1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
|
00560{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"cfgs\/default\/pcap\/rtmp.pcap","alias":"nDPId-test","version":"1.5.0","ndpi_version":"4.9.0-4365-b08c787f","max-flows-per-thread":2048,"max-idle-flows-per-thread":64,"reader-thread-count":1,"flow-scan-interval":10000000,"generic-max-idle-time":600000000,"icmp-max-idle-time":120000000,"udp-max-idle-time":180000000,"tcp-max-idle-time":7560000000,"max-packets-per-flow-to-send":5,"max-packets-per-flow-to-process":32,"max-packets-per-flow-to-analyse":32,"global_ts_usec":0}
00623{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":1,"source":"cfgs\/default\/pcap\/rtmp.pcap","alias":"nDPId-test","version":"1.5.0","ndpi_version":"4.9.0-4365-b08c787f","packets-captured":1,"packets-processed":0,"total-skipped-flows":0,"total-l4-payload-len":0,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":0,"total-detection-updates":0,"total-updates":0,"current-active-flows":0,"total-active-flows":0,"total-idle-flows":0,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":2,"global_ts_usec":1196541506793783}
00771{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"cfgs\/default\/pcap\/rtmp.pcap","alias":"nDPId-test","flow_id":1,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1196541506793783,"flow_src_last_pkt_time":1196541506793783,"flow_dst_last_pkt_time":1196541506793783,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1196541506793783,"l3_proto":"ip4","src_ip":"192.168.43.1","dst_ip":"192.168.43.128","src_port":1177,"dst_port":1935,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00535{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"cfgs\/default\/pcap\/rtmp.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_src_last_pkt_time":1196541506793783,"flow_dst_last_pkt_time":1196541506793783,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"thread_ts_usec":1196541506793783,"pkt":"AAwpfMZqAFBWwAAICABFAAAwAzJAAIAGH8TAqCsBwKgrgASZB49J0s7PAAAAAHAC\/\/+GgwAAAgQFtAEBBAI="}
00533{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"cfgs\/default\/pcap\/rtmp.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":2,"flow_src_last_pkt_time":1196541506793783,"flow_dst_last_pkt_time":1196541506794048,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"thread_ts_usec":1196541506794048,"pkt":"AFBWwAAIAAwpfMZqCABFAAAwAABAAEAGYvbAqCuAwKgrAQePBJklcSWUSdLO0HASFtAknQAAAgQFtAEBBAI="}
00523{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"cfgs\/default\/pcap\/rtmp.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":3,"flow_src_last_pkt_time":1196541506794085,"flow_dst_last_pkt_time":1196541506794048,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1196541506794085,"pkt":"AAwpfMZqAFBWwAAICABFAAAoAzNAAIAGH8vAqCsBwKgrgASZB49J0s7QJXEllVAQ\/\/9oMQAA"}
02519{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"cfgs\/default\/pcap\/rtmp.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":4,"flow_src_last_pkt_time":1196541506797289,"flow_dst_last_pkt_time":1196541506794048,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":1196541506797289,"pkt":"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"}
00522{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"cfgs\/default\/pcap\/rtmp.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":5,"flow_src_last_pkt_time":1196541506797289,"flow_dst_last_pkt_time":1196541506797539,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1196541506797539,"pkt":"AFBWwAAIAAwpfMZqCABFAAAoK39AAEAGN3\/AqCuAwKgrAQePBJklcSWVSdLUhFAQIjhARQAA"}
00930{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":8,"source":"cfgs\/default\/pcap\/rtmp.pcap","alias":"nDPId-test","flow_id":1,"flow_state":"info","flow_src_packets_processed":4,"flow_dst_packets_processed":4,"flow_first_seen":1196541506793783,"flow_src_last_pkt_time":1196541506798015,"flow_dst_last_pkt_time":1196541507028289,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1460,"flow_dst_max_l4_payload_len":1260,"flow_src_tot_l4_payload_len":1537,"flow_dst_tot_l4_payload_len":1260,"midstream":0,"thread_ts_usec":1196541507028289,"l3_proto":"ip4","src_ip":"192.168.43.1","dst_ip":"192.168.43.128","src_port":1177,"dst_port":1935,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"RTMP","proto_id":"174","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":1,"category":"Media"}}
00972{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":26,"source":"cfgs\/default\/pcap\/rtmp.pcap","alias":"nDPId-test","flow_id":1,"flow_state":"finished","flow_src_packets_processed":12,"flow_dst_packets_processed":14,"flow_first_seen":1196541506793783,"flow_src_last_pkt_time":1196541507836444,"flow_dst_last_pkt_time":1196541507670099,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1460,"flow_dst_max_l4_payload_len":1460,"flow_src_tot_l4_payload_len":3452,"flow_dst_tot_l4_payload_len":3496,"midstream":0,"thread_ts_usec":1196541507836444,"l3_proto":"ip4","src_ip":"192.168.43.1","dst_ip":"192.168.43.128","src_port":1177,"dst_port":1935,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"RTMP","proto_id":"174","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":1,"category":"Media"}}
00632{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":26,"source":"cfgs\/default\/pcap\/rtmp.pcap","alias":"nDPId-test","version":"1.5.0","ndpi_version":"4.9.0-4365-b08c787f","packets-captured":26,"packets-processed":26,"total-skipped-flows":0,"total-l4-payload-len":6948,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":1,"total-detection-updates":0,"total-updates":0,"current-active-flows":0,"total-active-flows":1,"total-idle-flows":1,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":11,"global_ts_usec":1196541507836444}
~~~~~~~~~~~~~~~~~~~~ SUMMARY ~~~~~~~~~~~~~~~~~~~~
~~ packets captured/processed: 26/26
~~ skipped flows.............: 0
~~ total layer4 data length..: 6948 bytes
~~ total detected protocols..: 1
~~ total active/idle flows...: 1/1
~~ total timeout flows.......: 0
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~ total memory allocated....: 11478174 bytes
~~ total memory freed........: 11478174 bytes
~~ total allocations/frees...: 216652/216652
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~ json string min len.......: 527 chars
~~ json string max len.......: 2524 chars
~~ json string avg len.......: 1497 chars
|