4.774691105,4.774691105,5.645633221,4.774691105,7.597790718,5.025067329,7.806124210,7.590561867,4.774691105,4.774691105,7.804361820,4.736229420,7.860854626,7.518534660,4.774691105,7.830554485]},"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00781{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1875,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":41,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1694275754588065,"flow_src_last_pkt_time":1694275754588065,"flow_dst_last_pkt_time":1694275754588065,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275754588065,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51441,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00567{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1875,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":41,"flow_packet_id":1,"flow_src_last_pkt_time":1694275754588065,"flow_dst_last_pkt_time":1694275754588065,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"thread_ts_usec":1694275754588065,"pkt":"EBMx8Tl2nFg8p+7MCABFAABAAABAAEAGAADAqAEdTW\/3RcjxAbvuf721AAAAALAC\/\/8GrQAAAgQFtAEDAwYBAQgKzEUEDQAAAAAEAgAA"}
00562{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1880,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":41,"flow_packet_id":2,"flow_src_last_pkt_time":1694275754588065,"flow_dst_last_pkt_time":1694275754615021,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1694275754615021,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA8AABAADQGQEJNb\/dFwKgBHQG7yPHllHPF7n+9tqAS\/ojcdAAAAgQFrAQCCAqZASzuzEUEDQEDAwc="}
00549{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1881,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":41,"flow_packet_id":3,"flow_src_last_pkt_time":1694275754615121,"flow_dst_last_pkt_time":1694275754615021,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275754615121,"pkt":"EBMx8Tl2nFg8p+7MCABFAAA0AABAAEAGAADAqAEdTW\/3RcjxAbvuf7225ZRzxoAQCBYGoQAAAQEICsxFBCiZASzu"}
01246{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1882,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":41,"flow_packet_id":4,"flow_src_last_pkt_time":1694275754615277,"flow_dst_last_pkt_time":1694275754615021,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"thread_ts_usec":1694275754615277,"pkt":"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"}
01190{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":1882,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":41,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1694275754588065,"flow_src_last_pkt_time":1694275754615277,"flow_dst_last_pkt_time":1694275754615021,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275754615277,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51441,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.2","ja3":"ed5a9e40cd25a82b75ab0bd29f1bbc85","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00550{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1887,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":41,"flow_packet_id":5,"flow_src_last_pkt_time":1694275754615277,"flow_dst_last_pkt_time":1694275754642143,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275754642143,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA0MxVAADQGDTVNb\/dFwKgBHQG7yPHllHPG7n+\/u4AQAfoFjQAAAQEICpkBLQnMRQQo"}
01235{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":1888,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":41,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":3,"flow_first_seen":1694275754588065,"flow_src_last_pkt_time":1694275754615277,"flow_dst_last_pkt_time":1694275754642602,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":1440,"midstream":0,"thread_ts_usec":1694275754642602,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51441,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.3","ja3":"ed5a9e40cd25a82b75ab0bd29f1bbc85","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
02167{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":1919,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":41,"flow_state":"finished","flow_src_packets_processed":15,"flow_dst_packets_processed":17,"flow_first_seen":1694275754588065,"flow_src_last_pkt_time":1694275754887605,"flow_dst_last_pkt_time":1694275754887567,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1413,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2533,"flow_dst_tot_l4_payload_len":8280,"midstream":0,"thread_ts_usec":1694275754887605,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51441,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"data_analysis": {"iat": {"min":1,"avg":19323.9,"max":124559,"stddev":35992.1,"var":1295428992.0,"ent":3.1,"data": [26956,27056,156,27122,459,99,27426,137,584,128,26592,49,98688,124559,1229,1205,60,121,122,26221,91359,117424,203,146,254,2,1,259,207,1,217]},"pktlen": {"min":52,"avg":390.5,"max":1492,"stddev":500.1,"var":250056.1,"ent":4.0,"data": [64,60,52,569,52,1492,1129,52,52,116,1465,52,52,91,52,93,52,76,52,591,52,1098,52,1098,52,1492,704,262,52,1098,271,52]},"bins": {"c_to_s": [11,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0],"s_to_c": [6,2,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,3,1,0,0,0,0,0,0,0,0,0,0,0,2,0,0]},"directions": [0,1,0,0,1,1,1,0,0,0,0,1,1,1,0,1,0,1,0,0,1,1,0,1,0,1,1,1,0,1,1,0],"entropies": [4.123520851,5.154205322,4.683250904,4.412162781,5.010550022,7.834381104,7.791237831,4.721712589,4.721712589,5.949137688,7.879240513,4.948143959,4.909682274,5.859224319,4.721712589,5.771135330,4.721712589,5.514053822,4.721712589,7.619722366,4.972088814,7.835969448,4.760174274,7.801455021,4.760174274,7.874300480,7.673749924,7.163529873,4.721712589,7.815165997,7.164249420,4.721712589]},"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00781{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2003,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":42,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1694275755172671,"flow_src_last_pkt_time":1694275755172671,"flow_dst_last_pkt_time":1694275755172671,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275755172671,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51442,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00567{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2003,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":42,"flow_packet_id":1,"flow_src_last_pkt_time":1694275755172671,"flow_dst_last_pkt_time":1694275755172671,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"thread_ts_usec":1694275755172671,"pkt":"EBMx8Tl2nFg8p+7MCABFAABAAABAAEAGAADAqAEdTW\/3RcjyAbu2e3zpAAAAALAC\/\/8GrQAAAgQFtAEDAwYBAQgKO0TVawAAAAAEAgAA"}
00562{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2013,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":42,"flow_packet_id":2,"flow_src_last_pkt_time":1694275755172671,"flow_dst_last_pkt_time":1694275755199573,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1694275755199573,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA8AABAADYGPkJNb\/dFwKgBHQG7yPLHzMixtnt86qAS\/ojbegAAAgQFrAQCCAqZAS82O0TVawEDAwc="}
00549{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2014,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":42,"flow_packet_id":3,"flow_src_last_pkt_time":1694275755199634,"flow_dst_last_pkt_time":1694275755199573,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275755199634,"pkt":"EBMx8Tl2nFg8p+7MCABFAAA0AABAAEAGAADAqAEdTW\/3RcjyAbu2e3zqx8zIsoAQCBYGoQAAAQEICjtE1YaZAS82"}
01247{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2015,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":42,"flow_packet_id":4,"flow_src_last_pkt_time":1694275755199755,"flow_dst_last_pkt_time":1694275755199573,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"thread_ts_usec":1694275755199755,"pkt":"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"}
01190{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":2015,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":42,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1694275755172671,"flow_src_last_pkt_time":1694275755199755,"flow_dst_last_pkt_time":1694275755199573,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275755199755,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51442,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.2","ja3":"6666840c6dacae658c91615526eff942","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00781{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2017,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":43,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1694275755218416,"flow_src_last_pkt_time":1694275755218416,"flow_dst_last_pkt_time":1694275755218416,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275755218416,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51443,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00567{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2017,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":43,"flow_packet_id":1,"flow_src_last_pkt_time":1694275755218416,"flow_dst_last_pkt_time":1694275755218416,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"thread_ts_usec":1694275755218416,"pkt":"EBMx8Tl2nFg8p+7MCABFAABAAABAAEAGAADAqAEdTW\/3RcjzAbsxEndzAAAAALAC\/\/8GrQAAAgQFtAEDAwYBAQgKDDVGtwAAAAAEAgAA"}
00781{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2018,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":44,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1694275755218537,"flow_src_last_pkt_time":1694275755218537,"flow_dst_last_pkt_time":1694275755218537,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275755218537,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51444,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00567{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2018,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":44,"flow_packet_id":1,"flow_src_last_pkt_time":1694275755218537,"flow_dst_last_pkt_time":1694275755218537,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"thread_ts_usec":1694275755218537,"pkt":"EBMx8Tl2nFg8p+7MCABFAABAAABAAEAGAADAqAEdTW\/3Rcj0AbsZWwXAAAAAALAC\/\/8GrQAAAgQFtAEDAwYBAQgK9tU+aQAAAAAEAgAA"}
00549{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2020,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":42,"flow_packet_id":5,"flow_src_last_pkt_time":1694275755199755,"flow_dst_last_pkt_time":1694275755229473,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275755229473,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA0yV5AADYGdOtNb\/dFwKgBHQG7yPLHzMiytnt+74AQAfoEkAAAAQEICpkBL1Q7RNWG"}
01235{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":2021,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":42,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":3,"flow_first_seen":1694275755172671,"flow_src_last_pkt_time":1694275755199755,"flow_dst_last_pkt_time":1694275755230954,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":1440,"midstream":0,"thread_ts_usec":1694275755230954,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51442,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.3","ja3":"6666840c6dacae658c91615526eff942","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00562{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2034,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":43,"flow_packet_id":2,"flow_src_last_pkt_time":1694275755218416,"flow_dst_last_pkt_time":1694275755247149,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1694275755247149,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA8AABAADQGQEJNb\/dFwKgBHQG7yPPwt3LIMRJ3dKAS\/ohQ6wAAAgQFrAQCCAqZAS9mDDVGtwEDAwc="}
00549{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2035,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":43,"flow_packet_id":3,"flow_src_last_pkt_time":1694275755247226,"flow_dst_last_pkt_time":1694275755247149,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275755247226,"pkt":"EBMx8Tl2nFg8p+7MCABFAAA0AABAAEAGAADAqAEdTW\/3RcjzAbsxEnd08LdyyYAQCBYGoQAAAQEICgw1RtOZAS9m"}
01249{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2036,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":43,"flow_packet_id":4,"flow_src_last_pkt_time":1694275755247350,"flow_dst_last_pkt_time":1694275755247149,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"thread_ts_usec":1694275755247350,"pkt":"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"}
01190{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":2036,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":43,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1694275755218416,"flow_src_last_pkt_time":1694275755247350,"flow_dst_last_pkt_time":1694275755247149,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275755247350,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51443,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.2","ja3":"b22f4dc436b0a4d4bf71853f6f750b65","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00562{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2037,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":44,"flow_packet_id":2,"flow_src_last_pkt_time":1694275755218537,"flow_dst_last_pkt_time":1694275755248368,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1694275755248368,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA8AABAADQGQEJNb\/dFwKgBHQG7yPSeqGkrGVsFwaAS\/ohTrgAAAgQFrAQCCAqZAS9m9tU+aQEDAwc="}
00549{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2038,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":44,"flow_packet_id":3,"flow_src_last_pkt_time":1694275755248433,"flow_dst_last_pkt_time":1694275755248368,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275755248433,"pkt":"EBMx8Tl2nFg8p+7MCABFAAA0AABAAEAGAADAqAEdTW\/3Rcj0AbsZWwXBnqhpLIAQCBYGoQAAAQEICvbVPoeZAS9m"}
01247{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2039,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":44,"flow_packet_id":4,"flow_src_last_pkt_time":1694275755248555,"flow_dst_last_pkt_time":1694275755248368,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"thread_ts_usec":1694275755248555,"pkt":"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"}
01190{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":2039,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":44,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1694275755218537,"flow_src_last_pkt_time":1694275755248555,"flow_dst_last_pkt_time":1694275755248368,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275755248555,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51444,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.2","ja3":"0db0f419a58896c0dee4527e22867862","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00549{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2042,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":43,"flow_packet_id":5,"flow_src_last_pkt_time":1694275755247350,"flow_dst_last_pkt_time":1694275755274581,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275755274581,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA0EW1AADQGLt1Nb\/dFwKgBHQG7yPPwt3LJMRJ5eYAQAfp6AgAAAQEICpkBL4EMNUbT"}
01235{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":2043,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":43,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":3,"flow_first_seen":1694275755218416,"flow_src_last_pkt_time":1694275755247350,"flow_dst_last_pkt_time":1694275755275149,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":1440,"midstream":0,"thread_ts_usec":1694275755275149,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51443,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.3","ja3":"b22f4dc436b0a4d4bf71853f6f750b65","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00549{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2046,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":44,"flow_packet_id":5,"flow_src_last_pkt_time":1694275755248555,"flow_dst_last_pkt_time":1694275755275947,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275755275947,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA0tNVAADQGi3RNb\/dFwKgBHQG7yPSeqGksGVsHxoAQAfp8wQAAAQEICpkBL4P21T6H"}
01235{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":2050,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":44,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":3,"flow_first_seen":1694275755218537,"flow_src_last_pkt_time":1694275755248555,"flow_dst_last_pkt_time":1694275755277274,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":1440,"midstream":0,"thread_ts_usec":1694275755277274,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51444,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.3","ja3":"0db0f419a58896c0dee4527e22867862","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
02160{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":2088,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":43,"flow_state":"finished","flow_src_packets_processed":15,"flow_dst_packets_processed":17,"flow_first_seen":1694275755218416,"flow_src_last_pkt_time":1694275755349874,"flow_dst_last_pkt_time":1694275755349765,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1417,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2606,"flow_dst_tot_l4_payload_len":9313,"midstream":0,"thread_ts_usec":1694275755349874,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51443,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"data_analysis": {"iat": {"min":1,"avg":8477.6,"max":41933,"stddev":13035.7,"var":169929040.0,"ent":3.4,"data": [28733,28810,124,27432,568,27899,751,720,296,128,25888,48,1133,15243,41,41933,6,108,146,127,27209,2863,29923,284,1,245,248,248,797,2,853]},"pktlen": {"min":52,"avg":425.1,"max":1492,"stddev":548.5,"var":300824.4,"ent":3.9,"data": [64,60,52,569,52,1492,52,1129,52,116,1469,52,52,52,91,93,52,52,76,52,660,52,1098,52,1492,704,52,1492,52,1492,726,52]},"bins": {"c_to_s": [11,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0],"s_to_c": [7,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0,0,0,0,0,0,0,0,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,4,0,0]},"directions": [0,1,0,0,1,1,0,1,0,0,0,1,1,1,1,1,0,0,1,0,0,1,1,0,1,1,0,1,0,1,1,0],"entropies": [4.209610939,5.179368496,4.774691582,4.431435585,5.063529015,7.849660397,4.774691105,7.813685417,4.736229420,5.936122894,7.856051445,5.025067329,5.025067329,5.025067329,5.982796192,5.960935116,4.813152790,4.813152790,5.708197594,4.760174274,7.601703644,5.025067329,7.811446667,4.774691105,7.878164768,7.722664356,4.813152790,7.861680031,4.813152790,7.862159729,7.756608009,4.813152790]},"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
02169{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":2173,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":44,"flow_state":"finished","flow_src_packets_processed":16,"flow_dst_packets_processed":16,"flow_first_seen":1694275755218537,"flow_src_last_pkt_time":1694275755474480,"flow_dst_last_pkt_time":1694275755477173,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1409,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":3336,"flow_dst_tot_l4_payload_len":4222,"midstream":0,"thread_ts_usec":1694275755477173,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51444,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"data_analysis": {"iat": {"min":1,"avg":16599.3,"max":98727,"stddev":25221.2,"var":636110208.0,"ent":3.6,"data": [29831,29896,122,27579,1327,48,28784,126,253,1,26948,50,14095,65,40762,94,124,130,27112,1236,28283,675,27392,96809,124,98727,36,1194,29729,125,2902]},"pktlen": {"min":52,"avg":288.8,"max":1492,"stddev":419.8,"var":176233.3,"ent":3.9,"data": [64,60,52,569,52,1492,1128,52,52,116,1461,52,52,91,93,52,76,52,608,52,527,52,138,52,172,583,52,52,133,52,105,1098]},"bins": {"c_to_s": [8,1,2,1,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0],"s_to_c": [9,2,1,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,1,0,0]},"directions": [0,1,0,0,1,1,1,0,0,0,0,1,1,1,1,0,1,0,0,1,1,0,0,1,0,0,1,1,1,0,0,1],"entropies": [4.147110939,5.179368496,4.736229897,4.460231304,5.025067329,7.857233524,7.810930252,4.736229897,4.646038055,5.957015991,7.839579105,4.911603451,4.950064659,5.831859112,5.853408813,4.774691105,5.645633221,4.774691105,7.545179844,5.063529015,7.596055508,4.774691105,6.332621574,4.972088814,6.592332363,7.682801247,5.025067806,5.063529015,6.338855743,4.736229420,5.810498714,7.810382843]},"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00781{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2231,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":45,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1694275755591179,"flow_src_last_pkt_time":1694275755591179,"flow_dst_last_pkt_time":1694275755591179,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275755591179,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51449,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00567{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2231,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":45,"flow_packet_id":1,"flow_src_last_pkt_time":1694275755591179,"flow_dst_last_pkt_time":1694275755591179,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"thread_ts_usec":1694275755591179,"pkt":"EBMx8Tl2nFg8p+7MCABFAABAAABAAEAGAADAqAEdTW\/3Rcj5AbtaWrGpAAAAALAC\/\/8GrQAAAgQFtAEDAwYBAQgK4tGJNwAAAAAEAgAA"}
00781{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2233,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":46,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1694275755597605,"flow_src_last_pkt_time":1694275755597605,"flow_dst_last_pkt_time":1694275755597605,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275755597605,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51450,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00567{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2233,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":46,"flow_packet_id":1,"flow_src_last_pkt_time":1694275755597605,"flow_dst_last_pkt_time":1694275755597605,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"thread_ts_usec":1694275755597605,"pkt":"EBMx8Tl2nFg8p+7MCABFAABAAABAAEAGAADAqAEdTW\/3Rcj6Abslx6hHAAAAALAC\/\/8GrQAAAgQFtAEDAwYBAQgKtdkSOAAAAAAEAgAA"}
00781{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2235,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":47,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1694275755603186,"flow_src_last_pkt_time":1694275755603186,"flow_dst_last_pkt_time":1694275755603186,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275755603186,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51451,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00567{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2235,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":47,"flow_packet_id":1,"flow_src_last_pkt_time":1694275755603186,"flow_dst_last_pkt_time":1694275755603186,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"thread_ts_usec":1694275755603186,"pkt":"EBMx8Tl2nFg8p+7MCABFAABAAABAAEAGAADAqAEdTW\/3Rcj7AbsTyBVHAAAAALAC\/\/8GrQAAAgQFtAEDAwYBAQgKc6G7nwAAAAAEAgAA"}
02172{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":2249,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":42,"flow_state":"finished","flow_src_packets_processed":15,"flow_dst_packets_processed":17,"flow_first_seen":1694275755172671,"flow_src_last_pkt_time":1694275755613943,"flow_dst_last_pkt_time":1694275755614159,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1419,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2539,"flow_dst_tot_l4_payload_len":10775,"midstream":0,"thread_ts_usec":1694275755614159,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51442,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"data_analysis": {"iat": {"min":0,"avg":28476.1,"max":207447,"stddev":57513.3,"var":3307776000.0,"ent":2.9,"data": [26902,26963,121,29900,1481,31249,81,125,248,1,25748,1209,169429,1,1,207447,0,42810,141766,173253,84,120,1278,1193,231,237,210,196,90,119,267]},"pktlen": {"min":52,"avg":468.7,"max":1492,"stddev":574.1,"var":329541.2,"ent":4.0,"data": [64,60,52,569,52,1492,52,1127,52,116,1471,52,52,91,93,76,52,591,52,1098,52,498,52,1098,52,1492,52,1492,52,1492,52,1350]},"bins": {"c_to_s": [11,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0],"s_to_c": [6,2,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0,0,0,0,0,0,1,0,0,0,0,4,0,0]},"directions": [0,1,0,0,1,1,0,1,0,0,0,1,1,1,1,1,0,0,1,1,0,1,0,1,0,1,0,1,0,1,0,1],"entropies": [4.209610939,5.246035576,4.736229897,4.445782185,5.101990700,7.858139992,4.813153267,7.810012341,4.774691582,5.942630291,7.861597538,5.063529015,5.101990700,5.967556477,5.777929783,5.602934837,4.813152790,7.591184616,5.140452385,7.832652569,4.774691105,7.585302353,4.813152790,7.814891338,4.774691105,7.866682053,4.813152790,7.861637592,4.813152790,7.840278625,4.813152790,7.855187416]},"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00562{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2256,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":45,"flow_packet_id":2,"flow_src_last_pkt_time":1694275755591179,"flow_dst_last_pkt_time":1694275755617537,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1694275755617537,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA8AABAADQGQEJNb\/dFwKgBHQG7yPns8LUkWlqxqqAS\/oiUQQAAAgQFrAQCCAqZATDZ4tGJNwEDAwc="}
00549{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2257,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":45,"flow_packet_id":3,"flow_src_last_pkt_time":1694275755617582,"flow_dst_last_pkt_time":1694275755617537,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275755617582,"pkt":"EBMx8Tl2nFg8p+7MCABFAAA0AABAAEAGAADAqAEdTW\/3Rcj5AbtaWrGq7PC1JYAQCBYGoQAAAQEICuLRiVKZATDZ"}
01246{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2258,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":45,"flow_packet_id":4,"flow_src_last_pkt_time":1694275755617701,"flow_dst_last_pkt_time":1694275755617537,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"thread_ts_usec":1694275755617701,"pkt":"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"}
01190{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":2258,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":45,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1694275755591179,"flow_src_last_pkt_time":1694275755617701,"flow_dst_last_pkt_time":1694275755617537,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275755617701,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51449,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.2","ja3":"5b895f864c5e0255be1e527a0f8d44b3","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00562{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2263,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":46,"flow_packet_id":2,"flow_src_last_pkt_time":1694275755597605,"flow_dst_last_pkt_time":1694275755623725,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1694275755623725,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA8AABAADQGQEJNb\/dFwKgBHQG7yPrIerr5JceoSKAS\/oiUyAAAAgQFrAQCCAqZATDftdkSOAEDAwc="}
00549{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2264,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":46,"flow_packet_id":3,"flow_src_last_pkt_time":1694275755623772,"flow_dst_last_pkt_time":1694275755623725,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275755623772,"pkt":"EBMx8Tl2nFg8p+7MCABFAAA0AABAAEAGAADAqAEdTW\/3Rcj6Abslx6hIyHq6+oAQCBYGoQAAAQEICrXZElKZATDf"}
01248{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2265,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":46,"flow_packet_id":4,"flow_src_last_pkt_time":1694275755623890,"flow_dst_last_pkt_time":1694275755623725,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"thread_ts_usec":1694275755623890,"pkt":"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"}
01190{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":2265,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":46,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1694275755597605,"flow_src_last_pkt_time":1694275755623890,"flow_dst_last_pkt_time":1694275755623725,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275755623890,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51450,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.2","ja3":"13336f4a1d32920be14b7ab819cf7856","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00781{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2267,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":48,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1694275755624913,"flow_src_last_pkt_time":1694275755624913,"flow_dst_last_pkt_time":1694275755624913,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275755624913,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51452,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00567{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2267,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":48,"flow_packet_id":1,"flow_src_last_pkt_time":1694275755624913,"flow_dst_last_pkt_time":1694275755624913,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"thread_ts_usec":1694275755624913,"pkt":"EBMx8Tl2nFg8p+7MCABFAABAAABAAEAGAADAqAEdTW\/3Rcj8Abvzl+xlAAAAALAC\/\/8GrQAAAgQFtAEDAwYBAQgK4treRwAAAAAEAgAA"}
00562{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2273,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":47,"flow_packet_id":2,"flow_src_last_pkt_time":1694275755603186,"flow_dst_last_pkt_time":1694275755629945,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1694275755629945,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA8AABAADYGPkJNb\/dFwKgBHQG7yPtmlCswE8gVSKAS\/ojEQQAAAgQFrAQCCAqZATDlc6G7nwEDAwc="}
00549{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2274,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":47,"flow_packet_id":3,"flow_src_last_pkt_time":1694275755629981,"flow_dst_last_pkt_time":1694275755629945,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275755629981,"pkt":"EBMx8Tl2nFg8p+7MCABFAAA0AABAAEAGAADAqAEdTW\/3Rcj7AbsTyBVIZpQrMYAQCBYGoQAAAQEICnOhu7qZATDl"}
01247{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2275,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":47,"flow_packet_id":4,"flow_src_last_pkt_time":1694275755630099,"flow_dst_last_pkt_time":1694275755629945,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"thread_ts_usec":1694275755630099,"pkt":"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"}
01190{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":2275,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":47,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1694275755603186,"flow_src_last_pkt_time":1694275755630099,"flow_dst_last_pkt_time":1694275755629945,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275755630099,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51451,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.2","ja3":"24893e4411f07f81c140a8dee7689f4f","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00549{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2278,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":45,"flow_packet_id":5,"flow_src_last_pkt_time":1694275755617701,"flow_dst_last_pkt_time":1694275755644515,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275755644515,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA04MVAADQGX4RNb\/dFwKgBHQG7yPns8LUlWlqzr4AQAfq9WgAAAQEICpkBMPPi0YlS"}
00781{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2280,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":49,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1694275755644863,"flow_src_last_pkt_time":1694275755644863,"flow_dst_last_pkt_time":1694275755644863,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275755644863,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51453,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00568{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2280,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":49,"flow_packet_id":1,"flow_src_last_pkt_time":1694275755644863,"flow_dst_last_pkt_time":1694275755644863,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"thread_ts_usec":1694275755644863,"pkt":"EBMx8Tl2nFg8p+7MCABFAABAAABAAEAGAADAqAEdTW\/3Rcj9Abt\/JbSWAAAAALAC\/\/8GrQAAAgQFtAEDAwYBAQgKYGFwSwAAAAAEAgAA"}
01235{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":2281,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":45,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":3,"flow_first_seen":1694275755591179,"flow_src_last_pkt_time":1694275755617701,"flow_dst_last_pkt_time":1694275755645050,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":1440,"midstream":0,"thread_ts_usec":1694275755645050,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51449,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.3","ja3":"5b895f864c5e0255be1e527a0f8d44b3","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00549{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2287,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":46,"flow_packet_id":5,"flow_src_last_pkt_time":1694275755623890,"flow_dst_last_pkt_time":1694275755649436,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275755649436,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA0a2lAADQG1OBNb\/dFwKgBHQG7yPrIerr6JceqTYAQAfq94gAAAQEICpkBMPm12RJS"}
01235{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":2288,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":46,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":3,"flow_first_seen":1694275755597605,"flow_src_last_pkt_time":1694275755623890,"flow_dst_last_pkt_time":1694275755651006,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":1440,"midstream":0,"thread_ts_usec":1694275755651006,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51450,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.3","ja3":"13336f4a1d32920be14b7ab819cf7856","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00562{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2297,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":48,"flow_packet_id":2,"flow_src_last_pkt_time":1694275755624913,"flow_dst_last_pkt_time":1694275755652295,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1694275755652295,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA8AABAADQGQEJNb\/dFwKgBHQG7yPw7GJOu85fsZqAS\/og+WAAAAgQFrAQCCAqZATD74treRwEDAwc="}
00549{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2298,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":48,"flow_packet_id":3,"flow_src_last_pkt_time":1694275755652361,"flow_dst_last_pkt_time":1694275755652295,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275755652361,"pkt":"EBMx8Tl2nFg8p+7MCABFAAA0AABAAEAGAADAqAEdTW\/3Rcj8Abvzl+xmOxiTr4AQCBYGoQAAAQEICuLa3mOZATD7"}
01249{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2299,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":48,"flow_packet_id":4,"flow_src_last_pkt_time":1694275755652483,"flow_dst_last_pkt_time":1694275755652295,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"thread_ts_usec":1694275755652483,"pkt":"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"}
01190{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":2299,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":48,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1694275755624913,"flow_src_last_pkt_time":1694275755652483,"flow_dst_last_pkt_time":1694275755652295,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275755652483,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51452,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.2","ja3":"21da300403df11ae32db088408a85dc4","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00549{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2301,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":47,"flow_packet_id":5,"flow_src_last_pkt_time":1694275755630099,"flow_dst_last_pkt_time":1694275755656946,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275755656946,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA0J2FAADYGFulNb\/dFwKgBHQG7yPtmlCsxE8gXTYAQAfrtWQAAAQEICpkBMQBzobu6"}
01235{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":2302,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":47,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":3,"flow_first_seen":1694275755603186,"flow_src_last_pkt_time":1694275755630099,"flow_dst_last_pkt_time":1694275755658497,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":1440,"midstream":0,"thread_ts_usec":1694275755658497,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51451,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.3","ja3":"24893e4411f07f81c140a8dee7689f4f","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00562{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2313,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":49,"flow_packet_id":2,"flow_src_last_pkt_time":1694275755644863,"flow_dst_last_pkt_time":1694275755673430,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1694275755673430,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA8AABAADYGPkJNb\/dFwKgBHQG7yP2vUhtKfyW0l6AS\/ojfJAAAAgQFrAQCCAqZATEPYGFwSwEDAwc="}
00550{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2314,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":49,"flow_packet_id":3,"flow_src_last_pkt_time":1694275755673505,"flow_dst_last_pkt_time":1694275755673430,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275755673505,"pkt":"EBMx8Tl2nFg8p+7MCABFAAA0AABAAEAGAADAqAEdTW\/3Rcj9Abt\/JbSXr1IbS4AQCBYGoQAAAQEICmBhcGeZATEP"}
01248{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2315,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":49,"flow_packet_id":4,"flow_src_last_pkt_time":1694275755673634,"flow_dst_last_pkt_time":1694275755673430,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"thread_ts_usec":1694275755673634,"pkt":"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"}
01190{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":2315,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":49,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1694275755644863,"flow_src_last_pkt_time":1694275755673634,"flow_dst_last_pkt_time":1694275755673430,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275755673634,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51453,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.2","ja3":"ef6e2a9a1f67eb7b02766703f54ce119","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00549{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2325,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":48,"flow_packet_id":5,"flow_src_last_pkt_time":1694275755652483,"flow_dst_last_pkt_time":1694275755679588,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275755679588,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA0x6FAADQGeKhNb\/dFwKgBHQG7yPw7GJOv85fua4AQAfpnbwAAAQEICpkBMRbi2t5j"}
01235{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":2326,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":48,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":3,"flow_first_seen":1694275755624913,"flow_src_last_pkt_time":1694275755652483,"flow_dst_last_pkt_time":1694275755680066,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":1440,"midstream":0,"thread_ts_usec":1694275755680066,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51452,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.3","ja3":"21da300403df11ae32db088408a85dc4","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00549{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2340,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":49,"flow_packet_id":5,"flow_src_last_pkt_time":1694275755673634,"flow_dst_last_pkt_time":1694275755700731,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275755700731,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA0sN1AADYGjWxNb\/dFwKgBHQG7yP2vUhtLfyW2nIAQAfoIOwAAAQEICpkBMStgYXBn"}
01235{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":2341,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":49,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":3,"flow_first_seen":1694275755644863,"flow_src_last_pkt_time":1694275755673634,"flow_dst_last_pkt_time":1694275755702233,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":1440,"midstream":0,"thread_ts_usec":1694275755702233,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51453,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.3","ja3":"ef6e2a9a1f67eb7b02766703f54ce119","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
02168{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":2379,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":45,"flow_state":"finished","flow_src_packets_processed":16,"flow_dst_packets_processed":16,"flow_first_seen":1694275755591179,"flow_src_last_pkt_time":1694275755734383,"flow_dst_last_pkt_time":1694275755734310,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1407,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":3172,"flow_dst_tot_l4_payload_len":6067,"midstream":0,"thread_ts_usec":1694275755734383,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51449,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"data_analysis": {"iat": {"min":0,"avg":9236.6,"max":31972,"stddev":12441.7,"var":154796832.0,"ent":3.6,"data": [26358,26403,119,26978,535,27389,852,861,254,0,25874,1241,5086,31972,77,55,125,128,26000,1592,27438,118,120,294,291,271,123,25492,1251,1328,27710]},"pktlen": {"min":52,"avg":341.3,"max":1492,"stddev":465.2,"var":216385.7,"ent":3.9,"data": [64,60,52,569,52,1492,52,1128,52,116,1459,52,52,91,52,93,76,52,591,52,1098,52,1098,52,1185,52,154,595,52,52,274,52]},"bins": {"c_to_s": [10,0,1,1,0,0,0,0,0,0,0,0,0,0,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0],"s_to_c": [8,2,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0,1,0,0,0,0,0,0,0,0,0,1,0,0]},"directions": [0,1,0,0,1,1,0,1,0,0,0,1,1,1,0,1,1,0,0,1,1,0,1,0,1,0,0,0,1,1,1,0],"entropies": [4.178360939,5.246035099,4.736229897,4.450769901,5.010550499,7.831455231,4.774691582,7.821967602,4.736229897,5.812989712,7.870883465,4.948144436,4.909682751,5.871349335,4.774691105,5.904536724,5.655566216,4.774691582,7.625833035,4.948144436,7.843266964,4.697768211,7.834841251,4.697768211,7.848744392,4.697768211,6.287255287,7.592099667,4.986606121,5.063529491,7.216260910,4.774691582]},"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
02156{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":2383,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":46,"flow_state":"finished","flow_src_packets_processed":16,"flow_dst_packets_processed":16,"flow_first_seen":1694275755597605,"flow_src_last_pkt_time":1694275755713599,"flow_dst_last_pkt_time":1694275755739336,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1409,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":3510,"flow_dst_tot_l4_payload_len":3095,"midstream":0,"thread_ts_usec":1694275755739336,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51450,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"data_analysis": {"iat": {"min":0,"avg":8313.7,"max":34384,"stddev":12122.2,"var":146947904.0,"ent":3.4,"data": [26120,26167,118,25711,1570,27175,107,127,259,0,25689,37,1216,7698,47,34384,92,136,131,25849,1397,27101,130,125,1,139,1,24899,84,1176,39]},"pktlen": {"min":52,"avg":259.0,"max":1492,"stddev":395.4,"var":156313.4,"ent":3.9,"data": [64,60,52,569,52,1492,52,1128,52,116,1461,52,52,52,91,93,52,76,52,608,52,527,52,138,172,603,155,156,52,52,52,52]},"bins": {"c_to_s": [7,0,2,3,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0],"s_to_c": [11,2,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,1,0,0]},"directions": [0,1,0,0,1,1,0,1,0,0,0,1,1,1,1,1,0,1,0,0,1,1,0,0,0,0,0,0,1,1,1,1],"entropies": [4.178360939,5.133453369,4.659306526,4.424107075,4.933627605,7.842966080,4.659306526,7.815097809,4.697768211,5.880172253,7.882228851,5.025067329,4.986605644,5.063529015,5.903180122,5.794164658,4.736229897,5.497671604,4.736229897,7.663942814,5.063529015,7.601342678,4.736229897,6.248495102,6.650170803,7.628144741,6.482193947,6.486794472,4.986605644,4.909682274,4.986605644,4.948143959]},"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
02165{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":2437,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":48,"flow_state":"finished","flow_src_packets_processed":17,"flow_dst_packets_processed":15,"flow_first_seen":1694275755624913,"flow_src_last_pkt_time":1694275755770788,"flow_dst_last_pkt_time":1694275755770628,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1417,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":3302,"flow_dst_tot_l4_payload_len":3177,"midstream":0,"thread_ts_usec":1694275755770788,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51452,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"data_analysis": {"iat": {"min":43,"avg":9406.1,"max":33781,"stddev":12793.0,"var":163659648.0,"ent":3.6,"data": [27382,27448,122,27293,478,27639,107,126,188,128,26067,466,7577,48,33781,141,1198,1103,126,27510,414,27780,313,119,120,26168,43,846,118,26619,122]},"pktlen": {"min":52,"avg":255.1,"max":1492,"stddev":395.4,"var":156328.1,"ent":3.8,"data": [64,60,52,569,52,1492,52,1129,52,116,1469,52,52,91,93,52,52,76,52,612,52,527,52,138,172,537,52,52,52,133,52,105]},"bins": {"c_to_s": [9,1,2,1,0,0,0,0,0,0,0,0,0,0,0,1,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0],"s_to_c": [9,2,1,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,1,0,0]},"directions": [0,1,0,0,1,1,0,1,0,0,0,1,1,1,1,0,0,1,0,0,1,1,0,0,0,0,1,1,1,1,0,0],"entropies": [4.209610939,5.279368401,4.774691582,4.425284386,5.025067329,7.843840599,4.774691105,7.790525913,4.813152790,5.903921127,7.861433029,5.063529491,5.049012184,6.057025433,5.917924881,4.736229897,4.736229897,5.619317532,4.774691582,7.620691299,5.063529491,7.641309261,4.813152790,6.272734165,6.614942074,7.499053478,5.063529491,5.025067329,5.063529015,6.509944439,4.774691582,5.864982128]},"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00781{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2443,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":50,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1694275755774249,"flow_src_last_pkt_time":1694275755774249,"flow_dst_last_pkt_time":1694275755774249,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275755774249,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51454,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00567{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2443,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":50,"flow_packet_id":1,"flow_src_last_pkt_time":1694275755774249,"flow_dst_last_pkt_time":1694275755774249,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"thread_ts_usec":1694275755774249,"pkt":"EBMx8Tl2nFg8p+7MCABFAABAAABAAEAGAADAqAEdTW\/3Rcj+AbvXXEehAAAAALAC\/\/8GrQAAAgQFtAEDAwYBAQgK7FSJ4gAAAAAEAgAA"}
00562{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2450,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":50,"flow_packet_id":2,"flow_src_last_pkt_time":1694275755774249,"flow_dst_last_pkt_time":1694275755805902,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1694275755805902,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA8AABAADYGPkJNb\/dFwKgBHQG7yP6NE3Ex11xHoqAS\/ogaLQAAAgQFrAQCCAqZATGR7FSJ4gEDAwc="}
00549{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2451,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":50,"flow_packet_id":3,"flow_src_last_pkt_time":1694275755806023,"flow_dst_last_pkt_time":1694275755805902,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275755806023,"pkt":"EBMx8Tl2nFg8p+7MCABFAAA0AABAAEAGAADAqAEdTW\/3Rcj+AbvXXEeijRNxMoAQCBYGoQAAAQEICuxUigKZATGR"}
01247{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2452,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":50,"flow_packet_id":4,"flow_src_last_pkt_time":1694275755806268,"flow_dst_last_pkt_time":1694275755805902,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"thread_ts_usec":1694275755806268,"pkt":"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"}
01190{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":2452,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":50,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1694275755774249,"flow_src_last_pkt_time":1694275755806268,"flow_dst_last_pkt_time":1694275755805902,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275755806268,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51454,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.2","ja3":"b9673546747d1952575dd5a057ad34e4","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00549{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2459,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":50,"flow_packet_id":5,"flow_src_last_pkt_time":1694275755806268,"flow_dst_last_pkt_time":1694275755837073,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275755837073,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA0z9BAADYGbnlNb\/dFwKgBHQG7yP6NE3Ey11xJp4AQAfpDPAAAAQEICpkBMbDsVIoC"}
01235{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":2462,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":50,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":3,"flow_first_seen":1694275755774249,"flow_src_last_pkt_time":1694275755806268,"flow_dst_last_pkt_time":1694275755838478,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":1440,"midstream":0,"thread_ts_usec":1694275755838478,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51454,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.3","ja3":"b9673546747d1952575dd5a057ad34e4","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
02171{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":2502,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":47,"flow_state":"finished","flow_src_packets_processed":16,"flow_dst_packets_processed":16,"flow_first_seen":1694275755603186,"flow_src_last_pkt_time":1694275756014048,"flow_dst_last_pkt_time":1694275756014007,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1419,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2539,"flow_dst_tot_l4_payload_len":9684,"midstream":0,"thread_ts_usec":1694275756014048,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51451,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"data_analysis": {"iat": {"min":2,"avg":26505.9,"max":177926,"stddev":53972.7,"var":2913053696.0,"ent":2.9,"data": [26759,26795,118,27001,1551,46,28496,132,175,128,25738,41,152514,31,61,177926,5,125,123,26062,149084,174977,1329,1279,230,2,212,261,250,111,121]},"pktlen": {"min":52,"avg":434.6,"max":1492,"stddev":557.9,"var":311277.2,"ent":3.9,"data": [64,60,52,569,52,1492,1128,52,52,116,1471,52,52,91,93,76,52,52,52,591,52,1098,52,1098,52,1492,704,52,1492,52,1492,52]},"bins": {"c_to_s": [12,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0],"s_to_c": [6,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,2,1,0,0,0,0,0,0,0,0,0,0,0,4,0,0]},"directions": [0,1,0,0,1,1,1,0,0,0,0,1,1,1,1,1,0,0,0,0,1,1,0,1,0,1,1,0,1,0,1,0],"entropies": [4.147110939,5.212701797,4.659306526,4.448028564,4.911602974,7.852905273,7.816896915,4.584303856,4.584303856,5.874025345,7.854696274,5.063529015,5.025067329,5.806972980,5.845292091,5.602934361,4.697768211,4.697768211,4.697768211,7.632014751,5.101990700,7.819012642,4.736229420,7.817387581,4.697767735,7.876556396,7.676926613,4.683250904,7.875154495,4.736229420,7.877687454,4.736229420]},"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00781{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2519,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":51,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1694275756080159,"flow_src_last_pkt_time":1694275756080159,"flow_dst_last_pkt_time":1694275756080159,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275756080159,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51455,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00568{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2519,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":51,"flow_packet_id":1,"flow_src_last_pkt_time":1694275756080159,"flow_dst_last_pkt_time":1694275756080159,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"thread_ts_usec":1694275756080159,"pkt":"EBMx8Tl2nFg8p+7MCABFAABAAABAAEAGAADAqAEdTW\/3Rcj\/Abt3vHaUAAAAALAC\/\/8GrQAAAgQFtAEDAwYBAQgKlsYSZQAAAAAEAgAA"}
00781{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2521,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":52,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1694275756081462,"flow_src_last_pkt_time":1694275756081462,"flow_dst_last_pkt_time":1694275756081462,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275756081462,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51456,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00567{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2521,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":52,"flow_packet_id":1,"flow_src_last_pkt_time":1694275756081462,"flow_dst_last_pkt_time":1694275756081462,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"thread_ts_usec":1694275756081462,"pkt":"EBMx8Tl2nFg8p+7MCABFAABAAABAAEAGAADAqAEdTW\/3RckAAbu7rSimAAAAALAC\/\/8GrQAAAgQFtAEDAwYBAQgKF4gg1QAAAAAEAgAA"}
00563{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2531,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":52,"flow_packet_id":2,"flow_src_last_pkt_time":1694275756081462,"flow_dst_last_pkt_time":1694275756108504,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1694275756108504,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA8AABAADYGPkJNb\/dFwKgBHQG7yQBQuQp\/u60op6AS\/og0igAAAgQFrAQCCAqZATLDF4gg1QEDAwc="}
00549{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2532,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":52,"flow_packet_id":3,"flow_src_last_pkt_time":1694275756108597,"flow_dst_last_pkt_time":1694275756108504,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275756108597,"pkt":"EBMx8Tl2nFg8p+7MCABFAAA0AABAAEAGAADAqAEdTW\/3RckAAbu7rSinULkKgIAQCBYGoQAAAQEICheIIPCZATLD"}
00562{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2533,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":51,"flow_packet_id":2,"flow_src_last_pkt_time":1694275756080159,"flow_dst_last_pkt_time":1694275756108690,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1694275756108690,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA8AABAADYGPkJNb\/dFwKgBHQG7yP+UKzdid7x2laAS\/ohJawAAAgQFrAQCCAqZATLClsYSZQEDAwc="}
00550{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2534,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":51,"flow_packet_id":3,"flow_src_last_pkt_time":1694275756108729,"flow_dst_last_pkt_time":1694275756108690,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275756108729,"pkt":"EBMx8Tl2nFg8p+7MCABFAAA0AABAAEAGAADAqAEdTW\/3Rcj\/Abt3vHaVlCs3Y4AQCBYGoQAAAQEICpbGEoKZATLC"}
01246{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2535,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":52,"flow_packet_id":4,"flow_src_last_pkt_time":1694275756108850,"flow_dst_last_pkt_time":1694275756108504,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"thread_ts_usec":1694275756108850,"pkt":"EBMx8Tl2nFg8p+7MCABFAAI5AABAAEAGAADAqAEdTW\/3RckAAbu7rSinULkKgIAYCBYIpgAAAQEICheIIPCZATLDFgMBAgABAAH8AwOM7K9r300z2h3rvxRH7Rl9yxRzM1Eajc3TrkdtPvoZhSClQjBmN3Q61Yy+jBa3DuhmcxxZUH\/3ij1QjPpb\/CvGqAAgGhoTARMCEwPAK8AvwCzAMMypzKjAE8AUAJwAnQAvADUBAAGTiooAAERpAAUAAwJoMv8BAAEAAAAAFwAVAAASZXUwLnNlYy10dW5uZWwuY29tACsABwb6+gMEAwMAGwADAgACACMAAAAFAAUBAAAAAAAXAAAACgAKAAhqagAdABcAGAASAAAAMwArAClqagABAAAdACCf1Sjjo7JDU2jqP41GT6oPNZbdTh1FSwoBDhmpDiSgUQANABIAEAQDCAQEAQUDCAUFAQgGBgEAEAAOAAwCaDIIaHR0cC8xLjEALQACAQEACwACAQD6+gABAAAVAMUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="}
01190{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":2535,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":52,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1694275756081462,"flow_src_last_pkt_time":1694275756108850,"flow_dst_last_pkt_time":1694275756108504,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275756108850,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51456,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.2","ja3":"bee75f12c56aaceb252c1f9ace4b1cfd","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
01246{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2536,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":51,"flow_packet_id":4,"flow_src_last_pkt_time":1694275756108979,"flow_dst_last_pkt_time":1694275756108690,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"thread_ts_usec":1694275756108979,"pkt":"EBMx8Tl2nFg8p+7MCABFAAI5AABAAEAGAADAqAEdTW\/3Rcj\/Abt3vHaVlCs3Y4AYCBYIpgAAAQEICpbGEoKZATLCFgMBAgABAAH8AwPXTqsLkJaS8zXGTCy1QJTfEgiACXVjVo5t8xtkmY0qsSCMuGesL6fk78zK5qVbvLRqUWqXlbnvKiVC8Se7EZCa2gAgOjoTARMCEwPAK8AvwCzAMMypzKjAE8AUAJwAnQAvADUBAAGTGhoAAAAjAAAAEgAAABcAAAAKAAoACHp6AB0AFwAYADMAKwApenoAAQAAHQAgw5SV1kcLdXMNO11pOT8xJb6deEH4NnMba76OAOnl6WREaQAFAAMCaDIACwACAQD\/AQABAAAtAAIBAQANABIAEAQDCAQEAQUDCAUFAQgGBgEAEAAOAAwCaDIIaHR0cC8xLjEABQAFAQAAAAAAGwADAgACAAAAFwAVAAASZXUwLnNlYy10dW5uZWwuY29tACsABwZqagMEAwPKygABAAAVAMUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="}
01190{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":2536,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":51,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1694275756080159,"flow_src_last_pkt_time":1694275756108979,"flow_dst_last_pkt_time":1694275756108690,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275756108979,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51455,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.2","ja3":"16c00cfec64cfdd4975fc3e3c286e38c","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00549{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2577,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":52,"flow_packet_id":5,"flow_src_last_pkt_time":1694275756108850,"flow_dst_last_pkt_time":1694275756136634,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275756136634,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA0YjtAADYG3A5Nb\/dFwKgBHQG7yQBQuQqAu60qrIAQAfpdoQAAAQEICpkBMt8XiCDw"}
01235{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":2579,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":52,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":3,"flow_first_seen":1694275756081462,"flow_src_last_pkt_time":1694275756108850,"flow_dst_last_pkt_time":1694275756136942,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":1440,"midstream":0,"thread_ts_usec":1694275756136942,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51456,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.3","ja3":"bee75f12c56aaceb252c1f9ace4b1cfd","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00550{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2583,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":51,"flow_packet_id":5,"flow_src_last_pkt_time":1694275756108979,"flow_dst_last_pkt_time":1694275756137319,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275756137319,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA0QAdAADYG\/kJNb\/dFwKgBHQG7yP+UKzdjd7x4moAQAfpyfwAAAQEICpkBMt+WxhKC"}
01235{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":2586,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":51,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":3,"flow_first_seen":1694275756080159,"flow_src_last_pkt_time":1694275756108979,"flow_dst_last_pkt_time":1694275756138504,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":1440,"midstream":0,"thread_ts_usec":1694275756138504,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51455,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.3","ja3":"16c00cfec64cfdd4975fc3e3c286e38c","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00781{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2620,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":53,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1694275756164882,"flow_src_last_pkt_time":1694275756164882,"flow_dst_last_pkt_time":1694275756164882,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275756164882,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51457,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00567{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2620,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":53,"flow_packet_id":1,"flow_src_last_pkt_time":1694275756164882,"flow_dst_last_pkt_time":1694275756164882,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"thread_ts_usec":1694275756164882,"pkt":"EBMx8Tl2nFg8p+7MCABFAABAAABAAEAGAADAqAEdTW\/3RckBAbuE6sSOAAAAALAC\/\/8GrQAAAgQFtAEDAwYBAQgKUA6QSwAAAAAEAgAA"}
00781{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2637,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":54,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1694275756187552,"flow_src_last_pkt_time":1694275756187552,"flow_dst_last_pkt_time":1694275756187552,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275756187552,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51458,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00567{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2637,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":54,"flow_packet_id":1,"flow_src_last_pkt_time":1694275756187552,"flow_dst_last_pkt_time":1694275756187552,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"thread_ts_usec":1694275756187552,"pkt":"EBMx8Tl2nFg8p+7MCABFAABAAABAAEAGAADAqAEdTW\/3RckCAbucGNUrAAAAALAC\/\/8GrQAAAgQFtAEDAwYBAQgKvI36SAAAAAAEAgAA"}
02177{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":2641,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":8,"flow_state":"finished","flow_src_packets_processed":16,"flow_dst_packets_processed":16,"flow_first_seen":1694275753009120,"flow_src_last_pkt_time":1694275756164761,"flow_dst_last_pkt_time":1694275756191079,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1425,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2631,"flow_dst_tot_l4_payload_len":5434,"midstream":0,"thread_ts_usec":1694275756191079,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51405,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"data_analysis": {"iat": {"min":0,"avg":204438.7,"max":3028448,"stddev":738279.9,"var":545057275904.0,"ent":1.4,"data": [32964,32996,273,26592,1082,27406,144,136,285,120,25958,1124,8873,77,35629,68,119,0,26186,2068,28216,70,1,121,490,28240,27689,64,125,3002036,3028448]},"pktlen": {"min":52,"avg":304.7,"max":1492,"stddev":439.9,"var":193493.4,"ent":3.9,"data": [64,60,52,569,52,1492,52,1128,52,116,1477,52,52,91,93,52,76,52,591,52,1098,52,1098,453,52,138,253,52,148,52,52,76]},"bins": {"c_to_s": [11,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0],"s_to_c": [7,2,0,1,0,0,1,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0,0,0,0,0,0,0,0,0,0,0,1,0,0]},"directions": [0,1,0,0,1,1,0,1,0,0,0,1,1,1,1,0,1,0,0,1,1,0,1,1,0,0,1,0,1,0,0,1],"entropies": [4.209610939,5.246035099,4.774691582,4.420200825,5.025067806,7.829051495,4.774691582,7.819931984,4.774691582,5.987846851,7.875611782,4.983880997,4.908878326,5.871349335,5.923196793,4.774691105,5.708197594,4.774691105,7.636032581,4.986606121,7.818279266,4.736229420,7.801599503,7.569772243,4.736229897,6.311936855,7.068438053,4.774691582,6.574057102,4.721713066,4.554598331,5.645633221]},"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00781{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2646,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":55,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1694275756191905,"flow_src_last_pkt_time":1694275756191905,"flow_dst_last_pkt_time":1694275756191905,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275756191905,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51459,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00567{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2646,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":55,"flow_packet_id":1,"flow_src_last_pkt_time":1694275756191905,"flow_dst_last_pkt_time":1694275756191905,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"thread_ts_usec":1694275756191905,"pkt":"EBMx8Tl2nFg8p+7MCABFAABAAABAAEAGAADAqAEdTW\/3RckDAbvYAmV1AAAAALAC\/\/8GrQAAAgQFtAEDAwYBAQgKDFmkGwAAAAAEAgAA"}
00562{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2653,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":53,"flow_packet_id":2,"flow_src_last_pkt_time":1694275756164882,"flow_dst_last_pkt_time":1694275756192719,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1694275756192719,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA8AABAADQGQEJNb\/dFwKgBHQG7yQFLPB7PhOrEj6AS\/ogYQAAAAgQFrAQCCAqZATMXUA6QSwEDAwc="}
00533{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2654,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":53,"flow_packet_id":3,"flow_src_last_pkt_time":1694275756192739,"flow_dst_last_pkt_time":1694275756192719,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1694275756192739,"pkt":"EBMx8Tl2nFg8p+7MCABFAAAoAABAAEAGAADAqAEdTW\/3RckBAbuE6sSPAAAAAFAEAAAGlQAA"}
02166{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":2683,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":52,"flow_state":"finished","flow_src_packets_processed":16,"flow_dst_packets_processed":16,"flow_first_seen":1694275756081462,"flow_src_last_pkt_time":1694275756197896,"flow_dst_last_pkt_time":1694275756197489,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1415,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2757,"flow_dst_tot_l4_payload_len":7806,"midstream":0,"thread_ts_usec":1694275756197896,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51456,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"data_analysis": {"iat": {"min":1,"avg":7498.7,"max":29172,"stddev":11790.7,"var":139021392.0,"ent":3.3,"data": [27042,27135,253,28130,308,28116,318,342,332,119,25709,1248,2682,29172,43,72,124,122,26046,2216,12,28139,226,234,133,1,118,1841,1868,239,121]},"pktlen": {"min":52,"avg":382.7,"max":1492,"stddev":493.6,"var":243675.8,"ent":4.0,"data": [64,60,52,569,52,1492,52,1129,52,116,1467,52,52,91,52,93,76,52,591,52,1098,498,52,1098,52,1492,280,52,1031,52,154,172]},"bins": {"c_to_s": [10,0,1,2,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0],"s_to_c": [6,2,0,0,0,0,0,1,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,2,1,0,0,0,0,0,0,0,0,0,0,0,2,0,0]},"directions": [0,1,0,0,1,1,0,1,0,0,0,1,1,1,0,1,1,0,0,1,1,1,0,1,0,1,1,0,1,0,0,0],"entropies": [4.057611465,5.140226364,4.569115162,4.404561043,4.950064659,7.834033489,4.646038055,7.817556381,4.684499741,5.905292034,7.874547005,4.988526344,4.950064659,5.827393532,4.646038055,5.989033699,5.601069927,4.646038055,7.663946152,4.950064659,7.823734760,7.493938446,4.646038055,7.819445610,4.684499741,7.867714405,7.130248070,4.684499741,7.799648762,4.646038055,6.450882912,6.556802750]},"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
02171{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":2699,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":50,"flow_state":"finished","flow_src_packets_processed":15,"flow_dst_packets_processed":17,"flow_first_seen":1694275755774249,"flow_src_last_pkt_time":1694275756207687,"flow_dst_last_pkt_time":1694275756207582,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1415,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2535,"flow_dst_tot_l4_payload_len":9100,"midstream":0,"thread_ts_usec":1694275756207687,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51454,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"data_analysis": {"iat": {"min":1,"avg":27960.4,"max":189078,"stddev":55173.8,"var":3044153088.0,"ent":3.0,"data": [31653,31774,245,31171,1405,32268,101,124,448,124,30661,1238,157604,35,61,189078,8,296,34803,142830,177289,211,153,1171,1,1182,327,2,319,59,130]},"pktlen": {"min":52,"avg":416.2,"max":1492,"stddev":521.0,"var":271438.6,"ent":4.0,"data": [64,60,52,569,52,1492,52,1128,52,116,1467,52,52,91,93,76,52,52,591,52,1098,52,1098,52,1492,528,52,1492,704,52,432,52]},"bins": {"c_to_s": [11,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0],"s_to_c": [6,2,0,0,0,0,0,0,0,0,0,1,0,0,1,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,2,1,0,0,0,0,0,0,0,0,0,0,0,3,0,0]},"directions": [0,1,0,0,1,1,0,1,0,0,0,1,1,1,1,1,0,0,0,1,1,0,1,0,1,1,0,1,1,0,1,0],"entropies": [4.209610939,5.246035099,4.774691582,4.416579723,5.140452385,7.839653492,4.813152790,7.785371780,4.760174274,5.936122894,7.846436977,5.063529015,5.063529015,5.879644871,5.969053268,5.602934837,4.736229897,4.697768211,7.620181084,5.101990700,7.843691349,4.813152790,7.822920799,4.813152790,7.851342678,7.594365120,4.774691105,7.855309486,7.713972569,4.813152790,7.540598392,4.774691105]},"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00563{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2704,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":54,"flow_packet_id":2,"flow_src_last_pkt_time":1694275756187552,"flow_dst_last_pkt_time":1694275756214646,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1694275756214646,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA8AABAADQGQEJNb\/dFwKgBHQG7yQKNKt9\/nBjVLKAS\/ogXQgAAAgQFrAQCCAqZATMtvI36SAEDAwc="}
00549{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2705,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":54,"flow_packet_id":3,"flow_src_last_pkt_time":1694275756214771,"flow_dst_last_pkt_time":1694275756214646,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275756214771,"pkt":"EBMx8Tl2nFg8p+7MCABFAAA0AABAAEAGAADAqAEdTW\/3RckCAbucGNUsjSrfgIAQCBYGoQAAAQEICryN+mOZATMt"}
01246{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2706,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":54,"flow_packet_id":4,"flow_src_last_pkt_time":1694275756214911,"flow_dst_last_pkt_time":1694275756214646,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"thread_ts_usec":1694275756214911,"pkt":"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"}
01190{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":2706,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":54,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1694275756187552,"flow_src_last_pkt_time":1694275756214911,"flow_dst_last_pkt_time":1694275756214646,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275756214911,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51458,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.2","ja3":"596e09444efe3757f9974d243d25949b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00562{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2723,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":55,"flow_packet_id":2,"flow_src_last_pkt_time":1694275756191905,"flow_dst_last_pkt_time":1694275756219595,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1694275756219595,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA8AABAADQGQEJNb\/dFwKgBHQG7yQOThP8U2AJldqAS\/ogrewAAAgQFrAQCCAqZATMyDFmkGwEDAwc="}
00550{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2724,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":55,"flow_packet_id":3,"flow_src_last_pkt_time":1694275756219633,"flow_dst_last_pkt_time":1694275756219595,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275756219633,"pkt":"EBMx8Tl2nFg8p+7MCABFAAA0AABAAEAGAADAqAEdTW\/3RckDAbvYAmV2k4T\/FYAQCBYGoQAAAQEICgxZpDeZATMy"}
01249{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2725,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":55,"flow_packet_id":4,"flow_src_last_pkt_time":1694275756219808,"flow_dst_last_pkt_time":1694275756219595,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"thread_ts_usec":1694275756219808,"pkt":"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"}
01190{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":2725,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":55,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1694275756191905,"flow_src_last_pkt_time":1694275756219808,"flow_dst_last_pkt_time":1694275756219595,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275756219808,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51459,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.2","ja3":"b8ba2f6d9b71a289e9da715328744d81","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00549{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2741,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":54,"flow_packet_id":5,"flow_src_last_pkt_time":1694275756214911,"flow_dst_last_pkt_time":1694275756242245,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275756242245,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA0hZxAADQGuq1Nb\/dFwKgBHQG7yQKNKt+AnBjXMYAQAfpAWgAAAQEICpkBM0i8jfpj"}
01235{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":2742,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":54,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":3,"flow_first_seen":1694275756187552,"flow_src_last_pkt_time":1694275756214911,"flow_dst_last_pkt_time":1694275756242648,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":1440,"midstream":0,"thread_ts_usec":1694275756242648,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51458,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.3","ja3":"596e09444efe3757f9974d243d25949b","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
02167{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":2748,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":51,"flow_state":"finished","flow_src_packets_processed":17,"flow_dst_packets_processed":15,"flow_first_seen":1694275756080159,"flow_src_last_pkt_time":1694275756218848,"flow_dst_last_pkt_time":1694275756245531,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1427,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":3189,"flow_dst_tot_l4_payload_len":5886,"midstream":0,"thread_ts_usec":1694275756245531,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51455,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"data_analysis": {"iat": {"min":5,"avg":9808.4,"max":40366,"stddev":13809.4,"var":190699552.0,"ent":3.5,"data": [28531,28570,250,28629,1185,29555,134,124,267,118,26941,101,1109,12512,89,40366,5,43,124,125,28603,7847,36269,163,146,214,213,1933,252,372,29271]},"pktlen": {"min":52,"avg":336.2,"max":1492,"stddev":468.3,"var":219266.8,"ent":3.9,"data": [64,60,52,569,52,1492,52,1127,52,116,1479,52,52,52,91,93,52,52,76,52,591,52,1098,52,1098,52,1227,52,154,172,472,52]},"bins": {"c_to_s": [10,0,1,2,0,0,0,0,0,0,0,0,0,1,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0],"s_to_c": [8,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0,0,1,0,0,0,0,0,0,0,0,1,0,0]},"directions": [0,1,0,0,1,1,0,1,0,0,0,1,1,1,1,1,0,0,1,0,0,1,1,0,1,0,1,0,0,0,0,1],"entropies": [4.166565418,5.279368877,4.774691582,4.430949211,5.101990700,7.842145920,4.774691105,7.799477100,4.813152790,5.983621120,7.876667023,5.025067806,5.063529015,5.063529015,5.960818291,5.831904411,4.774691105,4.813152790,5.708197594,4.813152790,7.600764751,5.025067329,7.816476822,4.721712589,7.827829361,4.774691105,7.836764812,4.736229420,6.433209896,6.698522568,7.518699646,5.063529015]},"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00549{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2751,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":55,"flow_packet_id":5,"flow_src_last_pkt_time":1694275756219808,"flow_dst_last_pkt_time":1694275756247037,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275756247037,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA0BdlAADQGOnFNb\/dFwKgBHQG7yQOThP8V2AJne4AQAfpUkQAAAQEICpkBM04MWaQ3"}
01235{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":2752,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":55,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":3,"flow_first_seen":1694275756191905,"flow_src_last_pkt_time":1694275756219808,"flow_dst_last_pkt_time":1694275756248501,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":1440,"midstream":0,"thread_ts_usec":1694275756248501,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51459,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.3","ja3":"b8ba2f6d9b71a289e9da715328744d81","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
02169{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":2801,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":54,"flow_state":"finished","flow_src_packets_processed":15,"flow_dst_packets_processed":17,"flow_first_seen":1694275756187552,"flow_src_last_pkt_time":1694275756577868,"flow_dst_last_pkt_time":1694275756577990,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1419,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2577,"flow_dst_tot_l4_payload_len":9683,"midstream":0,"thread_ts_usec":1694275756577990,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51458,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"data_analysis": {"iat": {"min":4,"avg":25185.6,"max":168868,"stddev":50651.2,"var":2565544448.0,"ent":2.9,"data": [27094,27219,140,27599,403,50,27790,124,210,124,27860,31,1170,140065,28,97,168868,8,128,152,26059,139165,165009,162,127,199,4,132,297,285,155]},"pktlen": {"min":52,"avg":435.8,"max":1492,"stddev":558.3,"var":311649.1,"ent":3.9,"data": [64,60,52,569,52,1492,1127,52,52,116,1471,52,52,52,91,93,76,52,52,52,629,52,1098,52,1098,52,1492,704,52,1492,52,1492]},"bins": {"c_to_s": [11,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0],"s_to_c": [7,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,2,1,0,0,0,0,0,0,0,0,0,0,0,4,0,0]},"directions": [0,1,0,0,1,1,1,0,0,0,0,1,1,1,1,1,1,0,0,0,0,1,1,0,1,0,1,1,0,1,0,1],"entropies": [4.158905983,5.166786671,4.697768211,4.399245262,4.909682274,7.840191841,7.837791443,4.774691105,4.774691105,5.907286644,7.869675636,5.025067329,5.025067329,4.986605644,5.819097996,5.982440948,5.566686153,4.774691105,4.774691105,4.736229420,7.644417763,4.972088814,7.819730759,4.736229897,7.832448483,4.697768211,7.850809574,7.662927151,4.697767735,7.873144627,4.736229897,7.877857685]},"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
02172{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":2821,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":55,"flow_state":"finished","flow_src_packets_processed":15,"flow_dst_packets_processed":17,"flow_first_seen":1694275756191905,"flow_src_last_pkt_time":1694275756606219,"flow_dst_last_pkt_time":1694275756606317,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1419,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2539,"flow_dst_tot_l4_payload_len":10554,"midstream":0,"thread_ts_usec":1694275756606317,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51459,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"data_analysis": {"iat": {"min":0,"avg":26733.1,"max":179170,"stddev":54307.3,"var":2949282048.0,"ent":2.9,"data": [27690,27728,175,27442,1464,28727,129,124,359,0,26913,42,152474,93,179170,44,121,134,26069,150399,176325,210,1,149,254,243,674,685,383,374,131]},"pktlen": {"min":52,"avg":461.8,"max":1492,"stddev":572.2,"var":327423.8,"ent":4.0,"data": [64,60,52,569,52,1492,52,1128,52,116,1471,52,52,91,93,52,76,52,591,52,1098,52,1492,528,52,1492,52,704,52,1492,52,1492]},"bins": {"c_to_s": [11,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0],"s_to_c": [6,2,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,5,0,0]},"directions": [0,1,0,0,1,1,0,1,0,0,0,1,1,1,1,0,1,0,0,1,1,0,1,1,0,1,0,1,0,1,0,1],"entropies": [4.115860939,5.187539101,4.774691582,4.327563286,5.101990700,7.840719700,4.813152790,7.804496288,4.774691582,5.815793037,7.862992764,5.025067806,5.025067806,5.864611149,5.947547913,4.659306526,5.576618671,4.697768211,7.529841423,4.972088337,7.829462051,4.736229897,7.845654964,7.517898083,4.736229897,7.877416134,4.736229897,7.672642231,4.697768211,7.880493164,4.736229897,7.866563320]},"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
02182{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":2834,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":49,"flow_state":"finished","flow_src_packets_processed":15,"flow_dst_packets_processed":17,"flow_first_seen":1694275755644863,"flow_src_last_pkt_time":1694275756803516,"flow_dst_last_pkt_time":1694275756803699,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1417,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2537,"flow_dst_tot_l4_payload_len":8089,"midstream":0,"thread_ts_usec":1694275756803699,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51453,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"data_analysis": {"iat": {"min":5,"avg":74757.7,"max":603769,"stddev":151196.5,"var":22860367872.0,"ent":3.1,"data": [28567,28642,129,27301,1502,62,28686,142,190,134,27027,9,1142,153835,37,181617,5,73,125,121,27364,146477,39,173708,128,603728,16,603769,141336,141257,321]},"pktlen": {"min":52,"avg":384.7,"max":1492,"stddev":500.5,"var":250468.6,"ent":3.9,"data": [64,60,52,569,52,1492,1127,52,52,116,1469,52,52,52,91,93,52,52,76,52,591,52,1098,498,52,52,1098,498,52,1098,52,1492]},"bins": {"c_to_s": [11,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0],"s_to_c": [7,2,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,1,0,0,0,0,0,0,0,0,0,0,0,2,0,0]},"directions": [0,1,0,0,1,1,1,0,0,0,0,1,1,1,1,1,0,0,1,0,0,1,1,1,0,0,1,1,0,1,0,1],"entropies": [4.178360939,5.312702179,4.774691582,4.445541382,5.101990700,7.861453056,7.846636772,4.813152790,4.774691582,5.959870815,7.889067650,5.063529015,5.063529015,5.101990700,5.864611149,5.931313515,4.721712589,4.774691582,5.602934361,4.774691582,7.639420509,5.063529015,7.797530651,7.576140404,4.774691105,4.774691105,7.824387074,7.597716331,4.736229897,7.815874100,4.736229897,7.871171951]},"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00781{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2881,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":56,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1694275757175284,"flow_src_last_pkt_time":1694275757175284,"flow_dst_last_pkt_time":1694275757175284,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275757175284,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51460,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00567{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2881,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":56,"flow_packet_id":1,"flow_src_last_pkt_time":1694275757175284,"flow_dst_last_pkt_time":1694275757175284,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"thread_ts_usec":1694275757175284,"pkt":"EBMx8Tl2nFg8p+7MCABFAABAAABAAEAGAADAqAEdTW\/3RckEAbsA2lUaAAAAALAC\/\/8GrQAAAgQFtAEDAwYBAQgKqjKEHgAAAAAEAgAA"}
00562{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2884,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":56,"flow_packet_id":2,"flow_src_last_pkt_time":1694275757175284,"flow_dst_last_pkt_time":1694275757202538,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1694275757202538,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA8AABAADYGPkJNb\/dFwKgBHQG7yQTa1adBANpVG6AS\/oihzAAAAgQFrAQCCAqZATcJqjKEHgEDAwc="}
00549{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2886,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":56,"flow_packet_id":3,"flow_src_last_pkt_time":1694275757202671,"flow_dst_last_pkt_time":1694275757202538,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275757202671,"pkt":"EBMx8Tl2nFg8p+7MCABFAAA0AABAAEAGAADAqAEdTW\/3RckEAbsA2lUb2tWnQoAQCBYGoQAAAQEICqoyhDqZATcJ"}
01248{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2888,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":56,"flow_packet_id":4,"flow_src_last_pkt_time":1694275757202800,"flow_dst_last_pkt_time":1694275757202538,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"thread_ts_usec":1694275757202800,"pkt":"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"}
01190{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":2888,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":56,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1694275757175284,"flow_src_last_pkt_time":1694275757202800,"flow_dst_last_pkt_time":1694275757202538,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275757202800,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51460,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.2","ja3":"7654fdd2ea04b50342e102324ebb3179","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00549{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2889,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":56,"flow_packet_id":5,"flow_src_last_pkt_time":1694275757202800,"flow_dst_last_pkt_time":1694275757229570,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275757229570,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA0oBpAADYGni9Nb\/dFwKgBHQG7yQTa1adCANpXIIAQAfrK4wAAAQEICpkBNySqMoQ6"}
01235{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":2890,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":56,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":3,"flow_first_seen":1694275757175284,"flow_src_last_pkt_time":1694275757202800,"flow_dst_last_pkt_time":1694275757230136,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":1440,"midstream":0,"thread_ts_usec":1694275757230136,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51460,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.3","ja3":"7654fdd2ea04b50342e102324ebb3179","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
02172{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":2916,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":56,"flow_state":"finished","flow_src_packets_processed":17,"flow_dst_packets_processed":15,"flow_first_seen":1694275757175284,"flow_src_last_pkt_time":1694275757492754,"flow_dst_last_pkt_time":1694275757486971,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1411,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2617,"flow_dst_tot_l4_payload_len":7118,"midstream":0,"thread_ts_usec":1694275757492754,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51460,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"data_analysis": {"iat": {"min":6,"avg":20295.4,"max":188406,"stddev":45762.7,"var":2094228736.0,"ent":2.9,"data": [27254,27387,129,27032,566,27436,735,685,380,130,25909,1236,11364,39,38078,94,6,123,122,26035,2846,28696,200,49,199,114,132,128,188214,188406,5433]},"pktlen": {"min":52,"avg":356.8,"max":1492,"stddev":487.6,"var":237730.2,"ent":3.9,"data": [64,60,52,569,52,1492,52,1128,52,116,1463,52,52,91,93,52,76,52,52,591,52,1098,52,1492,704,52,1098,52,52,366,52,138]},"bins": {"c_to_s": [12,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0],"s_to_c": [6,2,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,2,1,0,0,0,0,0,0,0,0,0,0,0,2,0,0]},"directions": [0,1,0,0,1,1,0,1,0,0,0,1,1,1,1,0,1,0,0,0,1,1,0,1,1,0,1,0,0,1,0,0],"entropies": [4.077066422,5.160978794,4.646038532,4.421825409,5.026988029,7.840250015,4.684499741,7.833176136,4.684499741,5.919390202,7.872871399,4.873141289,4.988526344,5.885031700,5.697600365,4.646038055,5.627385616,4.646038055,4.646038055,7.556904316,5.026988029,7.815989971,4.684499741,7.887370586,7.723536015,4.607576847,7.814508438,4.646038055,4.684499741,7.322398663,4.646038532,6.244566441]},"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00781{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2935,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":57,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1694275758612709,"flow_src_last_pkt_time":1694275758612709,"flow_dst_last_pkt_time":1694275758612709,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275758612709,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51461,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00567{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2935,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":57,"flow_packet_id":1,"flow_src_last_pkt_time":1694275758612709,"flow_dst_last_pkt_time":1694275758612709,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"thread_ts_usec":1694275758612709,"pkt":"EBMx8Tl2nFg8p+7MCABFAABAAABAAEAGAADAqAEdTW\/3RckFAbtKmLxUAAAAALAC\/\/8GrQAAAgQFtAEDAwYBAQgK0v6ROQAAAAAEAgAA"}
00562{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2939,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":57,"flow_packet_id":2,"flow_src_last_pkt_time":1694275758612709,"flow_dst_last_pkt_time":1694275758639698,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1694275758639698,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA8AABAADQGQEJNb\/dFwKgBHQG7yQXKIzzxSpi8VaAS\/ogwUAAAAgQFrAQCCAqZATyn0v6ROQEDAwc="}
00549{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2940,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":57,"flow_packet_id":3,"flow_src_last_pkt_time":1694275758639812,"flow_dst_last_pkt_time":1694275758639698,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275758639812,"pkt":"EBMx8Tl2nFg8p+7MCABFAAA0AABAAEAGAADAqAEdTW\/3RckFAbtKmLxVyiM88oAQCBYGoQAAAQEICtL+kVSZATyn"}
01247{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2941,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":57,"flow_packet_id":4,"flow_src_last_pkt_time":1694275758640288,"flow_dst_last_pkt_time":1694275758639698,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"thread_ts_usec":1694275758640288,"pkt":"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"}
01190{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":2941,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":57,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1694275758612709,"flow_src_last_pkt_time":1694275758640288,"flow_dst_last_pkt_time":1694275758639698,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275758640288,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51461,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.2","ja3":"f981da9e71acc8636b6cc19bd9e24bfc","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00550{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2942,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":57,"flow_packet_id":5,"flow_src_last_pkt_time":1694275758640288,"flow_dst_last_pkt_time":1694275758667002,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275758667002,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA0GmdAADQGJeNNb\/dFwKgBHQG7yQXKIzzySpi+WoAQAfpZZwAAAQEICpkBPMPS\/pFU"}
01235{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":2943,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":57,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":3,"flow_first_seen":1694275758612709,"flow_src_last_pkt_time":1694275758640288,"flow_dst_last_pkt_time":1694275758668504,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":1440,"midstream":0,"thread_ts_usec":1694275758668504,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51461,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.3","ja3":"f981da9e71acc8636b6cc19bd9e24bfc","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
02164{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":2969,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":57,"flow_state":"finished","flow_src_packets_processed":15,"flow_dst_packets_processed":17,"flow_first_seen":1694275758612709,"flow_src_last_pkt_time":1694275758738453,"flow_dst_last_pkt_time":1694275758738392,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1407,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2527,"flow_dst_tot_l4_payload_len":8501,"midstream":0,"thread_ts_usec":1694275758738453,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51461,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"data_analysis": {"iat": {"min":2,"avg":8110.5,"max":34325,"stddev":12021.4,"var":144513856.0,"ent":3.5,"data": [26989,27103,476,27304,1502,28303,101,128,1167,252,26989,1174,7556,104,2,34325,132,503,26102,2855,93,28446,7,100,127,213,3,165,4504,92,4610]},"pktlen": {"min":52,"avg":397.2,"max":1492,"stddev":485.1,"var":235309.8,"ent":4.0,"data": [64,60,52,569,52,1492,52,1127,52,116,1459,52,52,91,93,76,52,52,591,52,1098,1098,52,52,922,52,1098,250,52,1098,682,52]},"bins": {"c_to_s": [11,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0],"s_to_c": [6,2,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,1,0,0,0,0,4,1,0,0,0,0,0,0,0,0,0,0,0,1,0,0]},"directions": [0,1,0,0,1,1,0,1,0,0,0,1,1,1,1,1,0,0,0,1,1,1,0,0,1,0,1,1,0,1,1,0],"entropies": [4.178360939,5.133453369,4.736229897,4.428386688,5.025067806,7.849509239,4.813152790,7.802417278,4.813152790,6.007369995,7.864824772,5.063529491,5.101990700,5.901622772,6.003946304,5.734513283,4.813152790,4.774691105,7.663514614,5.010550499,7.834642410,7.832502365,4.774691582,4.774691582,7.779919624,4.646038532,7.825356483,7.156414032,4.774691582,7.856326580,7.713139534,4.774691582]},"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00781{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2992,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":58,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1694275759126273,"flow_src_last_pkt_time":1694275759126273,"flow_dst_last_pkt_time":1694275759126273,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275759126273,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51462,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00567{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2992,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":58,"flow_packet_id":1,"flow_src_last_pkt_time":1694275759126273,"flow_dst_last_pkt_time":1694275759126273,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"thread_ts_usec":1694275759126273,"pkt":"EBMx8Tl2nFg8p+7MCABFAABAAABAAEAGAADAqAEdTW\/3RckGAbvpEOEVAAAAALAC\/\/8GrQAAAgQFtAEDAwYBAQgKGCjLzwAAAAAEAgAA"}
00562{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3001,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":58,"flow_packet_id":2,"flow_src_last_pkt_time":1694275759126273,"flow_dst_last_pkt_time":1694275759153431,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1694275759153431,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA8AABAADQGQEJNb\/dFwKgBHQG7yQZcM6686RDhFqAS\/ojneQAAAgQFrAQCCAqZAT6oGCjLzwEDAwc="}
00549{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3002,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":58,"flow_packet_id":3,"flow_src_last_pkt_time":1694275759153533,"flow_dst_last_pkt_time":1694275759153431,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275759153533,"pkt":"EBMx8Tl2nFg8p+7MCABFAAA0AABAAEAGAADAqAEdTW\/3RckGAbvpEOEWXDOuvYAQCBYGoQAAAQEIChgoy+uZAT6o"}
01249{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3003,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":58,"flow_packet_id":4,"flow_src_last_pkt_time":1694275759153797,"flow_dst_last_pkt_time":1694275759153431,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"thread_ts_usec":1694275759153797,"pkt":"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"}
01190{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":3003,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":58,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1694275759126273,"flow_src_last_pkt_time":1694275759153797,"flow_dst_last_pkt_time":1694275759153431,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275759153797,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51462,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.2","ja3":"1d647afc208e5db7a49d19f0a21255a9","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00550{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3007,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":58,"flow_packet_id":5,"flow_src_last_pkt_time":1694275759153797,"flow_dst_last_pkt_time":1694275759180767,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275759180767,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA0e\/hAADQGxFFNb\/dFwKgBHQG7yQZcM6696RDjG4AQAfoQkAAAAQEICpkBPsQYKMvr"}
01235{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":3008,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":58,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":3,"flow_first_seen":1694275759126273,"flow_src_last_pkt_time":1694275759153797,"flow_dst_last_pkt_time":1694275759182241,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":1440,"midstream":0,"thread_ts_usec":1694275759182241,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51462,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.3","ja3":"1d647afc208e5db7a49d19f0a21255a9","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
02163{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":3035,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":58,"flow_state":"finished","flow_src_packets_processed":16,"flow_dst_packets_processed":16,"flow_first_seen":1694275759126273,"flow_src_last_pkt_time":1694275759247598,"flow_dst_last_pkt_time":1694275759246301,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1439,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2655,"flow_dst_tot_l4_payload_len":7569,"midstream":0,"thread_ts_usec":1694275759247598,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51462,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"data_analysis": {"iat": {"min":3,"avg":7785.6,"max":32741,"stddev":12080.7,"var":145943504.0,"ent":3.4,"data": [27158,27260,264,27336,1474,28531,98,125,379,124,27001,35,6211,88,32741,44,126,128,26061,2835,28773,1190,1136,275,289,191,3,28,204,127,1118]},"pktlen": {"min":52,"avg":372.1,"max":1492,"stddev":488.6,"var":238772.9,"ent":3.9,"data": [64,60,52,569,52,1492,52,1129,52,116,1491,52,52,91,93,52,76,52,591,52,1098,52,258,52,1098,52,1492,704,610,52,52,148]},"bins": {"c_to_s": [11,0,1,1,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0],"s_to_c": [6,2,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,0,0,1,0,0,0,0,0,0,0,0,0,0,0,2,1,0,0,0,0,0,0,0,0,0,0,0,2,0,0]},"directions": [0,1,0,0,1,1,0,1,0,0,0,1,1,1,1,0,1,0,0,1,1,0,1,0,1,0,1,1,1,0,0,0],"entropies": [4.158905983,5.212701797,4.606328011,4.444310665,4.933627605,7.829864025,4.683251381,7.824939728,4.683251381,5.818936348,7.869243145,4.933627605,4.873141766,5.864611149,5.939429760,4.721712589,5.629250050,4.683250904,7.585559368,4.870416641,7.823579788,4.668734074,7.166376114,4.721712589,7.832537174,4.721712589,7.894383907,7.689051628,7.673301697,4.721712589,4.683250904,6.386294842]},"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00781{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3052,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":59,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1694275760146551,"flow_src_last_pkt_time":1694275760146551,"flow_dst_last_pkt_time":1694275760146551,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275760146551,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51463,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00567{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3052,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":59,"flow_packet_id":1,"flow_src_last_pkt_time":1694275760146551,"flow_dst_last_pkt_time":1694275760146551,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"thread_ts_usec":1694275760146551,"pkt":"EBMx8Tl2nFg8p+7MCABFAABAAABAAEAGAADAqAEdTW\/3RckHAbsostIaAAAAALAC\/\/8GrQAAAgQFtAEDAwYBAQgKz+dkDQAAAAAEAgAA"}
00781{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3054,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":60,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1694275760159362,"flow_src_last_pkt_time":1694275760159362,"flow_dst_last_pkt_time":1694275760159362,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275760159362,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51464,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00567{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3054,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":60,"flow_packet_id":1,"flow_src_last_pkt_time":1694275760159362,"flow_dst_last_pkt_time":1694275760159362,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"thread_ts_usec":1694275760159362,"pkt":"EBMx8Tl2nFg8p+7MCABFAABAAABAAEAGAADAqAEdTW\/3RckIAbtCbTWIAAAAALAC\/\/8GrQAAAgQFtAEDAwYBAQgKS2y7GwAAAAAEAgAA"}
00562{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3058,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":59,"flow_packet_id":2,"flow_src_last_pkt_time":1694275760146551,"flow_dst_last_pkt_time":1694275760173411,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1694275760173411,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA8AABAADQGQEJNb\/dFwKgBHQG7yQc13AijKLLSG6AS\/ogvSgAAAgQFrAQCCAqZAUKkz+dkDQEDAwc="}
00550{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3059,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":59,"flow_packet_id":3,"flow_src_last_pkt_time":1694275760173512,"flow_dst_last_pkt_time":1694275760173411,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275760173512,"pkt":"EBMx8Tl2nFg8p+7MCABFAAA0AABAAEAGAADAqAEdTW\/3RckHAbsostIbNdwIpIAQCBYGoQAAAQEICs\/nZCiZAUKk"}
01248{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3060,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":59,"flow_packet_id":4,"flow_src_last_pkt_time":1694275760173637,"flow_dst_last_pkt_time":1694275760173411,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"thread_ts_usec":1694275760173637,"pkt":"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"}
01190{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":3060,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":59,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1694275760146551,"flow_src_last_pkt_time":1694275760173637,"flow_dst_last_pkt_time":1694275760173411,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275760173637,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51463,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.2","ja3":"7c1faee465b44a6322237d36a83f056e","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00562{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3064,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":60,"flow_packet_id":2,"flow_src_last_pkt_time":1694275760159362,"flow_dst_last_pkt_time":1694275760187176,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1694275760187176,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA8AABAADYGPkJNb\/dFwKgBHQG7yQg3ZSjWQm01iaAS\/oi9xAAAAgQFrAQCCAqZAUKxS2y7GwEDAwc="}
00549{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3065,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":60,"flow_packet_id":3,"flow_src_last_pkt_time":1694275760187256,"flow_dst_last_pkt_time":1694275760187176,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275760187256,"pkt":"EBMx8Tl2nFg8p+7MCABFAAA0AABAAEAGAADAqAEdTW\/3RckIAbtCbTWJN2Uo14AQCBYGoQAAAQEICktsuzeZAUKx"}
01245{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3066,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":60,"flow_packet_id":4,"flow_src_last_pkt_time":1694275760187749,"flow_dst_last_pkt_time":1694275760187176,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"thread_ts_usec":1694275760187749,"pkt":"EBMx8Tl2nFg8p+7MCABFAAI5AABAAEAGAADAqAEdTW\/3RckIAbtCbTWJN2Uo14AYCBYIpgAAAQEICktsuzeZAUKxFgMBAgABAAH8AwNpp6QytMYLhbOW+c6+tO0B4JkvbhFVMaZ6HMNT8ysmQCCGztDZPLdxOVqhwhdLaN7m4MEhCpLflfoqBvqpCbgAsQAgWloTARMCEwPAK8AvwCzAMMypzKjAE8AUAJwAnQAvADUBAAGTqqoAAERpAAUAAwJoMgAzACsAKZqaAAEAAB0AIMB+C8stvN97iLg9+OJOEghhiD+ynUdRAUPfHfPpkO82AC0AAgEBABcAAAArAAcGamoDBAMDAAoACgAImpoAHQAXABgAIwAAABAADgAMAmgyCGh0dHAvMS4x\/wEAAQAAAAAXABUAABJldTAuc2VjLXR1bm5lbC5jb20AGwADAgACAA0AEgAQBAMIBAQBBQMIBQUBCAYGAQALAAIBAAAFAAUBAAAAAAASAAAqKgABAAAVAMUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="}
01190{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":3066,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":60,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1694275760159362,"flow_src_last_pkt_time":1694275760187749,"flow_dst_last_pkt_time":1694275760187176,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275760187749,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51464,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.2","ja3":"11faa0c756a165d2f663a0316c0cca79","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00781{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3068,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":61,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1694275760188445,"flow_src_last_pkt_time":1694275760188445,"flow_dst_last_pkt_time":1694275760188445,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275760188445,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51465,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00567{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3068,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":61,"flow_packet_id":1,"flow_src_last_pkt_time":1694275760188445,"flow_dst_last_pkt_time":1694275760188445,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"thread_ts_usec":1694275760188445,"pkt":"EBMx8Tl2nFg8p+7MCABFAABAAABAAEAGAADAqAEdTW\/3RckJAbu1qhDYAAAAALAC\/\/8GrQAAAgQFtAEDAwYBAQgKfEZQ+AAAAAAEAgAA"}
00550{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3069,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":59,"flow_packet_id":5,"flow_src_last_pkt_time":1694275760173637,"flow_dst_last_pkt_time":1694275760199496,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275760199496,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA0wCBAADQGgClNb\/dFwKgBHQG7yQc13AikKLLUIIAQAfpYYgAAAQEICpkBQr\/P52Qo"}
01235{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":3070,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":59,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":3,"flow_first_seen":1694275760146551,"flow_src_last_pkt_time":1694275760173637,"flow_dst_last_pkt_time":1694275760200987,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":1440,"midstream":0,"thread_ts_usec":1694275760200987,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51463,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.3","ja3":"7c1faee465b44a6322237d36a83f056e","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00562{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3079,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":61,"flow_packet_id":2,"flow_src_last_pkt_time":1694275760188445,"flow_dst_last_pkt_time":1694275760214953,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1694275760214953,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA8AABAADYGPkJNb\/dFwKgBHQG7yQliG7B1taoQ2aAS\/oj2DAAAAgQFrAQCCAqZAULOfEZQ+AEDAwc="}
00549{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3081,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":61,"flow_packet_id":3,"flow_src_last_pkt_time":1694275760215101,"flow_dst_last_pkt_time":1694275760214953,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275760215101,"pkt":"EBMx8Tl2nFg8p+7MCABFAAA0AABAAEAGAADAqAEdTW\/3RckJAbu1qhDZYhuwdoAQCBYGoQAAAQEICnxGURKZAULO"}
01245{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3082,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":61,"flow_packet_id":4,"flow_src_last_pkt_time":1694275760215222,"flow_dst_last_pkt_time":1694275760214953,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"thread_ts_usec":1694275760215222,"pkt":"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"}
01190{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":3082,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":61,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1694275760188445,"flow_src_last_pkt_time":1694275760215222,"flow_dst_last_pkt_time":1694275760214953,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275760215222,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51465,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.2","ja3":"1a3204516366db8b9a04341acd5a5664","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00549{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3083,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":60,"flow_packet_id":5,"flow_src_last_pkt_time":1694275760187749,"flow_dst_last_pkt_time":1694275760215879,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275760215879,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA06y5AADYGUxtNb\/dFwKgBHQG7yQg3ZSjXQm03joAQAfrm2gAAAQEICpkBQs1LbLs3"}
01235{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":3084,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":60,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":3,"flow_first_seen":1694275760159362,"flow_src_last_pkt_time":1694275760187749,"flow_dst_last_pkt_time":1694275760216464,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":1440,"midstream":0,"thread_ts_usec":1694275760216464,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51464,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.3","ja3":"11faa0c756a165d2f663a0316c0cca79","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00549{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3098,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":61,"flow_packet_id":5,"flow_src_last_pkt_time":1694275760215222,"flow_dst_last_pkt_time":1694275760242161,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275760242161,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA0inRAADYGs9VNb\/dFwKgBHQG7yQliG7B2taoS3oAQAfofJgAAAQEICpkBQul8RlES"}
01235{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":3099,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":61,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":3,"flow_first_seen":1694275760188445,"flow_src_last_pkt_time":1694275760215222,"flow_dst_last_pkt_time":1694275760242630,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":1440,"midstream":0,"thread_ts_usec":1694275760242630,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51465,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.3","ja3":"1a3204516366db8b9a04341acd5a5664","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
02165{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":3125,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":59,"flow_state":"finished","flow_src_packets_processed":17,"flow_dst_packets_processed":15,"flow_first_seen":1694275760146551,"flow_src_last_pkt_time":1694275760266903,"flow_dst_last_pkt_time":1694275760266114,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1417,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":3230,"flow_dst_tot_l4_payload_len":7417,"midstream":0,"thread_ts_usec":1694275760266903,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51463,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"data_analysis": {"iat": {"min":2,"avg":7739.2,"max":34150,"stddev":11949.0,"var":142778768.0,"ent":3.4,"data": [26860,26961,125,26085,1491,27383,122,123,242,127,25664,1246,7571,34150,91,48,121,120,26079,2785,28777,348,308,864,864,307,2,302,498,123,128]},"pktlen": {"min":52,"avg":385.3,"max":1492,"stddev":506.9,"var":256960.2,"ent":3.9,"data": [64,60,52,569,52,1492,52,1128,52,116,1469,52,52,91,52,93,76,52,591,52,1098,52,1492,52,704,52,1492,271,52,138,172,539]},"bins": {"c_to_s": [10,0,2,1,0,0,0,0,0,0,0,0,0,0,0,1,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0],"s_to_c": [6,2,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,3,0,0]},"directions": [0,1,0,0,1,1,0,1,0,0,0,1,1,1,0,1,1,0,0,1,1,0,1,0,1,0,1,1,0,0,0,0],"entropies": [4.209610939,5.179368496,4.644789696,4.375918865,4.909683228,7.825483322,4.736229897,7.837041378,4.736229897,5.880172253,7.862580299,5.025067329,5.025067329,6.035048008,4.774691582,5.939430237,5.550303459,4.774691582,7.634554863,4.895165443,7.804163456,4.646038532,7.867358208,4.646038532,7.727935791,4.646038532,7.871103287,7.172240257,4.646038532,6.254072189,6.532965183,7.611578465]},"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
02164{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":3162,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":60,"flow_state":"finished","flow_src_packets_processed":15,"flow_dst_packets_processed":17,"flow_first_seen":1694275760159362,"flow_src_last_pkt_time":1694275760281658,"flow_dst_last_pkt_time":1694275760309664,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1425,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2641,"flow_dst_tot_l4_payload_len":8573,"midstream":0,"thread_ts_usec":1694275760309664,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51464,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"data_analysis": {"iat": {"min":2,"avg":8793.5,"max":31869,"stddev":12758.7,"var":162784304.0,"ent":3.5,"data": [27814,27894,493,28703,585,28762,647,649,242,123,27168,43,5005,31869,89,47,126,129,27303,4099,31345,165,134,214,2,194,86,122,214,26695,1637]},"pktlen": {"min":52,"avg":403.1,"max":1492,"stddev":505.2,"var":255231.4,"ent":4.0,"data": [64,60,52,569,52,1492,52,1127,52,116,1477,52,52,91,52,93,76,52,591,52,1098,52,1098,52,1492,704,52,830,52,148,52,1044]},"bins": {"c_to_s": [10,0,1,1,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0],"s_to_c": [7,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,1,0,0,0,0,0,0,1,2,1,0,0,0,0,0,0,0,0,0,0,0,2,0,0]},"directions": [0,1,0,0,1,1,0,1,0,0,0,1,1,1,0,1,1,0,0,1,1,0,1,0,1,1,0,1,0,0,1,1],"entropies": [4.147110939,5.166787148,4.606328011,4.419630051,4.933627129,7.819243431,4.659306526,7.802917004,4.659306526,5.959871769,7.870406628,4.986605644,4.948144436,5.947135925,4.697768211,5.982440948,5.655566216,4.697768211,7.635627747,5.025067329,7.836093426,4.697768211,7.836949825,4.736229897,7.868122101,7.667487621,4.697768211,7.753278255,4.736229897,6.269422054,5.025067329,7.793452740]},"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
02168{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":3175,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":61,"flow_state":"finished","flow_src_packets_processed":16,"flow_dst_packets_processed":16,"flow_first_seen":1694275760188445,"flow_src_last_pkt_time":1694275760330661,"flow_dst_last_pkt_time":1694275760330585,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1407,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":3236,"flow_dst_tot_l4_payload_len":6065,"midstream":0,"thread_ts_usec":1694275760330661,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51465,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"data_analysis": {"iat": {"min":50,"avg":9172.8,"max":31292,"stddev":12464.9,"var":155373488.0,"ent":3.6,"data": [26508,26656,121,27208,469,27459,90,122,166,118,25308,1248,5045,31292,95,50,135,141,26082,1531,27473,147,145,226,218,285,128,25620,80,2433,27757]},"pktlen": {"min":52,"avg":343.3,"max":1492,"stddev":466.3,"var":217422.7,"ent":3.9,"data": [64,60,52,569,52,1492,52,1127,52,116,1459,52,52,91,52,93,76,52,591,52,1098,52,1098,52,1184,52,154,659,52,52,274,52]},"bins": {"c_to_s": [10,0,1,1,0,0,0,0,0,0,0,0,0,0,0,0,2,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0],"s_to_c": [8,2,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0,1,0,0,0,0,0,0,0,0,0,1,0,0]},"directions": [0,1,0,0,1,1,0,1,0,0,0,1,1,1,0,1,1,0,0,1,1,0,1,0,1,0,0,0,1,1,1,0],"entropies": [4.209610939,5.279368401,4.736229897,4.419954300,5.101990700,7.829117298,4.813152790,7.823664188,4.813152790,6.035345554,7.863707542,5.140452385,5.101990700,5.872906685,4.813152790,5.931313038,5.576619148,4.813152790,7.646970272,5.101990700,7.820407391,4.813152790,7.792932510,4.813152790,7.834312439,4.813152790,6.429463387,7.615536690,4.948144436,5.025067806,7.217590809,4.736229897]},"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00781{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3187,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":62,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1694275760781591,"flow_src_last_pkt_time":1694275760781591,"flow_dst_last_pkt_time":1694275760781591,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275760781591,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51466,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00567{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3187,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":62,"flow_packet_id":1,"flow_src_last_pkt_time":1694275760781591,"flow_dst_last_pkt_time":1694275760781591,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"thread_ts_usec":1694275760781591,"pkt":"EBMx8Tl2nFg8p+7MCABFAABAAABAAEAGAADAqAEdTW\/3RckKAbtwWZBmAAAAALAC\/\/8GrQAAAgQFtAEDAwYBAQgKstODKwAAAAAEAgAA"}
00562{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3191,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":62,"flow_packet_id":2,"flow_src_last_pkt_time":1694275760781591,"flow_dst_last_pkt_time":1694275760809649,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1694275760809649,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA8AABAADYGPkJNb\/dFwKgBHQG7yQpXe4oCcFmQZ6AS\/oiBzwAAAgQFrAQCCAqZAUUgstODKwEDAwc="}
00549{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3192,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":62,"flow_packet_id":3,"flow_src_last_pkt_time":1694275760809762,"flow_dst_last_pkt_time":1694275760809649,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275760809762,"pkt":"EBMx8Tl2nFg8p+7MCABFAAA0AABAAEAGAADAqAEdTW\/3RckKAbtwWZBnV3uKA4AQCBYGoQAAAQEICrLTg0iZAUUg"}
01244{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3193,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":62,"flow_packet_id":4,"flow_src_last_pkt_time":1694275760810216,"flow_dst_last_pkt_time":1694275760809649,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"thread_ts_usec":1694275760810216,"pkt":"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"}
01190{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":3193,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":62,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1694275760781591,"flow_src_last_pkt_time":1694275760810216,"flow_dst_last_pkt_time":1694275760809649,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275760810216,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51466,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.2","ja3":"d47894a5f64c516049e142a21f8c9ce3","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00549{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3194,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":62,"flow_packet_id":5,"flow_src_last_pkt_time":1694275760810216,"flow_dst_last_pkt_time":1694275760838303,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1694275760838303,"pkt":"nFg8p+7MEBMx8Tl2CABFAAA0ToFAADYG78hNb\/dFwKgBHQG7yQpXe4oDcFmSbIAQAfqq5AAAAQEICpkBRTyy04NI"}
01235{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":3195,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":62,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":3,"flow_first_seen":1694275760781591,"flow_src_last_pkt_time":1694275760810216,"flow_dst_last_pkt_time":1694275760839754,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":1440,"midstream":0,"thread_ts_usec":1694275760839754,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51466,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"eu0.sec-tunnel.com","tls": {"version":"TLSv1.3","ja3":"d47894a5f64c516049e142a21f8c9ce3","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2"}}}
00990{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3200,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":1,"flow_state":"finished","flow_src_packets_processed":34,"flow_dst_packets_processed":31,"flow_first_seen":1694275752994885,"flow_src_last_pkt_time":1694275754671493,"flow_dst_last_pkt_time":1694275754696753,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1435,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":4006,"flow_dst_tot_l4_payload_len":13647,"midstream":0,"thread_ts_usec":1694275760841495,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51398,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00988{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3200,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":2,"flow_state":"finished","flow_src_packets_processed":19,"flow_dst_packets_processed":20,"flow_first_seen":1694275753007782,"flow_src_last_pkt_time":1694275755651319,"flow_dst_last_pkt_time":1694275755651115,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1415,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2621,"flow_dst_tot_l4_payload_len":9416,"midstream":0,"thread_ts_usec":1694275760841495,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51399,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00990{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3200,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":3,"flow_state":"finished","flow_src_packets_processed":23,"flow_dst_packets_processed":23,"flow_first_seen":1694275753008024,"flow_src_last_pkt_time":1694275753379590,"flow_dst_last_pkt_time":1694275753379462,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1419,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":3394,"flow_dst_tot_l4_payload_len":10647,"midstream":0,"thread_ts_usec":1694275760841495,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51400,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00988{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3200,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":4,"flow_state":"finished","flow_src_packets_processed":22,"flow_dst_packets_processed":22,"flow_first_seen":1694275753008266,"flow_src_last_pkt_time":1694275756217382,"flow_dst_last_pkt_time":1694275756217225,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1425,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2631,"flow_dst_tot_l4_payload_len":9179,"midstream":0,"thread_ts_usec":1694275760841495,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51401,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00989{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3200,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":5,"flow_state":"finished","flow_src_packets_processed":16,"flow_dst_packets_processed":16,"flow_first_seen":1694275753008511,"flow_src_last_pkt_time":1694275753183247,"flow_dst_last_pkt_time":1694275753183183,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1417,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2623,"flow_dst_tot_l4_payload_len":6562,"midstream":0,"thread_ts_usec":1694275760841495,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51402,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00988{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3200,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":6,"flow_state":"finished","flow_src_packets_processed":20,"flow_dst_packets_processed":21,"flow_first_seen":1694275753008755,"flow_src_last_pkt_time":1694275755198376,"flow_dst_last_pkt_time":1694275755198349,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1425,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2693,"flow_dst_tot_l4_payload_len":7032,"midstream":0,"thread_ts_usec":1694275760841495,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51403,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00988{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3200,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":7,"flow_state":"finished","flow_src_packets_processed":19,"flow_dst_packets_processed":18,"flow_first_seen":1694275753008879,"flow_src_last_pkt_time":1694275755246191,"flow_dst_last_pkt_time":1694275755246080,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1419,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2625,"flow_dst_tot_l4_payload_len":5470,"midstream":0,"thread_ts_usec":1694275760841495,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51404,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00988{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3200,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":8,"flow_state":"finished","flow_src_packets_processed":17,"flow_dst_packets_processed":17,"flow_first_seen":1694275753009120,"flow_src_last_pkt_time":1694275756191229,"flow_dst_last_pkt_time":1694275756191080,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1425,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2631,"flow_dst_tot_l4_payload_len":5434,"midstream":0,"thread_ts_usec":1694275760841495,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51405,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00988{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3200,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":9,"flow_state":"finished","flow_src_packets_processed":18,"flow_dst_packets_processed":19,"flow_first_seen":1694275753009419,"flow_src_last_pkt_time":1694275754214740,"flow_dst_last_pkt_time":1694275754214689,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1423,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2629,"flow_dst_tot_l4_payload_len":5433,"midstream":0,"thread_ts_usec":1694275760841495,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51406,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00990{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3200,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":10,"flow_state":"finished","flow_src_packets_processed":22,"flow_dst_packets_processed":20,"flow_first_seen":1694275753009538,"flow_src_last_pkt_time":1694275756159463,"flow_dst_last_pkt_time":1694275756159340,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1415,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":3298,"flow_dst_tot_l4_payload_len":6379,"midstream":0,"thread_ts_usec":1694275760841495,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51407,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00989{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3200,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":11,"flow_state":"finished","flow_src_packets_processed":21,"flow_dst_packets_processed":20,"flow_first_seen":1694275753009698,"flow_src_last_pkt_time":1694275755623654,"flow_dst_last_pkt_time":1694275755623519,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1415,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2621,"flow_dst_tot_l4_payload_len":9025,"midstream":0,"thread_ts_usec":1694275760841495,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51408,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00989{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3200,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":12,"flow_state":"finished","flow_src_packets_processed":18,"flow_dst_packets_processed":19,"flow_first_seen":1694275753009947,"flow_src_last_pkt_time":1694275754291190,"flow_dst_last_pkt_time":1694275754291088,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1417,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2652,"flow_dst_tot_l4_payload_len":7074,"midstream":0,"thread_ts_usec":1694275760841495,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51409,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00989{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3200,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":13,"flow_state":"finished","flow_src_packets_processed":20,"flow_dst_packets_processed":18,"flow_first_seen":1694275753010186,"flow_src_last_pkt_time":1694275754200960,"flow_dst_last_pkt_time":1694275754200860,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1407,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2642,"flow_dst_tot_l4_payload_len":6918,"midstream":0,"thread_ts_usec":1694275760841495,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51410,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00990{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3200,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":14,"flow_state":"finished","flow_src_packets_processed":17,"flow_dst_packets_processed":16,"flow_first_seen":1694275753010306,"flow_src_last_pkt_time":1694275753169062,"flow_dst_last_pkt_time":1694275753169011,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1431,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2647,"flow_dst_tot_l4_payload_len":8540,"midstream":0,"thread_ts_usec":1694275760841495,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51411,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00989{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3200,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":15,"flow_state":"finished","flow_src_packets_processed":20,"flow_dst_packets_processed":21,"flow_first_seen":1694275753010307,"flow_src_last_pkt_time":1694275756107586,"flow_dst_last_pkt_time":1694275756107561,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1431,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2637,"flow_dst_tot_l4_payload_len":8663,"midstream":0,"thread_ts_usec":1694275760841495,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51412,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00990{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3200,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":16,"flow_state":"finished","flow_src_packets_processed":18,"flow_dst_packets_processed":20,"flow_first_seen":1694275753010458,"flow_src_last_pkt_time":1694275753188309,"flow_dst_last_pkt_time":1694275753188132,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1417,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2623,"flow_dst_tot_l4_payload_len":9041,"midstream":0,"thread_ts_usec":1694275760841495,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51413,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00990{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3200,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":17,"flow_state":"finished","flow_src_packets_processed":23,"flow_dst_packets_processed":24,"flow_first_seen":1694275753010578,"flow_src_last_pkt_time":1694275754112296,"flow_dst_last_pkt_time":1694275754112253,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1415,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2621,"flow_dst_tot_l4_payload_len":11075,"midstream":0,"thread_ts_usec":1694275760841495,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51414,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00990{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3200,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":18,"flow_state":"finished","flow_src_packets_processed":25,"flow_dst_packets_processed":23,"flow_first_seen":1694275753010697,"flow_src_last_pkt_time":1694275759148813,"flow_dst_last_pkt_time":1694275759219268,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1440,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":4590,"flow_dst_tot_l4_payload_len":9082,"midstream":0,"thread_ts_usec":1694275760841495,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51415,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00989{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3200,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":19,"flow_state":"finished","flow_src_packets_processed":16,"flow_dst_packets_processed":20,"flow_first_seen":1694275753010817,"flow_src_last_pkt_time":1694275755246321,"flow_dst_last_pkt_time":1694275755246234,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1425,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2705,"flow_dst_tot_l4_payload_len":8599,"midstream":0,"thread_ts_usec":1694275760841495,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51416,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00990{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3200,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":20,"flow_state":"finished","flow_src_packets_processed":18,"flow_dst_packets_processed":18,"flow_first_seen":1694275753010935,"flow_src_last_pkt_time":1694275753173357,"flow_dst_last_pkt_time":1694275753173313,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1433,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2649,"flow_dst_tot_l4_payload_len":8460,"midstream":0,"thread_ts_usec":1694275760841495,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51417,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00989{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3200,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":21,"flow_state":"finished","flow_src_packets_processed":20,"flow_dst_packets_processed":20,"flow_first_seen":1694275753011053,"flow_src_last_pkt_time":1694275756107460,"flow_dst_last_pkt_time":1694275756107412,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1419,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2751,"flow_dst_tot_l4_payload_len":6224,"midstream":0,"thread_ts_usec":1694275760841495,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51418,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00990{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3200,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":22,"flow_state":"finished","flow_src_packets_processed":16,"flow_dst_packets_processed":18,"flow_first_seen":1694275753011053,"flow_src_last_pkt_time":1694275753182216,"flow_dst_last_pkt_time":1694275753182079,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1423,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2629,"flow_dst_tot_l4_payload_len":6778,"midstream":0,"thread_ts_usec":1694275760841495,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51419,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00989{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3200,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":23,"flow_state":"finished","flow_src_packets_processed":20,"flow_dst_packets_processed":21,"flow_first_seen":1694275753011171,"flow_src_last_pkt_time":1694275754154858,"flow_dst_last_pkt_time":1694275754154752,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1429,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2635,"flow_dst_tot_l4_payload_len":8684,"midstream":0,"thread_ts_usec":1694275760841495,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51420,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00989{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3200,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":24,"flow_state":"finished","flow_src_packets_processed":18,"flow_dst_packets_processed":19,"flow_first_seen":1694275753011291,"flow_src_last_pkt_time":1694275760172350,"flow_dst_last_pkt_time":1694275760172277,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1435,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2767,"flow_dst_tot_l4_payload_len":6444,"midstream":0,"thread_ts_usec":1694275760841495,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51421,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00989{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3200,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":25,"flow_state":"finished","flow_src_packets_processed":20,"flow_dst_packets_processed":21,"flow_first_seen":1694275753011292,"flow_src_last_pkt_time":1694275755672237,"flow_dst_last_pkt_time":1694275755672163,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1421,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2627,"flow_dst_tot_l4_payload_len":9417,"midstream":0,"thread_ts_usec":1694275760841495,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51422,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00990{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3200,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":26,"flow_state":"finished","flow_src_packets_processed":17,"flow_dst_packets_processed":18,"flow_first_seen":1694275753011411,"flow_src_last_pkt_time":1694275753188183,"flow_dst_last_pkt_time":1694275753188129,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1415,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2637,"flow_dst_tot_l4_payload_len":8385,"midstream":0,"thread_ts_usec":1694275760841495,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51423,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00990{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3200,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":27,"flow_state":"finished","flow_src_packets_processed":23,"flow_dst_packets_processed":25,"flow_first_seen":1694275753047174,"flow_src_last_pkt_time":1694275754614866,"flow_dst_last_pkt_time":1694275754614749,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1440,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":5017,"flow_dst_tot_l4_payload_len":12921,"midstream":0,"thread_ts_usec":1694275760841495,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51424,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00993{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3200,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":28,"flow_state":"finished","flow_src_packets_processed":83,"flow_dst_packets_processed":105,"flow_first_seen":1694275753060213,"flow_src_last_pkt_time":1694275753307185,"flow_dst_last_pkt_time":1694275753307133,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1419,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":3289,"flow_dst_tot_l4_payload_len":125684,"midstream":0,"thread_ts_usec":1694275760841495,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51425,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00993{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3200,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":29,"flow_state":"finished","flow_src_packets_processed":92,"flow_dst_packets_processed":129,"flow_first_seen":1694275753075692,"flow_src_last_pkt_time":1694275756161800,"flow_dst_last_pkt_time":1694275756161153,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1405,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":6599,"flow_dst_tot_l4_payload_len":129363,"midstream":0,"thread_ts_usec":1694275760841495,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51426,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00989{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3200,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":30,"flow_state":"finished","flow_src_packets_processed":20,"flow_dst_packets_processed":21,"flow_first_seen":1694275753095564,"flow_src_last_pkt_time":1694275754134699,"flow_dst_last_pkt_time":1694275754134602,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1407,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":3723,"flow_dst_tot_l4_payload_len":6312,"midstream":0,"thread_ts_usec":1694275760841495,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51427,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00991{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3200,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":31,"flow_state":"finished","flow_src_packets_processed":23,"flow_dst_packets_processed":27,"flow_first_seen":1694275753113486,"flow_src_last_pkt_time":1694275753278592,"flow_dst_last_pkt_time":1694275753351697,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1413,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":3371,"flow_dst_tot_l4_payload_len":11546,"midstream":0,"thread_ts_usec":1694275760841495,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51428,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
01127{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3200,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":32,"flow_state":"finished","flow_src_packets_processed":19,"flow_dst_packets_processed":21,"flow_first_seen":1694275753219923,"flow_src_last_pkt_time":1694275753400542,"flow_dst_last_pkt_time":1694275753400510,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1272,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2678,"flow_dst_tot_l4_payload_len":10245,"midstream":0,"thread_ts_usec":1694275760841495,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51429,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"flow_risk": {"15": {"risk":"TLS (probably) Not Carrying HTTPS","severity":"Low","risk_score": {"total":460,"client":410,"server":50}}},"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00994{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3200,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":33,"flow_state":"finished","flow_src_packets_processed":120,"flow_dst_packets_processed":145,"flow_first_seen":1694275753284172,"flow_src_last_pkt_time":1694275755153114,"flow_dst_last_pkt_time":1694275755152998,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1413,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":4751,"flow_dst_tot_l4_payload_len":161112,"midstream":0,"thread_ts_usec":1694275760841495,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51430,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00991{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3200,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":34,"flow_state":"finished","flow_src_packets_processed":25,"flow_dst_packets_processed":22,"flow_first_seen":1694275754087463,"flow_src_last_pkt_time":1694275754326106,"flow_dst_last_pkt_time":1694275754325940,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1425,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":3604,"flow_dst_tot_l4_payload_len":10369,"midstream":0,"thread_ts_usec":1694275760841495,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51432,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00989{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3200,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":35,"flow_state":"finished","flow_src_packets_processed":22,"flow_dst_packets_processed":23,"flow_first_seen":1694275754109202,"flow_src_last_pkt_time":1694275755629864,"flow_dst_last_pkt_time":1694275755629720,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1415,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2621,"flow_dst_tot_l4_payload_len":9048,"midstream":0,"thread_ts_usec":1694275760841495,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51433,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00991{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3200,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":36,"flow_state":"finished","flow_src_packets_processed":24,"flow_dst_packets_processed":23,"flow_first_seen":1694275754128769,"flow_src_last_pkt_time":1694275754333457,"flow_dst_last_pkt_time":1694275754333312,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1417,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":3506,"flow_dst_tot_l4_payload_len":10580,"midstream":0,"thread_ts_usec":1694275760841495,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51435,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00990{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3200,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":37,"flow_state":"finished","flow_src_packets_processed":15,"flow_dst_packets_processed":18,"flow_first_seen":1694275754173951,"flow_src_last_pkt_time":1694275754328191,"flow_dst_last_pkt_time":1694275754328160,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1405,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2611,"flow_dst_tot_l4_payload_len":7674,"midstream":0,"thread_ts_usec":1694275760841495,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51436,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00990{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3200,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":38,"flow_state":"finished","flow_src_packets_processed":22,"flow_dst_packets_processed":21,"flow_first_seen":1694275754185416,"flow_src_last_pkt_time":1694275754619434,"flow_dst_last_pkt_time":1694275754619312,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1440,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":3316,"flow_dst_tot_l4_payload_len":8742,"midstream":0,"thread_ts_usec":1694275760841495,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51437,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00990{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3200,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":39,"flow_state":"finished","flow_src_packets_processed":22,"flow_dst_packets_processed":24,"flow_first_seen":1694275754188438,"flow_src_last_pkt_time":1694275754586997,"flow_dst_last_pkt_time":1694275754611756,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1413,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":3365,"flow_dst_tot_l4_payload_len":8995,"midstream":0,"thread_ts_usec":1694275760841495,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51438,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00990{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3200,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":40,"flow_state":"finished","flow_src_packets_processed":20,"flow_dst_packets_processed":21,"flow_first_seen":1694275754263304,"flow_src_last_pkt_time":1694275754425939,"flow_dst_last_pkt_time":1694275754488010,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1423,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":3104,"flow_dst_tot_l4_payload_len":6288,"midstream":0,"thread_ts_usec":1694275760841495,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51440,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00991{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3200,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":41,"flow_state":"finished","flow_src_packets_processed":24,"flow_dst_packets_processed":28,"flow_first_seen":1694275754588065,"flow_src_last_pkt_time":1694275755014912,"flow_dst_last_pkt_time":1694275755031726,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1413,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":3520,"flow_dst_tot_l4_payload_len":11830,"midstream":0,"thread_ts_usec":1694275760841495,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51441,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00990{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3200,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":42,"flow_state":"finished","flow_src_packets_processed":35,"flow_dst_packets_processed":40,"flow_first_seen":1694275755172671,"flow_src_last_pkt_time":1694275760186139,"flow_dst_last_pkt_time":1694275760186051,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1419,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":5588,"flow_dst_tot_l4_payload_len":26249,"midstream":0,"thread_ts_usec":1694275760841495,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51442,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00989{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3200,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":43,"flow_state":"finished","flow_src_packets_processed":19,"flow_dst_packets_processed":20,"flow_first_seen":1694275755218416,"flow_src_last_pkt_time":1694275755617351,"flow_dst_last_pkt_time":1694275755617330,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1417,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2692,"flow_dst_tot_l4_payload_len":9337,"midstream":0,"thread_ts_usec":1694275760841495,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51443,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00991{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3200,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":44,"flow_state":"finished","flow_src_packets_processed":29,"flow_dst_packets_processed":32,"flow_first_seen":1694275755218537,"flow_src_last_pkt_time":1694275755505433,"flow_dst_last_pkt_time":1694275755505381,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1409,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":3336,"flow_dst_tot_l4_payload_len":23846,"midstream":0,"thread_ts_usec":1694275760841495,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51444,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00989{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3200,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":45,"flow_state":"finished","flow_src_packets_processed":18,"flow_dst_packets_processed":18,"flow_first_seen":1694275755591179,"flow_src_last_pkt_time":1694275755801107,"flow_dst_last_pkt_time":1694275755800881,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1407,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":3172,"flow_dst_tot_l4_payload_len":6091,"midstream":0,"thread_ts_usec":1694275760841495,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51449,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00991{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3200,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":46,"flow_state":"finished","flow_src_packets_processed":35,"flow_dst_packets_processed":39,"flow_first_seen":1694275755597605,"flow_src_last_pkt_time":1694275755769689,"flow_dst_last_pkt_time":1694275755769620,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1409,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":3563,"flow_dst_tot_l4_payload_len":29649,"midstream":0,"thread_ts_usec":1694275760841495,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51450,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00990{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3200,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":47,"flow_state":"finished","flow_src_packets_processed":25,"flow_dst_packets_processed":23,"flow_first_seen":1694275755603186,"flow_src_last_pkt_time":1694275760214965,"flow_dst_last_pkt_time":1694275760214865,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1440,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":4336,"flow_dst_tot_l4_payload_len":11628,"midstream":0,"thread_ts_usec":1694275760841495,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51451,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00990{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3200,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":48,"flow_state":"finished","flow_src_packets_processed":19,"flow_dst_packets_processed":18,"flow_first_seen":1694275755624913,"flow_src_last_pkt_time":1694275755772284,"flow_dst_last_pkt_time":1694275755840491,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1417,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":3302,"flow_dst_tot_l4_payload_len":4489,"midstream":0,"thread_ts_usec":1694275760841495,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51452,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00990{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3200,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":49,"flow_state":"finished","flow_src_packets_processed":28,"flow_dst_packets_processed":28,"flow_first_seen":1694275755644863,"flow_src_last_pkt_time":1694275757202671,"flow_dst_last_pkt_time":1694275757202420,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1440,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":6305,"flow_dst_tot_l4_payload_len":11348,"midstream":0,"thread_ts_usec":1694275760841495,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51453,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00990{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3200,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":50,"flow_state":"finished","flow_src_packets_processed":21,"flow_dst_packets_processed":24,"flow_first_seen":1694275755774249,"flow_src_last_pkt_time":1694275759157216,"flow_dst_last_pkt_time":1694275759157148,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1415,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":4763,"flow_dst_tot_l4_payload_len":10622,"midstream":0,"thread_ts_usec":1694275760841495,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51454,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00990{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3200,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":51,"flow_state":"finished","flow_src_packets_processed":21,"flow_dst_packets_processed":21,"flow_first_seen":1694275756080159,"flow_src_last_pkt_time":1694275756253230,"flow_dst_last_pkt_time":1694275756323026,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1427,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":3242,"flow_dst_tot_l4_payload_len":6511,"midstream":0,"thread_ts_usec":1694275760841495,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51455,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00991{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3200,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":52,"flow_state":"finished","flow_src_packets_processed":22,"flow_dst_packets_processed":24,"flow_first_seen":1694275756081462,"flow_src_last_pkt_time":1694275756226056,"flow_dst_last_pkt_time":1694275756299263,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1415,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":3359,"flow_dst_tot_l4_payload_len":10334,"midstream":0,"thread_ts_usec":1694275760841495,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51456,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
01055{"flow_event_id":6,"flow_event_name":"guessed","thread_id":0,"packet_id":3200,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":53,"flow_state":"info","flow_src_packets_processed":2,"flow_dst_packets_processed":1,"flow_first_seen":1694275756164882,"flow_src_last_pkt_time":1694275756192739,"flow_dst_last_pkt_time":1694275756192719,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275760841495,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51457,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"50": {"risk":"TCP Connection Issues","severity":"Medium","risk_score": {"total":350,"client":235,"server":115}}},"confidence": {"1":"Match by port"},"proto":"TLS","proto_id":"91","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Safe","category_id":5,"category":"Web"}}
00781{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3200,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":53,"flow_state":"info","flow_src_packets_processed":2,"flow_dst_packets_processed":1,"flow_first_seen":1694275756164882,"flow_src_last_pkt_time":1694275756192739,"flow_dst_last_pkt_time":1694275756192719,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1694275760841495,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51457,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00990{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3200,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":54,"flow_state":"finished","flow_src_packets_processed":35,"flow_dst_packets_processed":36,"flow_first_seen":1694275756187552,"flow_src_last_pkt_time":1694275758638654,"flow_dst_last_pkt_time":1694275758638393,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1440,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":7516,"flow_dst_tot_l4_payload_len":21188,"midstream":0,"thread_ts_usec":1694275760841495,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51458,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00991{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3200,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":55,"flow_state":"finished","flow_src_packets_processed":18,"flow_dst_packets_processed":20,"flow_first_seen":1694275756191905,"flow_src_last_pkt_time":1694275756784557,"flow_dst_last_pkt_time":1694275756784394,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1419,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2879,"flow_dst_tot_l4_payload_len":11034,"midstream":0,"thread_ts_usec":1694275760841495,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51459,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00991{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3200,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":56,"flow_state":"finished","flow_src_packets_processed":25,"flow_dst_packets_processed":24,"flow_first_seen":1694275757175284,"flow_src_last_pkt_time":1694275757530986,"flow_dst_last_pkt_time":1694275757600549,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1411,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":3301,"flow_dst_tot_l4_payload_len":10115,"midstream":0,"thread_ts_usec":1694275760841495,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51460,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00990{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3200,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":57,"flow_state":"finished","flow_src_packets_processed":23,"flow_dst_packets_processed":26,"flow_first_seen":1694275758612709,"flow_src_last_pkt_time":1694275758915829,"flow_dst_last_pkt_time":1694275758915641,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1407,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":3241,"flow_dst_tot_l4_payload_len":9645,"midstream":0,"thread_ts_usec":1694275760841495,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51461,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00990{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3200,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":58,"flow_state":"finished","flow_src_packets_processed":24,"flow_dst_packets_processed":23,"flow_first_seen":1694275759126273,"flow_src_last_pkt_time":1694275759280147,"flow_dst_last_pkt_time":1694275759305569,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1439,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":3790,"flow_dst_tot_l4_payload_len":9033,"midstream":0,"thread_ts_usec":1694275760841495,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51462,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00990{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3200,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":59,"flow_state":"finished","flow_src_packets_processed":29,"flow_dst_packets_processed":28,"flow_first_seen":1694275760146551,"flow_src_last_pkt_time":1694275760401775,"flow_dst_last_pkt_time":1694275760430537,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1440,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":5835,"flow_dst_tot_l4_payload_len":9424,"midstream":0,"thread_ts_usec":1694275760841495,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51463,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00990{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3200,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":60,"flow_state":"finished","flow_src_packets_processed":16,"flow_dst_packets_processed":17,"flow_first_seen":1694275760159362,"flow_src_last_pkt_time":1694275760309706,"flow_dst_last_pkt_time":1694275760309664,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1425,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2641,"flow_dst_tot_l4_payload_len":8573,"midstream":0,"thread_ts_usec":1694275760841495,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51464,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00989{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3200,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":61,"flow_state":"finished","flow_src_packets_processed":18,"flow_dst_packets_processed":18,"flow_first_seen":1694275760188445,"flow_src_last_pkt_time":1694275760807493,"flow_dst_last_pkt_time":1694275760807237,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1407,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":3236,"flow_dst_tot_l4_payload_len":6089,"midstream":0,"thread_ts_usec":1694275760841495,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51465,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.OperaVPN","proto_id":"91.339","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}}
00794{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3200,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","flow_id":62,"flow_state":"info","flow_src_packets_processed":7,"flow_dst_packets_processed":4,"flow_first_seen":1694275760781591,"flow_src_last_pkt_time":1694275760841495,"flow_dst_last_pkt_time":1694275760839879,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1415,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":1996,"flow_dst_tot_l4_payload_len":2516,"midstream":0,"thread_ts_usec":1694275760841495,"l3_proto":"ip4","src_ip":"192.168.1.29","dst_ip":"77.111.247.69","src_port":51466,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00653{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":3200,"source":"cfgs\/default\/pcap\/opera-vpn.pcapng","alias":"nDPId-test","version":"1.5.0","ndpi_version":"4.9.0-4361-0db12b13","packets-captured":3200,"packets-processed":3200,"total-skipped-flows":0,"total-l4-payload-len":1186790,"total-not-detected-flows":0,"total-guessed-flows":1,"total-detected-flows":61,"total-detection-updates":61,"total-updates":0,"current-active-flows":0,"total-active-flows":62,"total-idle-flows":62,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":618,"global_ts_usec":1694275760841495}
~~~~~~~~~~~~~~~~~~~~ SUMMARY ~~~~~~~~~~~~~~~~~~~~
~~ packets captured/processed: 3200/3200
~~ skipped flows.............: 0
~~ total layer4 data length..: 1186790 bytes
~~ total detected protocols..: 61
~~ total active/idle flows...: 62/62
~~ total timeout flows.......: 0
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~ total memory allocated....: 12093067 bytes
~~ total memory freed........: 12093067 bytes
~~ total allocations/frees...: 220803/220803
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~ json string min len.......: 538 chars
~~ json string max len.......: 2513 chars
~~ json string avg len.......: 1525 chars
|