1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
|
00561{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"cfgs\/default\/pcap\/vxlan.pcap","alias":"nDPId-test","version":"1.7.0","ndpi_version":"4.11.0-4834-92507c0","max-flows-per-thread":2048,"max-idle-flows-per-thread":64,"reader-thread-count":1,"flow-scan-interval":10000000,"generic-max-idle-time":600000000,"icmp-max-idle-time":120000000,"udp-max-idle-time":180000000,"tcp-max-idle-time":7560000000,"max-packets-per-flow-to-send":5,"max-packets-per-flow-to-process":32,"max-packets-per-flow-to-analyse":32,"global_ts_usec":0}
00785{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":1,"source":"cfgs\/default\/pcap\/vxlan.pcap","alias":"nDPId-test","version":"1.7.0","ndpi_version":"4.11.0-4834-92507c0","packets-captured":1,"packets-processed":0,"pfring_active":false,"pfring_recv":0,"pfring_drop":0,"pfring_shunt":0,"total-skipped-flows":0,"total-l4-payload-len":0,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":0,"total-detection-updates":0,"total-updates":0,"current-active-flows":0,"total-active-flows":0,"total-idle-flows":0,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"global-alloc-count":0,"global-free-count":0,"global-alloc-bytes":0,"global-free-bytes":0,"total-events-serialized":2,"global_ts_usec":1639650442645225}
00773{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"cfgs\/default\/pcap\/vxlan.pcap","alias":"nDPId-test","flow_id":1,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1639650442645225,"flow_src_last_pkt_time":1639650442645225,"flow_dst_last_pkt_time":1639650442645225,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":80,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":80,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":80,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1639650442645225,"l3_proto":"ip4","src_ip":"192.168.22.4","dst_ip":"192.168.22.5","src_port":60887,"dst_port":4789,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5}
00621{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"cfgs\/default\/pcap\/vxlan.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_src_last_pkt_time":1639650442645225,"flow_dst_last_pkt_time":1639650442645225,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":126,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":126,"pkt_l4_len":88,"thread_ts_usec":1639650442645225,"pkt":"AAy9Bjp0AAy9Bjp1gQAABQgARQAAbAM\/AABAEcnowKgWBMCoFgXt1xK1AFhqBAgAAAAABFcAZnpQqv+aHuppKm\/PCABFAAA6NbBAAEAR1uUKChQECAgICK2VADUAJhfikMYBAAABAAAAAAAACGZhY2Vib29rA2NvbQAAAQAB"}
00923{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"cfgs\/default\/pcap\/vxlan.pcap","alias":"nDPId-test","flow_id":1,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1639650442645225,"flow_src_last_pkt_time":1639650442645225,"flow_dst_last_pkt_time":1639650442645225,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":80,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":80,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":80,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1639650442645225,"l3_proto":"ip4","src_ip":"192.168.22.4","dst_ip":"192.168.22.5","src_port":60887,"dst_port":4789,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"VXLAN","proto_id":"64","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00620{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"cfgs\/default\/pcap\/vxlan.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":2,"flow_src_last_pkt_time":1639650442645316,"flow_dst_last_pkt_time":1639650442645225,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":126,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":126,"pkt_l4_len":88,"thread_ts_usec":1639650442645316,"pkt":"AAy9Bjp0AAy9Bjp1gQAABQgARQAAbANAAABAEcnnwKgWBMCoFgXt1xK1AFhqBAgAAAAABFcAZnpQqv+aHuppKm\/PCABFAAA6NbFAAEAR1uQKChQECAgICK2VADUAJoy+G88BAAABAAAAAAAACGZhY2Vib29rA2NvbQAAHAAB"}
00773{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3,"source":"cfgs\/default\/pcap\/vxlan.pcap","alias":"nDPId-test","flow_id":2,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1639650442682647,"flow_src_last_pkt_time":1639650442682647,"flow_dst_last_pkt_time":1639650442682647,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":96,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":96,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":96,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1639650442682647,"l3_proto":"ip4","src_ip":"192.168.22.5","dst_ip":"192.168.22.4","src_port":43866,"dst_port":4789,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5}
00645{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"cfgs\/default\/pcap\/vxlan.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_src_last_pkt_time":1639650442682647,"flow_dst_last_pkt_time":1639650442682647,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":142,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":142,"pkt_l4_len":104,"thread_ts_usec":1639650442682647,"pkt":"AAy9Bjp1AAy9Bjp0gQAABQgARQAAfK8cAABAER37wKgWBcCoFgSrWhK1AGit0wgAAAAABFcAHuppKm\/PZnpQqv+aCABFAABK7zAAAHgRJVUICAgICgoUBAA1rZUANljckMaBgAABAAEAAAAACGZhY2Vib29rA2NvbQAAAQABwAwAAQABAAAAPQAEnfDgIw=="}
00923{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":3,"source":"cfgs\/default\/pcap\/vxlan.pcap","alias":"nDPId-test","flow_id":2,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1639650442682647,"flow_src_last_pkt_time":1639650442682647,"flow_dst_last_pkt_time":1639650442682647,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":96,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":96,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":96,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1639650442682647,"l3_proto":"ip4","src_ip":"192.168.22.5","dst_ip":"192.168.22.4","src_port":43866,"dst_port":4789,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"VXLAN","proto_id":"64","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00661{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"cfgs\/default\/pcap\/vxlan.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":2,"flow_src_last_pkt_time":1639650442711366,"flow_dst_last_pkt_time":1639650442682647,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":154,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":154,"pkt_l4_len":116,"thread_ts_usec":1639650442711366,"pkt":"AAy9Bjp1AAy9Bjp0gQAABQgARQAAiK8kAABAER3nwKgWBcCoFgSrWhK1AHSt3wgAAAAABFcAHuppKm\/PZnpQqv+aCABFAABW18oAAHgRPK8ICAgICgoUBAA1rZUAQjV7G8+BgAABAAEAAAAACGZhY2Vib29rA2NvbQAAHAABwAwAHAABAAABLAAQKgMogPFlAIH6zrAMAAAl3g=="}
00773{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5,"source":"cfgs\/default\/pcap\/vxlan.pcap","alias":"nDPId-test","flow_id":3,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1639650442712036,"flow_src_last_pkt_time":1639650442712036,"flow_dst_last_pkt_time":1639650442712036,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":82,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":82,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":82,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1639650442712036,"l3_proto":"ip4","src_ip":"192.168.22.4","dst_ip":"192.168.22.5","src_port":49762,"dst_port":4789,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5}
00625{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"cfgs\/default\/pcap\/vxlan.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_src_last_pkt_time":1639650442712036,"flow_dst_last_pkt_time":1639650442712036,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":128,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":128,"pkt_l4_len":90,"thread_ts_usec":1639650442712036,"pkt":"AAy9Bjp0AAy9Bjp1gQAABQgARQAAbgNKAABAEcnbwKgWBMCoFgXCYhK1AFoDcQgAAAAABFcAZnpQqv+aHuppKm\/PCABFAAA8c1FAAEAGK0kKChQEnfDgI7CqAbtGa9PfAAAAAKAC\/Vy6qgAAAgQFggQCCAr1DDJLAAAAAAEDAwc="}
00923{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":5,"source":"cfgs\/default\/pcap\/vxlan.pcap","alias":"nDPId-test","flow_id":3,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1639650442712036,"flow_src_last_pkt_time":1639650442712036,"flow_dst_last_pkt_time":1639650442712036,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":82,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":82,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":82,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1639650442712036,"l3_proto":"ip4","src_ip":"192.168.22.4","dst_ip":"192.168.22.5","src_port":49762,"dst_port":4789,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"VXLAN","proto_id":"64","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00773{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6,"source":"cfgs\/default\/pcap\/vxlan.pcap","alias":"nDPId-test","flow_id":4,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1639650442720908,"flow_src_last_pkt_time":1639650442720908,"flow_dst_last_pkt_time":1639650442720908,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":82,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":82,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":82,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1639650442720908,"l3_proto":"ip4","src_ip":"192.168.22.5","dst_ip":"192.168.22.4","src_port":60230,"dst_port":4789,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5}
00627{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"cfgs\/default\/pcap\/vxlan.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_src_last_pkt_time":1639650442720908,"flow_dst_last_pkt_time":1639650442720908,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":128,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":128,"pkt_l4_len":90,"thread_ts_usec":1639650442720908,"pkt":"AAy9Bjp1AAy9Bjp0gQAABQgARQAAbq8mAABAER3\/wKgWBcCoFgTrRhK1AFqtxQgAAAAABFcAHuppKm\/PZnpQqv+aCABFCAA8AABAAFcGh5Kd8OAjCgoUBAG7sKrMyr8yRmvT4KAS\/\/+p5QAAAgQFcAQCCApu3xNF9QwySwEDAwg="}
00923{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":6,"source":"cfgs\/default\/pcap\/vxlan.pcap","alias":"nDPId-test","flow_id":4,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1639650442720908,"flow_src_last_pkt_time":1639650442720908,"flow_dst_last_pkt_time":1639650442720908,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":82,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":82,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":82,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1639650442720908,"l3_proto":"ip4","src_ip":"192.168.22.5","dst_ip":"192.168.22.4","src_port":60230,"dst_port":4789,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"VXLAN","proto_id":"64","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00613{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"cfgs\/default\/pcap\/vxlan.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":2,"flow_src_last_pkt_time":1639650442721173,"flow_dst_last_pkt_time":1639650442712036,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":120,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":120,"pkt_l4_len":82,"thread_ts_usec":1639650442721173,"pkt":"AAy9Bjp0AAy9Bjp1gQAABQgARQAAZgNLAABAEcniwKgWBMCoFgXCYhK1AFIDeQgAAAAABFcAZnpQqv+aHuppKm\/PCABFAAA0c1JAAEAGK1AKChQEnfDgI7CqAbtGa9PgzMq\/M4AQAfvWagAAAQEICvUMMlRu3xNF"}
01034{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"cfgs\/default\/pcap\/vxlan.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":3,"flow_src_last_pkt_time":1639650442721478,"flow_dst_last_pkt_time":1639650442712036,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":434,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":434,"pkt_l4_len":396,"thread_ts_usec":1639650442721478,"pkt":"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"}
00613{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"cfgs\/default\/pcap\/vxlan.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":2,"flow_src_last_pkt_time":1639650442730182,"flow_dst_last_pkt_time":1639650442720908,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":120,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":120,"pkt_l4_len":82,"thread_ts_usec":1639650442730182,"pkt":"AAy9Bjp1AAy9Bjp0gQAABQgARQAAZq8oAABAER4FwKgWBcCoFgTrRhK1AFKtvQgAAAAABFcAHuppKm\/PZnpQqv+aCABFCAA0NXJAAFcGUiid8OAjCgoUBAG7sKrMyr8zRmvVGoAQAQXWHAAAAQEICm7fE0\/1DDJU"}
02483{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"cfgs\/default\/pcap\/vxlan.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":3,"flow_src_last_pkt_time":1639650442731370,"flow_dst_last_pkt_time":1639650442720908,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":1500,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":1500,"pkt_l4_len":1462,"thread_ts_usec":1639650442731370,"pkt":"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"}
02488{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"cfgs\/default\/pcap\/vxlan.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":4,"flow_src_last_pkt_time":1639650442731442,"flow_dst_last_pkt_time":1639650442720908,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":1500,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":1500,"pkt_l4_len":1462,"thread_ts_usec":1639650442731442,"pkt":"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"}
01249{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"cfgs\/default\/pcap\/vxlan.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":5,"flow_src_last_pkt_time":1639650442731452,"flow_dst_last_pkt_time":1639650442720908,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":588,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":588,"pkt_l4_len":550,"thread_ts_usec":1639650442731452,"pkt":"AAy9Bjp1AAy9Bjp0gQAABQgARQACOq8rAABAERwuwKgWBcCoFgTrRhK1AiavkQgAAAAABFcAHuppKm\/PZnpQqv+aCABFCAIINXVAAFcGUFGd8OAjCgoUBAG7sKrMysn7RmvVGoAYAQXh4wAAAQEICm7fE0\/1DDJUWPGWEIopRc1kqqnRU0+lugsDnb4Vo\/J3w7OblyaZUlkVYbFmr5+Uv3bjjyoWVsSE++ZXnO12yHGrKJu1pbLqnrmbYAXLsYF9Qi8HXrgmeqkOwFBOP2RmxCNFB19MIcKz60l9LzgtUiYI4BjZmez3GfiKLT6vH1sUaHJvuYGziRuSeM9KkzSuRYzWvEVI1XCCWxBi2\/uvbwWSDng8q1AeyujuTA7NJ3xK4haEKdftraAmQbydVilifeJ+alFNFehINR1YKmNyIug4nT013EZPndfEm8QsEO\/RIaFopqgYe\/Nqdv0ldqu7KYMKH4kSvohYKS7xLdSyj5BuVvtTz66XrOihEzNFOh1HGJEqN9BMZI7\/l+43OsnYyzz6Za59S43b8nAv6jzEqC3waAo0BUjVUfzV83y\/mdnqGcPeOoogAZBvG3iQZy3+ULwglk1bld3ZTrfpOncv\/VsPNkCHr8GdxkjHpodBr2jIQ3kevQ\/Qvf\/zuw9PHxsIBiih7KuxAX6uRgHFB6\/h8a58gYHq4LN8LZ8yRxgnT9OiNrVL7JEJZnrNL4D2WThvLrSFIXyfH6bj0C2zG6BlMdhFKhjcI3cEBA00aCBVWwhlkCpck01CLKkp6Qzj"}
00613{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"cfgs\/default\/pcap\/vxlan.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":4,"flow_src_last_pkt_time":1639650442731607,"flow_dst_last_pkt_time":1639650442712036,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":120,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":120,"pkt_l4_len":82,"thread_ts_usec":1639650442731607,"pkt":"AAy9Bjp0AAy9Bjp1gQAABQgARQAAZgNNAABAEcngwKgWBMCoFgXCYhK1AFIDeQgAAAAABFcAZnpQqv+aHuppKm\/PCABFAAA0c1RAAEAGK04KChQEnfDgI7CqAbtGa9UazMrEl4AQAfHPwgAAAQEICvUMMl5u3xNP"}
00614{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"cfgs\/default\/pcap\/vxlan.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":5,"flow_src_last_pkt_time":1639650442731706,"flow_dst_last_pkt_time":1639650442712036,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":120,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":120,"pkt_l4_len":82,"thread_ts_usec":1639650442731706,"pkt":"AAy9Bjp0AAy9Bjp1gQAABQgARQAAZgNOAABAEcnfwKgWBMCoFgXCYhK1AFIDeQgAAAAABFcAZnpQqv+aHuppKm\/PCABFAAA0c1VAAEAGK00KChQEnfDgI7CqAbtGa9UazMrJ+4AQAe\/KXwAAAQEICvUMMl9u3xNP"}
00774{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":24,"source":"cfgs\/default\/pcap\/vxlan.pcap","alias":"nDPId-test","flow_id":5,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1639650442864784,"flow_src_last_pkt_time":1639650442864784,"flow_dst_last_pkt_time":1639650442864784,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":84,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":84,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":84,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1639650442864784,"l3_proto":"ip4","src_ip":"192.168.22.4","dst_ip":"192.168.22.5","src_port":60351,"dst_port":4789,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5}
00629{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"cfgs\/default\/pcap\/vxlan.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_src_last_pkt_time":1639650442864784,"flow_dst_last_pkt_time":1639650442864784,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":130,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":130,"pkt_l4_len":92,"thread_ts_usec":1639650442864784,"pkt":"AAy9Bjp0AAy9Bjp1gQAABQgARQAAcANpAABAEcm6wKgWBMCoFgXrvxK1AFxsGAgAAAAABFcAZnpQqv+aHuppKm\/PCABFAAA+NbtAAEAR1tYKChQECAgICIBcADUAKoq80C4BAAABAAAAAAAAA3d3dwhmYWNlYm9vawNjb20AAAEAAQ=="}
00924{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":24,"source":"cfgs\/default\/pcap\/vxlan.pcap","alias":"nDPId-test","flow_id":5,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1639650442864784,"flow_src_last_pkt_time":1639650442864784,"flow_dst_last_pkt_time":1639650442864784,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":84,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":84,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":84,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1639650442864784,"l3_proto":"ip4","src_ip":"192.168.22.4","dst_ip":"192.168.22.5","src_port":60351,"dst_port":4789,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"VXLAN","proto_id":"64","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00629{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"cfgs\/default\/pcap\/vxlan.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":2,"flow_src_last_pkt_time":1639650442864881,"flow_dst_last_pkt_time":1639650442864784,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":130,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":130,"pkt_l4_len":92,"thread_ts_usec":1639650442864881,"pkt":"AAy9Bjp0AAy9Bjp1gQAABQgARQAAcANqAABAEcm5wKgWBMCoFgXrvxK1AFxsGAgAAAAABFcAZnpQqv+aHuppKm\/PCABFAAA+NbxAAEAR1tUKChQECAgICIBcADUAKi+aKzYBAAABAAAAAAAAA3d3dwhmYWNlYm9vawNjb20AABwAAQ=="}
00777{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":26,"source":"cfgs\/default\/pcap\/vxlan.pcap","alias":"nDPId-test","flow_id":6,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1639650442902284,"flow_src_last_pkt_time":1639650442902284,"flow_dst_last_pkt_time":1639650442902284,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":129,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":129,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":129,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1639650442902284,"l3_proto":"ip4","src_ip":"192.168.22.5","dst_ip":"192.168.22.4","src_port":50251,"dst_port":4789,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5}
00690{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"cfgs\/default\/pcap\/vxlan.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_src_last_pkt_time":1639650442902284,"flow_dst_last_pkt_time":1639650442902284,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":175,"pkt_l4_len":137,"thread_ts_usec":1639650442902284,"pkt":"AAy9Bjp1AAy9Bjp0gQAABQgARQAAna9MAABAER2qwKgWBcCoFgTESxK1AImt9AgAAAAABFcAHuppKm\/PZnpQqv+aCABFCABrklQAAHgRgggICAgICgoUBAA1gFwAV2EE0C6BgAABAAIAAAAAA3d3dwhmYWNlYm9vawNjb20AAAEAAcAMAAUAAQAAClEAEQlzdGFyLW1pbmkEYzEwcsAQwC4AAQABAAAAEQAEnfDgIw=="}
00927{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":26,"source":"cfgs\/default\/pcap\/vxlan.pcap","alias":"nDPId-test","flow_id":6,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1639650442902284,"flow_src_last_pkt_time":1639650442902284,"flow_dst_last_pkt_time":1639650442902284,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":129,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":129,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":129,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1639650442902284,"l3_proto":"ip4","src_ip":"192.168.22.5","dst_ip":"192.168.22.4","src_port":50251,"dst_port":4789,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"VXLAN","proto_id":"64","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00706{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"cfgs\/default\/pcap\/vxlan.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":2,"flow_src_last_pkt_time":1639650442930989,"flow_dst_last_pkt_time":1639650442902284,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":187,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":187,"pkt_l4_len":149,"thread_ts_usec":1639650442930989,"pkt":"AAy9Bjp1AAy9Bjp0gQAABQgARQAAqa9SAABAER2YwKgWBcCoFgTESxK1AJWuAAgAAAAABFcAHuppKm\/PZnpQqv+aCABFCAB3WtIAAHgRuX4ICAgICgoUBAA1gFwAY6QKKzaBgAABAAIAAAAAA3d3dwhmYWNlYm9vawNjb20AABwAAcAMAAUAAQAACnkAEQlzdGFyLW1pbmkEYzEwcsAQwC4AHAABAAAAPAAQKgMogPFlAIH6zrAMAAAl3g=="}
00774{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":28,"source":"cfgs\/default\/pcap\/vxlan.pcap","alias":"nDPId-test","flow_id":7,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1639650442931548,"flow_src_last_pkt_time":1639650442931548,"flow_dst_last_pkt_time":1639650442931548,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":82,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":82,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":82,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1639650442931548,"l3_proto":"ip4","src_ip":"192.168.22.4","dst_ip":"192.168.22.5","src_port":40646,"dst_port":4789,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5}
00626{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"cfgs\/default\/pcap\/vxlan.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_src_last_pkt_time":1639650442931548,"flow_dst_last_pkt_time":1639650442931548,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":128,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":128,"pkt_l4_len":90,"thread_ts_usec":1639650442931548,"pkt":"AAy9Bjp0AAy9Bjp1gQAABQgARQAAbgNuAABAEcm3wKgWBMCoFgWexhK1AFonDQgAAAAABFcAZnpQqv+aHuppKm\/PCABFAAA8KWlAAEAGdTEKChQEnfDgI7CsAbtx7JCPAAAAAKAC\/VzRnAAAAgQFggQCCAr1DDMmAAAAAAEDAwc="}
00924{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":28,"source":"cfgs\/default\/pcap\/vxlan.pcap","alias":"nDPId-test","flow_id":7,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1639650442931548,"flow_src_last_pkt_time":1639650442931548,"flow_dst_last_pkt_time":1639650442931548,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":82,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":82,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":82,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1639650442931548,"l3_proto":"ip4","src_ip":"192.168.22.4","dst_ip":"192.168.22.5","src_port":40646,"dst_port":4789,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"VXLAN","proto_id":"64","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00774{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":29,"source":"cfgs\/default\/pcap\/vxlan.pcap","alias":"nDPId-test","flow_id":8,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1639650442941597,"flow_src_last_pkt_time":1639650442941597,"flow_dst_last_pkt_time":1639650442941597,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":82,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":82,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":82,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1639650442941597,"l3_proto":"ip4","src_ip":"192.168.22.5","dst_ip":"192.168.22.4","src_port":36286,"dst_port":4789,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5}
00628{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"cfgs\/default\/pcap\/vxlan.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_src_last_pkt_time":1639650442941597,"flow_dst_last_pkt_time":1639650442941597,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":128,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":128,"pkt_l4_len":90,"thread_ts_usec":1639650442941597,"pkt":"AAy9Bjp1AAy9Bjp0gQAABQgARQAAbq9VAABAER3QwKgWBcCoFgSNvhK1AFqtxQgAAAAABFcAHuppKm\/PZnpQqv+aCABFCAA8AABAAFcGh5Kd8OAjCgoUBAG7sKwSxDYyceyQkKAS\/\/\/6FgAAAgQFcAQCCAo3WVST9QwzJgEDAwg="}
00924{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":29,"source":"cfgs\/default\/pcap\/vxlan.pcap","alias":"nDPId-test","flow_id":8,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1639650442941597,"flow_src_last_pkt_time":1639650442941597,"flow_dst_last_pkt_time":1639650442941597,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":82,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":82,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":82,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1639650442941597,"l3_proto":"ip4","src_ip":"192.168.22.5","dst_ip":"192.168.22.4","src_port":36286,"dst_port":4789,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"VXLAN","proto_id":"64","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00613{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"cfgs\/default\/pcap\/vxlan.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":2,"flow_src_last_pkt_time":1639650442941877,"flow_dst_last_pkt_time":1639650442931548,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":120,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":120,"pkt_l4_len":82,"thread_ts_usec":1639650442941877,"pkt":"AAy9Bjp0AAy9Bjp1gQAABQgARQAAZgNwAABAEcm9wKgWBMCoFgWexhK1AFInFQgAAAAABFcAZnpQqv+aHuppKm\/PCABFAAA0KWpAAEAGdTgKChQEnfDgI7CsAbtx7JCQEsQ2M4AQAfsmmgAAAQEICvUMMzE3WVST"}
01040{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"cfgs\/default\/pcap\/vxlan.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":3,"flow_src_last_pkt_time":1639650442942182,"flow_dst_last_pkt_time":1639650442931548,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":438,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":438,"pkt_l4_len":400,"thread_ts_usec":1639650442942182,"pkt":"AAy9Bjp0AAy9Bjp1gQAABQgARQABpANxAABAEch+wKgWBMCoFgWexhK1AZAl1wgAAAAABFcAZnpQqv+aHuppKm\/PCABFAAFyKWtAAEAGc\/kKChQEnfDgI7CsAbtx7JCQEsQ2M4AYAfsFYwAAAQEICvUMMzE3WVSTFgMBATkBAAE1AwM+kikCjZKYLJ0yMsC2SkPOGgwTwgkXQ4SgJHcmBMuaciDzcy2bbZtRNimKWfvjKRYfjG8z06\/JyuimMrKvKOQk2AA+EwITAxMBwCzAMACfzKnMqMyqwCvALwCewCTAKABrwCPAJwBnwArAFAA5wAnAEwAzAJ0AnAA9ADwANQAvAP8BAACuAAAAFQATAAAQd3d3LmZhY2Vib29rLmNvbQALAAQDAAECAAoADAAKAB0AFwAeABkAGAAjAAAAFgAAABcAAAANADAALgQDBQMGAwgHCAgICQgKCAsIBAgFCAYEAQUBBgEDAwIDAwECAQMCAgIEAgUCBgIAKwAJCAMEAwMDAgMBAC0AAgEBADMAJgAkAB0AIFjRzvsXuQ0A5A179GyLQXzYsfihHOpNhs3mPbXqyp9j"}
00614{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"cfgs\/default\/pcap\/vxlan.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":2,"flow_src_last_pkt_time":1639650442952129,"flow_dst_last_pkt_time":1639650442941597,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":120,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":120,"pkt_l4_len":82,"thread_ts_usec":1639650442952129,"pkt":"AAy9Bjp1AAy9Bjp0gQAABQgARQAAZq9YAABAER3VwKgWBcCoFgSNvhK1AFKtvQgAAAAABFcAHuppKm\/PZnpQqv+aCABFCAA0iYtAAFcG\/g6d8OAjCgoUBAG7sKwSxDYzceyRzoAQAQUmRwAAAQEICjdZVJ71DDMx"}
02483{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"cfgs\/default\/pcap\/vxlan.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":3,"flow_src_last_pkt_time":1639650442953531,"flow_dst_last_pkt_time":1639650442941597,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":1500,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":1500,"pkt_l4_len":1462,"thread_ts_usec":1639650442953531,"pkt":"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"}
02495{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"cfgs\/default\/pcap\/vxlan.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":4,"flow_src_last_pkt_time":1639650442953636,"flow_dst_last_pkt_time":1639650442941597,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":1500,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":1500,"pkt_l4_len":1462,"thread_ts_usec":1639650442953636,"pkt":"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"}
01247{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"cfgs\/default\/pcap\/vxlan.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":5,"flow_src_last_pkt_time":1639650442953646,"flow_dst_last_pkt_time":1639650442941597,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":588,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":588,"pkt_l4_len":550,"thread_ts_usec":1639650442953646,"pkt":"AAy9Bjp1AAy9Bjp0gQAABQgARQACOq9bAABAERv+wKgWBcCoFgSNvhK1AiavkQgAAAAABFcAHuppKm\/PZnpQqv+aCABFCAIIiY5AAFcG\/Ded8OAjCgoUBAG7sKwSxED7ceyRzoAYAQWPfAAAAQEICjdZVJ\/1DDMx2QuTkae710\/WTJhvcURVHdJ9WIKQu4qWz9CFIaHOPcIMfpl2B9XqtuTclkw0rK4gmFQ82pczBMIap80mccIYXLm6DgRL4FoVPUaAJGa3mvIksW6UDt03Ua1HuIygWHRNKChfT6grUwB5hGjwLc5bB1H9v9s1ZNH3c1MFIPb5NPRDCIWlE76Y3Wglw1E1DiZBU1njd207V3Wh0sa+ZGg4HqYuuPXKSgtBT5DKuEc8dTH7NycOtQzIlEiMC3JNF4MbiR9Z\/FZQVVGs5cZMlOswF4trEe8QCXqcoHzvFf\/KEe2aJ6W3E6nPTubRIAh2VoGkUHozDVLcdoDXG9i2gDKRbUsge39PTPrwGyilvUDazyz6pOLtzE4B4bt+zqaBZ5Gt\/znd27GZ13LRj+IyaXZFjiqzyWzb+2glFa\/sRofXpcy+Gx5sKd4nKxrwizOB8rmGpZIhbSUpxQFzIyiVnPFhSZfp40CjI5bOGa4X+mmYYdYxdDwKr+muO2RLX3aG5z8V1J93cgmQgCDMO2NWnGBKRX\/8Jj6EjmjwV3TvXi0bl6jR6TuXEV7V6U1zfbj+f42GOH9+2bl8adWMFJUoqmHbZcem2j\/PGLKRfXEmoRYVhESvzDQr"}
00613{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"cfgs\/default\/pcap\/vxlan.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":4,"flow_src_last_pkt_time":1639650442953712,"flow_dst_last_pkt_time":1639650442931548,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":120,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":120,"pkt_l4_len":82,"thread_ts_usec":1639650442953712,"pkt":"AAy9Bjp0AAy9Bjp1gQAABQgARQAAZgNyAABAEcm7wKgWBMCoFgWexhK1AFInFQgAAAAABFcAZnpQqv+aHuppKm\/PCABFAAA0KWxAAEAGdTYKChQEnfDgI7CsAbtx7JHOEsQ7l4AQAfEf6gAAAQEICvUMMz03WVSf"}
00613{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"cfgs\/default\/pcap\/vxlan.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":5,"flow_src_last_pkt_time":1639650442953912,"flow_dst_last_pkt_time":1639650442931548,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":120,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":120,"pkt_l4_len":82,"thread_ts_usec":1639650442953912,"pkt":"AAy9Bjp0AAy9Bjp1gQAABQgARQAAZgNzAABAEcm6wKgWBMCoFgWexhK1AFInFQgAAAAABFcAZnpQqv+aHuppKm\/PCABFAAA0KW1AAEAGdTUKChQEnfDgI7CsAbtx7JHOEsRA+4AQAe8aiAAAAQEICvUMMz03WVSf"}
00774{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":54,"source":"cfgs\/default\/pcap\/vxlan.pcap","alias":"nDPId-test","flow_id":9,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1639650443097770,"flow_src_last_pkt_time":1639650443097770,"flow_dst_last_pkt_time":1639650443097770,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":62,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":62,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":62,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1639650443097770,"l3_proto":"ip4","src_ip":"192.168.22.4","dst_ip":"192.168.22.5","src_port":60230,"dst_port":4789,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5}
00597{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":54,"source":"cfgs\/default\/pcap\/vxlan.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_src_last_pkt_time":1639650443097770,"flow_dst_last_pkt_time":1639650443097770,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":108,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":108,"pkt_l4_len":70,"thread_ts_usec":1639650443097770,"pkt":"AAy9Bjp0AAy9Bjp1gQAABQgARQAAWgOIAABAEcmxwKgWBMCoFgXrRhK1AEbaoAgAAAAABFcAZnpQqv+aHuppKm\/PCABFCAAoAABAAEAGnqYKChQEnfDgI7CqAbtGa9YTAAAAAFAEAABE2gAA"}
00924{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":54,"source":"cfgs\/default\/pcap\/vxlan.pcap","alias":"nDPId-test","flow_id":9,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1639650443097770,"flow_src_last_pkt_time":1639650443097770,"flow_dst_last_pkt_time":1639650443097770,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":62,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":62,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":62,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1639650443097770,"l3_proto":"ip4","src_ip":"192.168.22.4","dst_ip":"192.168.22.5","src_port":60230,"dst_port":4789,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"VXLAN","proto_id":"64","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00597{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":55,"source":"cfgs\/default\/pcap\/vxlan.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":2,"flow_src_last_pkt_time":1639650443097913,"flow_dst_last_pkt_time":1639650443097770,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":108,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":108,"pkt_l4_len":70,"thread_ts_usec":1639650443097913,"pkt":"AAy9Bjp0AAy9Bjp1gQAABQgARQAAWgOJAABAEcmwwKgWBMCoFgXrRhK1AEbaoAgAAAAABFcAZnpQqv+aHuppKm\/PCABFCAAoAABAAEAGnqYKChQEnfDgI7CqAbtGa9YTAAAAAFAEAABE2gAA"}
00597{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"cfgs\/default\/pcap\/vxlan.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":3,"flow_src_last_pkt_time":1639650443097920,"flow_dst_last_pkt_time":1639650443097770,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":108,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":108,"pkt_l4_len":70,"thread_ts_usec":1639650443097920,"pkt":"AAy9Bjp0AAy9Bjp1gQAABQgARQAAWgOKAABAEcmvwKgWBMCoFgXrRhK1AEbaoAgAAAAABFcAZnpQqv+aHuppKm\/PCABFCAAoAABAAEAGnqYKChQEnfDgI7CqAbtGa9YUAAAAAFAEAABE2QAA"}
02185{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":89,"source":"cfgs\/default\/pcap\/vxlan.pcap","alias":"nDPId-test","flow_id":8,"flow_state":"finished","flow_src_packets_processed":32,"flow_dst_packets_processed":0,"flow_first_seen":1639650442941597,"flow_src_last_pkt_time":1639650443255719,"flow_dst_last_pkt_time":1639650442941597,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":74,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1454,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":35959,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1639650443255719,"l3_proto":"ip4","src_ip":"192.168.22.5","dst_ip":"192.168.22.4","src_port":36286,"dst_port":4789,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5,"data_analysis": {"iat": {"min":10,"avg":10133.0,"max":140558,"stddev":31047.2,"var":963930240.0,"ent":2.2,"data": [10532,1402,105,10,11439,530,9521,113264,10571,140558,101,64,3057,190,558,175,1284,181,1316,3621,187,402,189,2282,184,313,186,833,189,694,184]},"pktlen": {"min":102,"avg":1151.7,"max":1482,"stddev":546.6,"var":298767.6,"ent":4.8,"data": [110,102,1482,1482,570,102,271,102,554,102,1482,1482,856,1482,1482,1482,1482,1482,1482,1482,1482,1482,1482,1482,1482,1482,1482,1482,1482,1482,1482,1482]},"bins": {"c_to_s": [0,0,5,0,0,0,0,1,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,23,0,0],"s_to_c": [0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]},"directions": [0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0],"entropies": [5.583852291,5.651705265,7.826985836,7.861832619,7.623077869,5.619890690,7.052967072,5.635924816,7.564305782,5.565874100,7.866837978,7.859116077,7.762131214,7.859333515,7.877618790,7.863654613,7.851696491,7.874659538,7.855105877,7.845957756,7.883800030,7.862126827,7.878228188,7.846958637,7.850887299,7.866386890,7.866912842,7.871983051,7.852091789,7.857552052,7.852843761,7.854843616]},"ndpi": {"confidence": {"6":"DPI"},"proto":"VXLAN","proto_id":"64","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
02158{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":122,"source":"cfgs\/default\/pcap\/vxlan.pcap","alias":"nDPId-test","flow_id":7,"flow_state":"finished","flow_src_packets_processed":32,"flow_dst_packets_processed":0,"flow_first_seen":1639650442931548,"flow_src_last_pkt_time":1639650443264733,"flow_dst_last_pkt_time":1639650442931548,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":74,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":392,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":3106,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1639650443264733,"l3_proto":"ip4","src_ip":"192.168.22.4","dst_ip":"192.168.22.5","src_port":40646,"dst_port":4789,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5,"data_analysis": {"iat": {"min":4,"avg":10747.9,"max":150839,"stddev":30032.6,"var":901957440.0,"ent":2.5,"data": [10329,305,11530,200,4,1301,10031,41817,81536,403,150839,3109,802,1504,1403,3811,602,2508,504,1003,903,802,707,803,710,2107,301,402,2307,401,201]},"pktlen": {"min":102,"avg":125.1,"max":420,"stddev":68.2,"var":4655.6,"ent":4.8,"data": [110,102,420,102,102,102,166,267,102,102,285,102,102,102,102,102,102,102,102,102,102,102,102,102,102,102,102,102,102,102,102,102]},"bins": {"c_to_s": [0,0,28,0,1,0,0,1,1,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0],"s_to_c": [0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]},"directions": [0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0],"entropies": [5.313875198,5.603603840,6.154091835,5.623211861,5.630611897,5.623211384,6.288531303,6.880884647,5.615810394,5.596202850,7.036987305,5.564387798,5.603603840,5.596202850,5.623211384,5.564388275,5.583995819,5.556987286,5.591396332,5.603603840,5.576594353,5.623211384,5.544780254,5.603603840,5.603603840,5.623211384,5.642818928,5.588801384,5.603603363,5.635418415,5.635418415,5.655025959]},"ndpi": {"confidence": {"6":"DPI"},"proto":"VXLAN","proto_id":"64","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00965{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":127,"source":"cfgs\/default\/pcap\/vxlan.pcap","alias":"nDPId-test","flow_id":5,"flow_state":"finished","flow_src_packets_processed":2,"flow_dst_packets_processed":0,"flow_first_seen":1639650442864784,"flow_src_last_pkt_time":1639650442864881,"flow_dst_last_pkt_time":1639650442864784,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":84,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":84,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":168,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1639650443276366,"l3_proto":"ip4","src_ip":"192.168.22.4","dst_ip":"192.168.22.5","src_port":60351,"dst_port":4789,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"VXLAN","proto_id":"64","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00967{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":127,"source":"cfgs\/default\/pcap\/vxlan.pcap","alias":"nDPId-test","flow_id":6,"flow_state":"finished","flow_src_packets_processed":2,"flow_dst_packets_processed":0,"flow_first_seen":1639650442902284,"flow_src_last_pkt_time":1639650442930989,"flow_dst_last_pkt_time":1639650442902284,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":129,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":141,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":270,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1639650443276366,"l3_proto":"ip4","src_ip":"192.168.22.5","dst_ip":"192.168.22.4","src_port":50251,"dst_port":4789,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"VXLAN","proto_id":"64","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00970{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":127,"source":"cfgs\/default\/pcap\/vxlan.pcap","alias":"nDPId-test","flow_id":8,"flow_state":"finished","flow_src_packets_processed":56,"flow_dst_packets_processed":0,"flow_first_seen":1639650442941597,"flow_src_last_pkt_time":1639650443276182,"flow_dst_last_pkt_time":1639650442941597,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":74,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1454,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":68647,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1639650443276366,"l3_proto":"ip4","src_ip":"192.168.22.5","dst_ip":"192.168.22.4","src_port":36286,"dst_port":4789,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"VXLAN","proto_id":"64","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00965{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":127,"source":"cfgs\/default\/pcap\/vxlan.pcap","alias":"nDPId-test","flow_id":1,"flow_state":"finished","flow_src_packets_processed":2,"flow_dst_packets_processed":0,"flow_first_seen":1639650442645225,"flow_src_last_pkt_time":1639650442645316,"flow_dst_last_pkt_time":1639650442645225,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":80,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":80,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":160,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1639650443276366,"l3_proto":"ip4","src_ip":"192.168.22.4","dst_ip":"192.168.22.5","src_port":60887,"dst_port":4789,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"VXLAN","proto_id":"64","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00968{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":127,"source":"cfgs\/default\/pcap\/vxlan.pcap","alias":"nDPId-test","flow_id":7,"flow_state":"finished","flow_src_packets_processed":35,"flow_dst_packets_processed":0,"flow_first_seen":1639650442931548,"flow_src_last_pkt_time":1639650443276366,"flow_dst_last_pkt_time":1639650442931548,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":74,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":392,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":3328,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1639650443276366,"l3_proto":"ip4","src_ip":"192.168.22.4","dst_ip":"192.168.22.5","src_port":40646,"dst_port":4789,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"VXLAN","proto_id":"64","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00968{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":127,"source":"cfgs\/default\/pcap\/vxlan.pcap","alias":"nDPId-test","flow_id":3,"flow_state":"finished","flow_src_packets_processed":12,"flow_dst_packets_processed":0,"flow_first_seen":1639650442712036,"flow_src_last_pkt_time":1639650443088800,"flow_dst_last_pkt_time":1639650442712036,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":74,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":388,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1459,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1639650443276366,"l3_proto":"ip4","src_ip":"192.168.22.4","dst_ip":"192.168.22.5","src_port":49762,"dst_port":4789,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"VXLAN","proto_id":"64","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00965{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":127,"source":"cfgs\/default\/pcap\/vxlan.pcap","alias":"nDPId-test","flow_id":9,"flow_state":"finished","flow_src_packets_processed":3,"flow_dst_packets_processed":0,"flow_first_seen":1639650443097770,"flow_src_last_pkt_time":1639650443097920,"flow_dst_last_pkt_time":1639650443097770,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":62,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":62,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":186,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1639650443276366,"l3_proto":"ip4","src_ip":"192.168.22.4","dst_ip":"192.168.22.5","src_port":60230,"dst_port":4789,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"VXLAN","proto_id":"64","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00969{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":127,"source":"cfgs\/default\/pcap\/vxlan.pcap","alias":"nDPId-test","flow_id":4,"flow_state":"finished","flow_src_packets_processed":13,"flow_dst_packets_processed":0,"flow_first_seen":1639650442720908,"flow_src_last_pkt_time":1639650443097493,"flow_dst_last_pkt_time":1639650442720908,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":74,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1454,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":5058,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1639650443276366,"l3_proto":"ip4","src_ip":"192.168.22.5","dst_ip":"192.168.22.4","src_port":60230,"dst_port":4789,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"VXLAN","proto_id":"64","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00966{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":127,"source":"cfgs\/default\/pcap\/vxlan.pcap","alias":"nDPId-test","flow_id":2,"flow_state":"finished","flow_src_packets_processed":2,"flow_dst_packets_processed":0,"flow_first_seen":1639650442682647,"flow_src_last_pkt_time":1639650442711366,"flow_dst_last_pkt_time":1639650442682647,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":96,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":108,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":204,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1639650443276366,"l3_proto":"ip4","src_ip":"192.168.22.5","dst_ip":"192.168.22.4","src_port":43866,"dst_port":4789,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"VXLAN","proto_id":"64","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00798{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":127,"source":"cfgs\/default\/pcap\/vxlan.pcap","alias":"nDPId-test","version":"1.7.0","ndpi_version":"4.11.0-4834-92507c0","packets-captured":127,"packets-processed":127,"pfring_active":false,"pfring_recv":0,"pfring_drop":0,"pfring_shunt":0,"total-skipped-flows":0,"total-l4-payload-len":79480,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":9,"total-detection-updates":0,"total-updates":0,"current-active-flows":0,"total-active-flows":9,"total-idle-flows":9,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"global-alloc-count":0,"global-free-count":0,"global-alloc-bytes":0,"global-free-bytes":0,"total-events-serialized":63,"global_ts_usec":1639650443276366}
~~~~~~~~~~~~~~~~~~~~ SUMMARY ~~~~~~~~~~~~~~~~~~~~
~~ packets captured/processed: 127/127
~~ skipped flows.............: 0
~~ total layer4 data length..: 79480 bytes
~~ total detected protocols..: 9
~~ total active/idle flows...: 9/9
~~ total timeout flows.......: 0
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~ total memory allocated....: 6663318 bytes
~~ total memory freed........: 6663318 bytes
~~ total allocations/frees...: 114234/114234
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~ json message min len.......: 566 chars
~~ json message max len.......: 2500 chars
~~ json message avg len.......: 1532 chars
|