1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
|
00562{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"cfgs\/default\/pcap\/webdav.pcap","alias":"nDPId-test","version":"1.7.0","ndpi_version":"4.11.0-4834-92507c0","max-flows-per-thread":2048,"max-idle-flows-per-thread":64,"reader-thread-count":1,"flow-scan-interval":10000000,"generic-max-idle-time":600000000,"icmp-max-idle-time":120000000,"udp-max-idle-time":180000000,"tcp-max-idle-time":7560000000,"max-packets-per-flow-to-send":5,"max-packets-per-flow-to-process":32,"max-packets-per-flow-to-analyse":32,"global_ts_usec":0}
00786{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":1,"source":"cfgs\/default\/pcap\/webdav.pcap","alias":"nDPId-test","version":"1.7.0","ndpi_version":"4.11.0-4834-92507c0","packets-captured":1,"packets-processed":0,"pfring_active":false,"pfring_recv":0,"pfring_drop":0,"pfring_shunt":0,"total-skipped-flows":0,"total-l4-payload-len":0,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":0,"total-detection-updates":0,"total-updates":0,"current-active-flows":0,"total-active-flows":0,"total-idle-flows":0,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"global-alloc-count":0,"global-free-count":0,"global-alloc-bytes":0,"global-free-bytes":0,"total-events-serialized":2,"global_ts_usec":1677169246853624}
00770{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"cfgs\/default\/pcap\/webdav.pcap","alias":"nDPId-test","flow_id":1,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1677169246853624,"flow_src_last_pkt_time":1677169246853624,"flow_dst_last_pkt_time":1677169246853624,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1677169246853624,"l3_proto":"ip4","src_ip":"10.24.8.189","dst_ip":"104.156.149.6","src_port":50652,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00539{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"cfgs\/default\/pcap\/webdav.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_src_last_pkt_time":1677169246853624,"flow_dst_last_pkt_time":1677169246853624,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1677169246853624,"pkt":"AAHH9haIEACQor51CABFAAA0mWtAAIAGUOEKGAi9aJyVBsXcAFDgPQjbAAAAAIAC+vC0YgAAAgQFtAEDAwgBAQQC"}
00531{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"cfgs\/default\/pcap\/webdav.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":2,"flow_src_last_pkt_time":1677169246853624,"flow_dst_last_pkt_time":1677169246873589,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"thread_ts_usec":1677169246873589,"pkt":"EACQor51AAHH9haICABFAAAs0NgAAIAGWXxonJUGChgIvQBQxdy+mZKp4D0I3GAS+vCMJAAAAgQFtA=="}
00523{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"cfgs\/default\/pcap\/webdav.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":3,"flow_src_last_pkt_time":1677169246873954,"flow_dst_last_pkt_time":1677169246873589,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1677169246873954,"pkt":"AAHH9haIEACQor51CABFAAAomWxAAIAGUOwKGAi9aJyVBsXcAFDgPQjcvpmSqlAQ+vCj4QAA"}
00750{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"cfgs\/default\/pcap\/webdav.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":4,"flow_src_last_pkt_time":1677169246874184,"flow_dst_last_pkt_time":1677169246873589,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":222,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":222,"pkt_l4_len":188,"thread_ts_usec":1677169246874184,"pkt":"AAHH9haIEACQor51CABFAADQmW1AAIAGUEMKGAi9aJyVBsXcAFDgPQjcvpmSqlAY+vDPfQAAUFJPUEZJTkQgL3dlYmRhdiBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTWljcm9zb2Z0LVdlYkRBVi1NaW5pUmVkaXIvMTAuMC4xOTA0NQ0KRGVwdGg6IDANCnRyYW5zbGF0ZTogZg0KQ29udGVudC1MZW5ndGg6IDANCkhvc3Q6IDEwNC4xNTYuMTQ5LjYNCg0K"}
01227{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"cfgs\/default\/pcap\/webdav.pcap","alias":"nDPId-test","flow_id":1,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1677169246853624,"flow_src_last_pkt_time":1677169246874184,"flow_dst_last_pkt_time":1677169246873589,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":168,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":168,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1677169246874184,"l3_proto":"ip4","src_ip":"10.24.8.189","dst_ip":"104.156.149.6","src_port":50652,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12": {"risk":"HTTP\/TLS\/QUIC Numeric Hostname\/SNI","severity":"Low","risk_score": {"total":300,"client":270,"server":30}}},"confidence": {"6":"DPI"},"proto":"HTTP.WebDAV","proto_id":"7.376","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":15,"category":"Collaborative","hostname":"104.156.149.6","http": {"url":"104.156.149.6\/webdav","code":0,"content_type":"","user_agent":"Microsoft-WebDAV-MiniRedir\/10.0.19045"}}}
00523{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"cfgs\/default\/pcap\/webdav.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":5,"flow_src_last_pkt_time":1677169246874184,"flow_dst_last_pkt_time":1677169246874364,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1677169246874364,"pkt":"EACQor51AAHH9haICABFAAAo0NkAAIAGWX9onJUGChgIvQBQxdy+mZKq4D0JhFAQ+vCjOQAA"}
00793{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":15,"source":"cfgs\/default\/pcap\/webdav.pcap","alias":"nDPId-test","version":"1.7.0","ndpi_version":"4.11.0-4834-92507c0","packets-captured":15,"packets-processed":14,"pfring_active":false,"pfring_recv":0,"pfring_drop":0,"pfring_shunt":0,"total-skipped-flows":0,"total-l4-payload-len":1970,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":1,"total-detection-updates":0,"total-updates":0,"current-active-flows":1,"total-active-flows":1,"total-idle-flows":0,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"global-alloc-count":0,"global-free-count":0,"global-alloc-bytes":0,"global-free-bytes":0,"total-events-serialized":10,"global_ts_usec":1720686494824645}
00775{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":15,"source":"cfgs\/default\/pcap\/webdav.pcap","alias":"nDPId-test","flow_id":2,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1720686494824645,"flow_src_last_pkt_time":1720686494824645,"flow_dst_last_pkt_time":1720686494824645,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1720686494824645,"l3_proto":"ip4","src_ip":"192.168.16.173","dst_ip":"198.244.151.63","src_port":35612,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00552{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"cfgs\/default\/pcap\/webdav.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_src_last_pkt_time":1720686494824645,"flow_dst_last_pkt_time":1720686494824645,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1720686494824645,"pkt":"pJGxF+92NObXAhsnCABFAAA86f9AAEAGITPAqBCtxvSXP4scAFBI7gRxAAAAAKAC+vAvuAAAAgQFtAQCCApVKw89AAAAAAEDAwc="}
00556{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"cfgs\/default\/pcap\/webdav.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":2,"flow_src_last_pkt_time":1720686494824645,"flow_dst_last_pkt_time":1720686494850786,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1720686494850786,"pkt":"NObXAhsnpJGxF+92CABFAAA8iSNAAGwGVg\/G9Jc\/wKgQrQBQixwLdXs7SO4EcqAS\/\/+T5QAAAgQFrAEDAwgEAggK1tnpyFUrDz0="}
00540{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"cfgs\/default\/pcap\/webdav.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":3,"flow_src_last_pkt_time":1720686494850855,"flow_dst_last_pkt_time":1720686494850786,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1720686494850855,"pkt":"pJGxF+92NObXAhsnCABFAAA06gBAAEAGITrAqBCtxvSXP4scAFBI7gRyC3V7PIAQAfYvsAAAAQEIClUrD1fW2enI"}
00752{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"cfgs\/default\/pcap\/webdav.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":4,"flow_src_last_pkt_time":1720686494851023,"flow_dst_last_pkt_time":1720686494850786,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":220,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":220,"pkt_l4_len":186,"thread_ts_usec":1720686494851023,"pkt":"pJGxF+92NObXAhsnCABFAADO6gFAAEAGIJ\/AqBCtxvSXP4scAFBI7gRyC3V7PIAYAfYwSgAAAQEIClUrD1fW2enITUtDT0wgL3dlYmRhdiBIVFRQLzEuMQ0KSG9zdDogd3d3LmRscC10ZXN0LmNvbQ0KQXV0aG9yaXphdGlvbjogTlRMTSBUbFJNVFZOVFVBQUJBQUFBQm9JSUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBPQ0KVXNlci1BZ2VudDogY3VybC83LjY4LjANCkFjY2VwdDogKi8qDQoNCg=="}
01072{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":18,"source":"cfgs\/default\/pcap\/webdav.pcap","alias":"nDPId-test","flow_id":2,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1720686494824645,"flow_src_last_pkt_time":1720686494851023,"flow_dst_last_pkt_time":1720686494850786,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":154,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":154,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1720686494851023,"l3_proto":"ip4","src_ip":"192.168.16.173","dst_ip":"198.244.151.63","src_port":35612,"dst_port":80,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"HTTP.WebDAV","proto_id":"7.376","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":15,"category":"Collaborative","hostname":"www.dlp-test.com","http": {"url":"www.dlp-test.com\/webdav","code":0,"content_type":"","user_agent":"curl\/7.68.0"}}}
01585{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"cfgs\/default\/pcap\/webdav.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":5,"flow_src_last_pkt_time":1720686494851023,"flow_dst_last_pkt_time":1720686494877731,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":845,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":845,"pkt_l4_len":811,"thread_ts_usec":1720686494877731,"pkt":"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"}
01209{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":19,"source":"cfgs\/default\/pcap\/webdav.pcap","alias":"nDPId-test","flow_id":2,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":2,"flow_first_seen":1720686494824645,"flow_src_last_pkt_time":1720686494851023,"flow_dst_last_pkt_time":1720686494877731,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":154,"flow_dst_max_l4_payload_len":779,"flow_src_tot_l4_payload_len":154,"flow_dst_tot_l4_payload_len":779,"midstream":0,"thread_ts_usec":1720686494877731,"l3_proto":"ip4","src_ip":"192.168.16.173","dst_ip":"198.244.151.63","src_port":35612,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"43": {"risk":"Error Code","severity":"Low","risk_score": {"total":360,"client":300,"server":60}}},"confidence": {"6":"DPI"},"proto":"HTTP.WebDAV","proto_id":"7.376","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":15,"category":"Collaborative","hostname":"www.dlp-test.com","http": {"url":"www.dlp-test.com\/webdav","code":401,"content_type":"text\/html","user_agent":"curl\/7.68.0"}}}
01151{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":27,"source":"cfgs\/default\/pcap\/webdav.pcap","alias":"nDPId-test","flow_id":1,"flow_state":"finished","flow_src_packets_processed":7,"flow_dst_packets_processed":7,"flow_first_seen":1677169246853624,"flow_src_last_pkt_time":1677169251921472,"flow_dst_last_pkt_time":1677169251921740,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":169,"flow_dst_max_l4_payload_len":1053,"flow_src_tot_l4_payload_len":337,"flow_dst_tot_l4_payload_len":1633,"midstream":0,"thread_ts_usec":1720686494933025,"l3_proto":"ip4","src_ip":"10.24.8.189","dst_ip":"104.156.149.6","src_port":50652,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"flow_risk": {"12": {"risk":"HTTP\/TLS\/QUIC Numeric Hostname\/SNI","severity":"Low","risk_score": {"total":300,"client":270,"server":30}}},"confidence": {"6":"DPI"},"proto":"HTTP.WebDAV","proto_id":"7.376","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":15,"category":"Collaborative","hostname":"104.156.149.6"}}
00775{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":27,"source":"cfgs\/default\/pcap\/webdav.pcap","alias":"nDPId-test","flow_id":3,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1720686536533512,"flow_src_last_pkt_time":1720686536533512,"flow_dst_last_pkt_time":1720686536533512,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1720686536533512,"l3_proto":"ip4","src_ip":"192.168.16.173","dst_ip":"198.244.151.63","src_port":41714,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00553{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"cfgs\/default\/pcap\/webdav.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_src_last_pkt_time":1720686536533512,"flow_dst_last_pkt_time":1720686536533512,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1720686536533512,"pkt":"pJGxF+92NObXAhsnCABFAAA8FshAAEAG9GrAqBCtxvSXP6LyAFAQxGC\/AAAAAKAC+vAvuAAAAgQFtAQCCApVK7IqAAAAAAEDAwc="}
00555{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"cfgs\/default\/pcap\/webdav.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":2,"flow_src_last_pkt_time":1720686536533512,"flow_dst_last_pkt_time":1720686536559574,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1720686536559574,"pkt":"NObXAhsnpJGxF+92CABFAAA8iShAAGwGVgrG9Jc\/wKgQrQBQovLh6S1fEMRgwKAS\/\/+JfAAAAgQFrAEDAwgEAggK1tqMsFUrsio="}
00540{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"cfgs\/default\/pcap\/webdav.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":3,"flow_src_last_pkt_time":1720686536559615,"flow_dst_last_pkt_time":1720686536559574,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1720686536559615,"pkt":"pJGxF+92NObXAhsnCABFAAA0FslAAEAG9HHAqBCtxvSXP6LyAFAQxGDA4ektYIAQAfYvsAAAAQEIClUrskTW2oyw"}
00747{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"cfgs\/default\/pcap\/webdav.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":4,"flow_src_last_pkt_time":1720686536559704,"flow_dst_last_pkt_time":1720686536559574,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":219,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":219,"pkt_l4_len":185,"thread_ts_usec":1720686536559704,"pkt":"pJGxF+92NObXAhsnCABFAADNFspAAEAG89fAqBCtxvSXP6LyAFAQxGDA4ektYIAYAfYwSQAAAQEIClUrskTW2oywTU9WRSAvd2ViZGF2IEhUVFAvMS4xDQpIb3N0OiB3d3cuZGxwLXRlc3QuY29tDQpBdXRob3JpemF0aW9uOiBOVExNIFRsUk1UVk5UVUFBQkFBQUFCb0lJQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUE9DQpVc2VyLUFnZW50OiBjdXJsLzcuNjguMA0KQWNjZXB0OiAqLyoNCg0K"}
01072{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":30,"source":"cfgs\/default\/pcap\/webdav.pcap","alias":"nDPId-test","flow_id":3,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1720686536533512,"flow_src_last_pkt_time":1720686536559704,"flow_dst_last_pkt_time":1720686536559574,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":153,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":153,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1720686536559704,"l3_proto":"ip4","src_ip":"192.168.16.173","dst_ip":"198.244.151.63","src_port":41714,"dst_port":80,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"HTTP.WebDAV","proto_id":"7.376","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":15,"category":"Collaborative","hostname":"www.dlp-test.com","http": {"url":"www.dlp-test.com\/webdav","code":0,"content_type":"","user_agent":"curl\/7.68.0"}}}
01585{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"cfgs\/default\/pcap\/webdav.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":5,"flow_src_last_pkt_time":1720686536559704,"flow_dst_last_pkt_time":1720686536585530,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":845,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":845,"pkt_l4_len":811,"thread_ts_usec":1720686536585530,"pkt":"NObXAhsnpJGxF+92CABFAAM\/iSlAAGwGUwbG9Jc\/wKgQrQBQovLh6S1gEMRhWYAYIAPMLgAAAQEICtbajMpVK7JESFRUUC8xLjEgNDAxIFVuYXV0aG9yaXplZA0KQ29udGVudC1UeXBlOiB0ZXh0L2h0bWw7IGNoYXJzZXQ9dXMtYXNjaWkNClNlcnZlcjogTWljcm9zb2Z0LUhUVFBBUEkvMi4wDQpXV1ctQXV0aGVudGljYXRlOiBOVExNIFRsUk1UVk5UVUFBQ0FBQUFDd0FMQURnQUFBQUdnb29DbU15SnRuUVpEM2NBQUFBQUFBQUFBSGdBZUFCREFBQUFDZ0I4VHdBQUFBOUVURkF0VkVWVFZDMVNOUUlBRmdCRUFFd0FVQUF0QUZRQVJRQlRBRlFBTFFCU0FEVUFBUUFXQUVRQVRBQlFBQzBBVkFCRkFGTUFWQUF0QUZJQU5RQUVBQllBUkFCTUFGQUFMUUJVQUVVQVV3QlVBQzBBVWdBMUFBTUFGZ0JFQUV3QVVBQXRBRlFBUlFCVEFGUUFMUUJTQURVQUJ3QUlBRENoRDE5czA5b0JBQUFBQUE9PQ0KRGF0ZTogVGh1LCAxMSBKdWwgMjAyNCAwODoyODo1NiBHTVQNCkNvbnRlbnQtTGVuZ3RoOiAzNDENCg0KPCFET0NUWVBFIEhUTUwgUFVCTElDICItLy9XM0MvL0RURCBIVE1MIDQuMDEvL0VOIiJodHRwOi8vd3d3LnczLm9yZy9UUi9odG1sNC9zdHJpY3QuZHRkIj4NCjxIVE1MPjxIRUFEPjxUSVRMRT5Ob3QgQXV0aG9yaXplZDwvVElUTEU+DQo8TUVUQSBIVFRQLUVRVUlWPSJDb250ZW50LVR5cGUiIENvbnRlbnQ9InRleHQvaHRtbDsgY2hhcnNldD11cy1hc2NpaSI+PC9IRUFEPg0KPEJPRFk+PGgyPk5vdCBBdXRob3JpemVkPC9oMj4NCjxocj48cD5IVFRQIEVycm9yIDQwMS4gVGhlIHJlcXVlc3RlZCByZXNvdXJjZSByZXF1aXJlcyB1c2VyIGF1dGhlbnRpY2F0aW9uLjwvcD4NCjwvQk9EWT48L0hUTUw+DQo="}
01209{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":31,"source":"cfgs\/default\/pcap\/webdav.pcap","alias":"nDPId-test","flow_id":3,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":2,"flow_first_seen":1720686536533512,"flow_src_last_pkt_time":1720686536559704,"flow_dst_last_pkt_time":1720686536585530,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":153,"flow_dst_max_l4_payload_len":779,"flow_src_tot_l4_payload_len":153,"flow_dst_tot_l4_payload_len":779,"midstream":0,"thread_ts_usec":1720686536585530,"l3_proto":"ip4","src_ip":"192.168.16.173","dst_ip":"198.244.151.63","src_port":41714,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"43": {"risk":"Error Code","severity":"Low","risk_score": {"total":360,"client":300,"server":60}}},"confidence": {"6":"DPI"},"proto":"HTTP.WebDAV","proto_id":"7.376","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":15,"category":"Collaborative","hostname":"www.dlp-test.com","http": {"url":"www.dlp-test.com\/webdav","code":401,"content_type":"text\/html","user_agent":"curl\/7.68.0"}}}
00775{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":38,"source":"cfgs\/default\/pcap\/webdav.pcap","alias":"nDPId-test","flow_id":4,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1720686545193315,"flow_src_last_pkt_time":1720686545193315,"flow_dst_last_pkt_time":1720686545193315,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1720686545193315,"l3_proto":"ip4","src_ip":"192.168.16.173","dst_ip":"198.244.151.63","src_port":55974,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00552{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"cfgs\/default\/pcap\/webdav.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_src_last_pkt_time":1720686545193315,"flow_dst_last_pkt_time":1720686545193315,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1720686545193315,"pkt":"pJGxF+92NObXAhsnCABFAAA8JyRAAEAG5A7AqBCtxvSXP9qmAFDeC6w0AAAAAKAC+vAvuAAAAgQFtAQCCApVK9P+AAAAAAEDAwc="}
00556{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"cfgs\/default\/pcap\/webdav.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":2,"flow_src_last_pkt_time":1720686545193315,"flow_dst_last_pkt_time":1720686545219397,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1720686545219397,"pkt":"NObXAhsnpJGxF+92CABFAAA8iSxAAGwGVgbG9Jc\/wKgQrQBQ2qZiyHgj3gusNaAS\/\/8pwgAAAgQFrAEDAwgEAggK1tquglUr0\/4="}
00540{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"cfgs\/default\/pcap\/webdav.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":3,"flow_src_last_pkt_time":1720686545219453,"flow_dst_last_pkt_time":1720686545219397,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1720686545219453,"pkt":"pJGxF+92NObXAhsnCABFAAA0JyVAAEAG5BXAqBCtxvSXP9qmAFDeC6w1Ysh4JIAQAfYvsAAAAQEIClUr1BjW2q6C"}
00747{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"cfgs\/default\/pcap\/webdav.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":4,"flow_src_last_pkt_time":1720686545219595,"flow_dst_last_pkt_time":1720686545219397,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":219,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":219,"pkt_l4_len":185,"thread_ts_usec":1720686545219595,"pkt":"pJGxF+92NObXAhsnCABFAADNJyZAAEAG43vAqBCtxvSXP9qmAFDeC6w1Ysh4JIAYAfYwSQAAAQEIClUr1BjW2q6CQ09QWSAvd2ViZGF2IEhUVFAvMS4xDQpIb3N0OiB3d3cuZGxwLXRlc3QuY29tDQpBdXRob3JpemF0aW9uOiBOVExNIFRsUk1UVk5UVUFBQkFBQUFCb0lJQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUE9DQpVc2VyLUFnZW50OiBjdXJsLzcuNjguMA0KQWNjZXB0OiAqLyoNCg0K"}
01072{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":41,"source":"cfgs\/default\/pcap\/webdav.pcap","alias":"nDPId-test","flow_id":4,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1720686545193315,"flow_src_last_pkt_time":1720686545219595,"flow_dst_last_pkt_time":1720686545219397,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":153,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":153,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1720686545219595,"l3_proto":"ip4","src_ip":"192.168.16.173","dst_ip":"198.244.151.63","src_port":55974,"dst_port":80,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"HTTP.WebDAV","proto_id":"7.376","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":15,"category":"Collaborative","hostname":"www.dlp-test.com","http": {"url":"www.dlp-test.com\/webdav","code":0,"content_type":"","user_agent":"curl\/7.68.0"}}}
01585{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"cfgs\/default\/pcap\/webdav.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":5,"flow_src_last_pkt_time":1720686545219595,"flow_dst_last_pkt_time":1720686545246349,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":845,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":845,"pkt_l4_len":811,"thread_ts_usec":1720686545246349,"pkt":"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"}
01209{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":42,"source":"cfgs\/default\/pcap\/webdav.pcap","alias":"nDPId-test","flow_id":4,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":2,"flow_first_seen":1720686545193315,"flow_src_last_pkt_time":1720686545219595,"flow_dst_last_pkt_time":1720686545246349,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":153,"flow_dst_max_l4_payload_len":779,"flow_src_tot_l4_payload_len":153,"flow_dst_tot_l4_payload_len":779,"midstream":0,"thread_ts_usec":1720686545246349,"l3_proto":"ip4","src_ip":"192.168.16.173","dst_ip":"198.244.151.63","src_port":55974,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"43": {"risk":"Error Code","severity":"Low","risk_score": {"total":360,"client":300,"server":60}}},"confidence": {"6":"DPI"},"proto":"HTTP.WebDAV","proto_id":"7.376","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":15,"category":"Collaborative","hostname":"www.dlp-test.com","http": {"url":"www.dlp-test.com\/webdav","code":401,"content_type":"text\/html","user_agent":"curl\/7.68.0"}}}
00775{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":49,"source":"cfgs\/default\/pcap\/webdav.pcap","alias":"nDPId-test","flow_id":5,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1720686552264716,"flow_src_last_pkt_time":1720686552264716,"flow_dst_last_pkt_time":1720686552264716,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1720686552264716,"l3_proto":"ip4","src_ip":"192.168.16.173","dst_ip":"198.244.151.63","src_port":47432,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00552{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"cfgs\/default\/pcap\/webdav.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_src_last_pkt_time":1720686552264716,"flow_dst_last_pkt_time":1720686552264716,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1720686552264716,"pkt":"pJGxF+92NObXAhsnCABFAAA8pvtAAEAGZDfAqBCtxvSXP7lIAFCLdH0RAAAAAKAC+vAvuAAAAgQFtAQCCApVK++dAAAAAAEDAwc="}
00555{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"cfgs\/default\/pcap\/webdav.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":2,"flow_src_last_pkt_time":1720686552264716,"flow_dst_last_pkt_time":1720686552290938,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1720686552290938,"pkt":"NObXAhsnpJGxF+92CABFAAA8iTBAAGwGVgLG9Jc\/wKgQrQBQuUig8Fi0i3R9EqAS\/\/924wAAAgQFrAEDAwgEAggK1trKIVUr750="}
00540{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"cfgs\/default\/pcap\/webdav.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":3,"flow_src_last_pkt_time":1720686552290993,"flow_dst_last_pkt_time":1720686552290938,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1720686552290993,"pkt":"pJGxF+92NObXAhsnCABFAAA0pvxAAEAGZD7AqBCtxvSXP7lIAFCLdH0SoPBYtYAQAfYvsAAAAQEIClUr77fW2soh"}
00747{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"cfgs\/default\/pcap\/webdav.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":4,"flow_src_last_pkt_time":1720686552291118,"flow_dst_last_pkt_time":1720686552290938,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":219,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":219,"pkt_l4_len":185,"thread_ts_usec":1720686552291118,"pkt":"pJGxF+92NObXAhsnCABFAADNpv1AAEAGY6TAqBCtxvSXP7lIAFCLdH0SoPBYtYAYAfYwSQAAAQEIClUr77fW2sohTE9DSyAvd2ViZGF2IEhUVFAvMS4xDQpIb3N0OiB3d3cuZGxwLXRlc3QuY29tDQpBdXRob3JpemF0aW9uOiBOVExNIFRsUk1UVk5UVUFBQkFBQUFCb0lJQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUE9DQpVc2VyLUFnZW50OiBjdXJsLzcuNjguMA0KQWNjZXB0OiAqLyoNCg0K"}
01072{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":52,"source":"cfgs\/default\/pcap\/webdav.pcap","alias":"nDPId-test","flow_id":5,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1720686552264716,"flow_src_last_pkt_time":1720686552291118,"flow_dst_last_pkt_time":1720686552290938,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":153,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":153,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1720686552291118,"l3_proto":"ip4","src_ip":"192.168.16.173","dst_ip":"198.244.151.63","src_port":47432,"dst_port":80,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"HTTP.WebDAV","proto_id":"7.376","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":15,"category":"Collaborative","hostname":"www.dlp-test.com","http": {"url":"www.dlp-test.com\/webdav","code":0,"content_type":"","user_agent":"curl\/7.68.0"}}}
01585{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"cfgs\/default\/pcap\/webdav.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":5,"flow_src_last_pkt_time":1720686552291118,"flow_dst_last_pkt_time":1720686552316916,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":845,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":845,"pkt_l4_len":811,"thread_ts_usec":1720686552316916,"pkt":"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"}
01209{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":53,"source":"cfgs\/default\/pcap\/webdav.pcap","alias":"nDPId-test","flow_id":5,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":2,"flow_first_seen":1720686552264716,"flow_src_last_pkt_time":1720686552291118,"flow_dst_last_pkt_time":1720686552316916,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":153,"flow_dst_max_l4_payload_len":779,"flow_src_tot_l4_payload_len":153,"flow_dst_tot_l4_payload_len":779,"midstream":0,"thread_ts_usec":1720686552316916,"l3_proto":"ip4","src_ip":"192.168.16.173","dst_ip":"198.244.151.63","src_port":47432,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"43": {"risk":"Error Code","severity":"Low","risk_score": {"total":360,"client":300,"server":60}}},"confidence": {"6":"DPI"},"proto":"HTTP.WebDAV","proto_id":"7.376","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":15,"category":"Collaborative","hostname":"www.dlp-test.com","http": {"url":"www.dlp-test.com\/webdav","code":401,"content_type":"text\/html","user_agent":"curl\/7.68.0"}}}
00775{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":60,"source":"cfgs\/default\/pcap\/webdav.pcap","alias":"nDPId-test","flow_id":6,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1720686558674502,"flow_src_last_pkt_time":1720686558674502,"flow_dst_last_pkt_time":1720686558674502,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1720686558674502,"l3_proto":"ip4","src_ip":"192.168.16.173","dst_ip":"198.244.151.63","src_port":47436,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00552{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"cfgs\/default\/pcap\/webdav.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_src_last_pkt_time":1720686558674502,"flow_dst_last_pkt_time":1720686558674502,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1720686558674502,"pkt":"pJGxF+92NObXAhsnCABFAAA8sPlAAEAGWjnAqBCtxvSXP7lMAFBKKr4+AAAAAKAC+vAvuAAAAgQFtAQCCApVLAinAAAAAAEDAwc="}
00555{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":61,"source":"cfgs\/default\/pcap\/webdav.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":2,"flow_src_last_pkt_time":1720686558674502,"flow_dst_last_pkt_time":1720686558700961,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1720686558700961,"pkt":"NObXAhsnpJGxF+92CABFAAA8iTRAAGwGVf7G9Jc\/wKgQrQBQuUzb6PjeSiq+P6AS\/\/9pxgAAAgQFrAEDAwgEAggK1trjKlUsCKc="}
00541{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"cfgs\/default\/pcap\/webdav.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":3,"flow_src_last_pkt_time":1720686558701012,"flow_dst_last_pkt_time":1720686558700961,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1720686558701012,"pkt":"pJGxF+92NObXAhsnCABFAAA0sPpAAEAGWkDAqBCtxvSXP7lMAFBKKr4\/2+j434AQAfYvsAAAAQEIClUsCMHW2uMq"}
00752{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"cfgs\/default\/pcap\/webdav.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":4,"flow_src_last_pkt_time":1720686558701135,"flow_dst_last_pkt_time":1720686558700961,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":221,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":221,"pkt_l4_len":187,"thread_ts_usec":1720686558701135,"pkt":"pJGxF+92NObXAhsnCABFAADPsPtAAEAGWaTAqBCtxvSXP7lMAFBKKr4\/2+j434AYAfYwSwAAAQEIClUsCMHW2uMqVU5MT0NLIC93ZWJkYXYgSFRUUC8xLjENCkhvc3Q6IHd3dy5kbHAtdGVzdC5jb20NCkF1dGhvcml6YXRpb246IE5UTE0gVGxSTVRWTlRVQUFCQUFBQUJvSUlBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQT0NClVzZXItQWdlbnQ6IGN1cmwvNy42OC4wDQpBY2NlcHQ6ICovKg0KDQo="}
01072{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":63,"source":"cfgs\/default\/pcap\/webdav.pcap","alias":"nDPId-test","flow_id":6,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1720686558674502,"flow_src_last_pkt_time":1720686558701135,"flow_dst_last_pkt_time":1720686558700961,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":155,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":155,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1720686558701135,"l3_proto":"ip4","src_ip":"192.168.16.173","dst_ip":"198.244.151.63","src_port":47436,"dst_port":80,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"HTTP.WebDAV","proto_id":"7.376","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":15,"category":"Collaborative","hostname":"www.dlp-test.com","http": {"url":"www.dlp-test.com\/webdav","code":0,"content_type":"","user_agent":"curl\/7.68.0"}}}
01585{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"cfgs\/default\/pcap\/webdav.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":5,"flow_src_last_pkt_time":1720686558701135,"flow_dst_last_pkt_time":1720686558727880,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":845,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":845,"pkt_l4_len":811,"thread_ts_usec":1720686558727880,"pkt":"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"}
01209{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":64,"source":"cfgs\/default\/pcap\/webdav.pcap","alias":"nDPId-test","flow_id":6,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":2,"flow_first_seen":1720686558674502,"flow_src_last_pkt_time":1720686558701135,"flow_dst_last_pkt_time":1720686558727880,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":155,"flow_dst_max_l4_payload_len":779,"flow_src_tot_l4_payload_len":155,"flow_dst_tot_l4_payload_len":779,"midstream":0,"thread_ts_usec":1720686558727880,"l3_proto":"ip4","src_ip":"192.168.16.173","dst_ip":"198.244.151.63","src_port":47436,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"43": {"risk":"Error Code","severity":"Low","risk_score": {"total":360,"client":300,"server":60}}},"confidence": {"6":"DPI"},"proto":"HTTP.WebDAV","proto_id":"7.376","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":15,"category":"Collaborative","hostname":"www.dlp-test.com","http": {"url":"www.dlp-test.com\/webdav","code":401,"content_type":"text\/html","user_agent":"curl\/7.68.0"}}}
00775{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":71,"source":"cfgs\/default\/pcap\/webdav.pcap","alias":"nDPId-test","flow_id":7,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1720686569180748,"flow_src_last_pkt_time":1720686569180748,"flow_dst_last_pkt_time":1720686569180748,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1720686569180748,"l3_proto":"ip4","src_ip":"192.168.16.173","dst_ip":"198.244.151.63","src_port":47726,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00554{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":71,"source":"cfgs\/default\/pcap\/webdav.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_src_last_pkt_time":1720686569180748,"flow_dst_last_pkt_time":1720686569180748,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1720686569180748,"pkt":"pJGxF+92NObXAhsnCABFAAA8k\/VAAEAGdz3AqBCtxvSXP7puAFDNbB\/pAAAAAKAC+vAvuAAAAgQFtAQCCApVLDGxAAAAAAEDAwc="}
00556{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":72,"source":"cfgs\/default\/pcap\/webdav.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":2,"flow_src_last_pkt_time":1720686569180748,"flow_dst_last_pkt_time":1720686569207357,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1720686569207357,"pkt":"NObXAhsnpJGxF+92CABFAAA8iThAAGwGVfrG9Jc\/wKgQrQBQum61csJ\/zWwf6qAS\/\/+OeQAAAgQFrAEDAwgEAggK1tsMM1UsMbE="}
00542{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":73,"source":"cfgs\/default\/pcap\/webdav.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":3,"flow_src_last_pkt_time":1720686569207400,"flow_dst_last_pkt_time":1720686569207357,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1720686569207400,"pkt":"pJGxF+92NObXAhsnCABFAAA0k\/ZAAEAGd0TAqBCtxvSXP7puAFDNbB\/qtXLCgIAQAfYvsAAAAQEIClUsMczW2wwz"}
00757{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":74,"source":"cfgs\/default\/pcap\/webdav.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":4,"flow_src_last_pkt_time":1720686569207486,"flow_dst_last_pkt_time":1720686569207357,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":223,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":223,"pkt_l4_len":189,"thread_ts_usec":1720686569207486,"pkt":"pJGxF+92NObXAhsnCABFAADRk\/dAAEAGdqbAqBCtxvSXP7puAFDNbB\/qtXLCgIAYAfYwTQAAAQEIClUsMczW2wwzUFJPUEZJTkQgL3dlYmRhdiBIVFRQLzEuMQ0KSG9zdDogd3d3LmRscC10ZXN0LmNvbQ0KQXV0aG9yaXphdGlvbjogTlRMTSBUbFJNVFZOVFVBQUJBQUFBQm9JSUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBPQ0KVXNlci1BZ2VudDogY3VybC83LjY4LjANCkFjY2VwdDogKi8qDQoNCg=="}
01072{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":74,"source":"cfgs\/default\/pcap\/webdav.pcap","alias":"nDPId-test","flow_id":7,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1720686569180748,"flow_src_last_pkt_time":1720686569207486,"flow_dst_last_pkt_time":1720686569207357,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":157,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":157,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1720686569207486,"l3_proto":"ip4","src_ip":"192.168.16.173","dst_ip":"198.244.151.63","src_port":47726,"dst_port":80,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"HTTP.WebDAV","proto_id":"7.376","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":15,"category":"Collaborative","hostname":"www.dlp-test.com","http": {"url":"www.dlp-test.com\/webdav","code":0,"content_type":"","user_agent":"curl\/7.68.0"}}}
01585{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":75,"source":"cfgs\/default\/pcap\/webdav.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":5,"flow_src_last_pkt_time":1720686569207486,"flow_dst_last_pkt_time":1720686569234039,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":845,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":845,"pkt_l4_len":811,"thread_ts_usec":1720686569234039,"pkt":"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"}
01209{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":75,"source":"cfgs\/default\/pcap\/webdav.pcap","alias":"nDPId-test","flow_id":7,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":2,"flow_first_seen":1720686569180748,"flow_src_last_pkt_time":1720686569207486,"flow_dst_last_pkt_time":1720686569234039,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":157,"flow_dst_max_l4_payload_len":779,"flow_src_tot_l4_payload_len":157,"flow_dst_tot_l4_payload_len":779,"midstream":0,"thread_ts_usec":1720686569234039,"l3_proto":"ip4","src_ip":"192.168.16.173","dst_ip":"198.244.151.63","src_port":47726,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"43": {"risk":"Error Code","severity":"Low","risk_score": {"total":360,"client":300,"server":60}}},"confidence": {"6":"DPI"},"proto":"HTTP.WebDAV","proto_id":"7.376","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":15,"category":"Collaborative","hostname":"www.dlp-test.com","http": {"url":"www.dlp-test.com\/webdav","code":401,"content_type":"text\/html","user_agent":"curl\/7.68.0"}}}
00775{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":82,"source":"cfgs\/default\/pcap\/webdav.pcap","alias":"nDPId-test","flow_id":8,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1720686579411325,"flow_src_last_pkt_time":1720686579411325,"flow_dst_last_pkt_time":1720686579411325,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1720686579411325,"l3_proto":"ip4","src_ip":"192.168.16.173","dst_ip":"198.244.151.63","src_port":57432,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00552{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":82,"source":"cfgs\/default\/pcap\/webdav.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_src_last_pkt_time":1720686579411325,"flow_dst_last_pkt_time":1720686579411325,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1720686579411325,"pkt":"pJGxF+92NObXAhsnCABFAAA801VAAEAGN93AqBCtxvSXP+BYAFDYKMJHAAAAAKAC+vAvuAAAAgQFtAQCCApVLFmoAAAAAAEDAwc="}
00555{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"cfgs\/default\/pcap\/webdav.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":2,"flow_src_last_pkt_time":1720686579411325,"flow_dst_last_pkt_time":1720686579438145,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1720686579438145,"pkt":"NObXAhsnpJGxF+92CABFAAA8iTxAAGwGVfbG9Jc\/wKgQrQBQ4Fg2qHJz2CjCSKAS\/\/86XwAAAgQFrAEDAwgEAggK1ts0KFUsWag="}
00540{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":84,"source":"cfgs\/default\/pcap\/webdav.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":3,"flow_src_last_pkt_time":1720686579438216,"flow_dst_last_pkt_time":1720686579438145,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1720686579438216,"pkt":"pJGxF+92NObXAhsnCABFAAA001ZAAEAGN+TAqBCtxvSXP+BYAFDYKMJINqhydIAQAfYvsAAAAQEIClUsWcPW2zQo"}
00755{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":85,"source":"cfgs\/default\/pcap\/webdav.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":4,"flow_src_last_pkt_time":1720686579438374,"flow_dst_last_pkt_time":1720686579438145,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":224,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":224,"pkt_l4_len":190,"thread_ts_usec":1720686579438374,"pkt":"pJGxF+92NObXAhsnCABFAADS01dAAEAGN0XAqBCtxvSXP+BYAFDYKMJINqhydIAYAfYwTgAAAQEIClUsWcPW2zQoUFJPUFBBVENIIC93ZWJkYXYgSFRUUC8xLjENCkhvc3Q6IHd3dy5kbHAtdGVzdC5jb20NCkF1dGhvcml6YXRpb246IE5UTE0gVGxSTVRWTlRVQUFCQUFBQUJvSUlBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQT0NClVzZXItQWdlbnQ6IGN1cmwvNy42OC4wDQpBY2NlcHQ6ICovKg0KDQo="}
01072{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":85,"source":"cfgs\/default\/pcap\/webdav.pcap","alias":"nDPId-test","flow_id":8,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1720686579411325,"flow_src_last_pkt_time":1720686579438374,"flow_dst_last_pkt_time":1720686579438145,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":158,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":158,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1720686579438374,"l3_proto":"ip4","src_ip":"192.168.16.173","dst_ip":"198.244.151.63","src_port":57432,"dst_port":80,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"HTTP.WebDAV","proto_id":"7.376","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":15,"category":"Collaborative","hostname":"www.dlp-test.com","http": {"url":"www.dlp-test.com\/webdav","code":0,"content_type":"","user_agent":"curl\/7.68.0"}}}
01585{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":86,"source":"cfgs\/default\/pcap\/webdav.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":5,"flow_src_last_pkt_time":1720686579438374,"flow_dst_last_pkt_time":1720686579465179,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":845,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":845,"pkt_l4_len":811,"thread_ts_usec":1720686579465179,"pkt":"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"}
01209{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":86,"source":"cfgs\/default\/pcap\/webdav.pcap","alias":"nDPId-test","flow_id":8,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":2,"flow_first_seen":1720686579411325,"flow_src_last_pkt_time":1720686579438374,"flow_dst_last_pkt_time":1720686579465179,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":158,"flow_dst_max_l4_payload_len":779,"flow_src_tot_l4_payload_len":158,"flow_dst_tot_l4_payload_len":779,"midstream":0,"thread_ts_usec":1720686579465179,"l3_proto":"ip4","src_ip":"192.168.16.173","dst_ip":"198.244.151.63","src_port":57432,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"43": {"risk":"Error Code","severity":"Low","risk_score": {"total":360,"client":300,"server":60}}},"confidence": {"6":"DPI"},"proto":"HTTP.WebDAV","proto_id":"7.376","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":15,"category":"Collaborative","hostname":"www.dlp-test.com","http": {"url":"www.dlp-test.com\/webdav","code":401,"content_type":"text\/html","user_agent":"curl\/7.68.0"}}}
01131{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":92,"source":"cfgs\/default\/pcap\/webdav.pcap","alias":"nDPId-test","flow_id":7,"flow_state":"finished","flow_src_packets_processed":7,"flow_dst_packets_processed":4,"flow_first_seen":1720686569180748,"flow_src_last_pkt_time":1720686569288568,"flow_dst_last_pkt_time":1720686569288532,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":509,"flow_dst_max_l4_payload_len":1417,"flow_src_tot_l4_payload_len":666,"flow_dst_tot_l4_payload_len":2196,"midstream":0,"thread_ts_usec":1720686579520364,"l3_proto":"ip4","src_ip":"192.168.16.173","dst_ip":"198.244.151.63","src_port":47726,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"flow_risk": {"43": {"risk":"Error Code","severity":"Low","risk_score": {"total":360,"client":300,"server":60}}},"confidence": {"6":"DPI"},"proto":"HTTP.WebDAV","proto_id":"7.376","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":15,"category":"Collaborative","hostname":"www.dlp-test.com"}}
01129{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":92,"source":"cfgs\/default\/pcap\/webdav.pcap","alias":"nDPId-test","flow_id":4,"flow_state":"finished","flow_src_packets_processed":7,"flow_dst_packets_processed":4,"flow_first_seen":1720686545193315,"flow_src_last_pkt_time":1720686545300881,"flow_dst_last_pkt_time":1720686545300854,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":505,"flow_dst_max_l4_payload_len":779,"flow_src_tot_l4_payload_len":658,"flow_dst_tot_l4_payload_len":974,"midstream":0,"thread_ts_usec":1720686579520364,"l3_proto":"ip4","src_ip":"192.168.16.173","dst_ip":"198.244.151.63","src_port":55974,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"flow_risk": {"43": {"risk":"Error Code","severity":"Low","risk_score": {"total":360,"client":300,"server":60}}},"confidence": {"6":"DPI"},"proto":"HTTP.WebDAV","proto_id":"7.376","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":15,"category":"Collaborative","hostname":"www.dlp-test.com"}}
01129{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":92,"source":"cfgs\/default\/pcap\/webdav.pcap","alias":"nDPId-test","flow_id":3,"flow_state":"finished","flow_src_packets_processed":7,"flow_dst_packets_processed":4,"flow_first_seen":1720686536533512,"flow_src_last_pkt_time":1720686536639298,"flow_dst_last_pkt_time":1720686536639270,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":505,"flow_dst_max_l4_payload_len":779,"flow_src_tot_l4_payload_len":658,"flow_dst_tot_l4_payload_len":974,"midstream":0,"thread_ts_usec":1720686579520364,"l3_proto":"ip4","src_ip":"192.168.16.173","dst_ip":"198.244.151.63","src_port":41714,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"flow_risk": {"43": {"risk":"Error Code","severity":"Low","risk_score": {"total":360,"client":300,"server":60}}},"confidence": {"6":"DPI"},"proto":"HTTP.WebDAV","proto_id":"7.376","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":15,"category":"Collaborative","hostname":"www.dlp-test.com"}}
01131{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":92,"source":"cfgs\/default\/pcap\/webdav.pcap","alias":"nDPId-test","flow_id":2,"flow_state":"finished","flow_src_packets_processed":8,"flow_dst_packets_processed":4,"flow_first_seen":1720686494824645,"flow_src_last_pkt_time":1720686494933025,"flow_dst_last_pkt_time":1720686494932997,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":506,"flow_dst_max_l4_payload_len":1548,"flow_src_tot_l4_payload_len":660,"flow_dst_tot_l4_payload_len":2327,"midstream":0,"thread_ts_usec":1720686579520364,"l3_proto":"ip4","src_ip":"192.168.16.173","dst_ip":"198.244.151.63","src_port":35612,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"flow_risk": {"43": {"risk":"Error Code","severity":"Low","risk_score": {"total":360,"client":300,"server":60}}},"confidence": {"6":"DPI"},"proto":"HTTP.WebDAV","proto_id":"7.376","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":15,"category":"Collaborative","hostname":"www.dlp-test.com"}}
01129{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":92,"source":"cfgs\/default\/pcap\/webdav.pcap","alias":"nDPId-test","flow_id":8,"flow_state":"finished","flow_src_packets_processed":7,"flow_dst_packets_processed":4,"flow_first_seen":1720686579411325,"flow_src_last_pkt_time":1720686579520364,"flow_dst_last_pkt_time":1720686579520335,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":510,"flow_dst_max_l4_payload_len":779,"flow_src_tot_l4_payload_len":668,"flow_dst_tot_l4_payload_len":974,"midstream":0,"thread_ts_usec":1720686579520364,"l3_proto":"ip4","src_ip":"192.168.16.173","dst_ip":"198.244.151.63","src_port":57432,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"flow_risk": {"43": {"risk":"Error Code","severity":"Low","risk_score": {"total":360,"client":300,"server":60}}},"confidence": {"6":"DPI"},"proto":"HTTP.WebDAV","proto_id":"7.376","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":15,"category":"Collaborative","hostname":"www.dlp-test.com"}}
01129{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":92,"source":"cfgs\/default\/pcap\/webdav.pcap","alias":"nDPId-test","flow_id":5,"flow_state":"finished","flow_src_packets_processed":7,"flow_dst_packets_processed":4,"flow_first_seen":1720686552264716,"flow_src_last_pkt_time":1720686552370688,"flow_dst_last_pkt_time":1720686552370659,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":505,"flow_dst_max_l4_payload_len":779,"flow_src_tot_l4_payload_len":658,"flow_dst_tot_l4_payload_len":974,"midstream":0,"thread_ts_usec":1720686579520364,"l3_proto":"ip4","src_ip":"192.168.16.173","dst_ip":"198.244.151.63","src_port":47432,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"flow_risk": {"43": {"risk":"Error Code","severity":"Low","risk_score": {"total":360,"client":300,"server":60}}},"confidence": {"6":"DPI"},"proto":"HTTP.WebDAV","proto_id":"7.376","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":15,"category":"Collaborative","hostname":"www.dlp-test.com"}}
01129{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":92,"source":"cfgs\/default\/pcap\/webdav.pcap","alias":"nDPId-test","flow_id":6,"flow_state":"finished","flow_src_packets_processed":7,"flow_dst_packets_processed":4,"flow_first_seen":1720686558674502,"flow_src_last_pkt_time":1720686558781675,"flow_dst_last_pkt_time":1720686558781647,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":507,"flow_dst_max_l4_payload_len":779,"flow_src_tot_l4_payload_len":662,"flow_dst_tot_l4_payload_len":974,"midstream":0,"thread_ts_usec":1720686579520364,"l3_proto":"ip4","src_ip":"192.168.16.173","dst_ip":"198.244.151.63","src_port":47436,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"flow_risk": {"43": {"risk":"Error Code","severity":"Low","risk_score": {"total":360,"client":300,"server":60}}},"confidence": {"6":"DPI"},"proto":"HTTP.WebDAV","proto_id":"7.376","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":15,"category":"Collaborative","hostname":"www.dlp-test.com"}}
00796{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":92,"source":"cfgs\/default\/pcap\/webdav.pcap","alias":"nDPId-test","version":"1.7.0","ndpi_version":"4.11.0-4834-92507c0","packets-captured":92,"packets-processed":92,"pfring_active":false,"pfring_recv":0,"pfring_drop":0,"pfring_shunt":0,"total-skipped-flows":0,"total-l4-payload-len":15993,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":8,"total-detection-updates":7,"total-updates":0,"current-active-flows":0,"total-active-flows":8,"total-idle-flows":8,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"global-alloc-count":0,"global-free-count":0,"global-alloc-bytes":0,"global-free-bytes":0,"total-events-serialized":75,"global_ts_usec":1720686579520364}
~~~~~~~~~~~~~~~~~~~~ SUMMARY ~~~~~~~~~~~~~~~~~~~~
~~ packets captured/processed: 92/92
~~ skipped flows.............: 0
~~ total layer4 data length..: 15993 bytes
~~ total detected protocols..: 8
~~ total active/idle flows...: 8/8
~~ total timeout flows.......: 0
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~ total memory allocated....: 6661088 bytes
~~ total memory freed........: 6661088 bytes
~~ total allocations/frees...: 114229/114229
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~ json message min len.......: 528 chars
~~ json message max len.......: 1590 chars
~~ json message avg len.......: 1059 chars
|