1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
|
00562{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","version":"1.7.0","ndpi_version":"4.11.0-4834-92507c0","max-flows-per-thread":2048,"max-idle-flows-per-thread":64,"reader-thread-count":1,"flow-scan-interval":10000000,"generic-max-idle-time":600000000,"icmp-max-idle-time":120000000,"udp-max-idle-time":180000000,"tcp-max-idle-time":7560000000,"max-packets-per-flow-to-send":5,"max-packets-per-flow-to-process":32,"max-packets-per-flow-to-analyse":32,"global_ts_usec":0}
00786{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":1,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","version":"1.7.0","ndpi_version":"4.11.0-4834-92507c0","packets-captured":1,"packets-processed":0,"pfring_active":false,"pfring_recv":0,"pfring_drop":0,"pfring_shunt":0,"total-skipped-flows":0,"total-l4-payload-len":0,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":0,"total-detection-updates":0,"total-updates":0,"current-active-flows":0,"total-active-flows":0,"total-idle-flows":0,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"global-alloc-count":0,"global-free-count":0,"global-alloc-bytes":0,"global-free-bytes":0,"total-events-serialized":2,"global_ts_usec":1572254070608539}
00775{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":1,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1572254070608539,"flow_src_last_pkt_time":1572254070608539,"flow_dst_last_pkt_time":1572254070608539,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1572254070608539,"l3_proto":"ip4","src_ip":"192.168.67.98","dst_ip":"192.168.67.25","src_port":57162,"dst_port":10050,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00551{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_src_last_pkt_time":1572254070608539,"flow_dst_last_pkt_time":1572254070608539,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1572254070608539,"pkt":"RoQclwmZOjUSPEK7CABFAAA85AdAAEAGTujAqENiwKhDGd9KJ0JwAdHUAAAAAKACchAH+wAAAgQFtAQCCAorwjXTAAAAAAEDAwc="}
00551{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":2,"flow_src_last_pkt_time":1572254070608539,"flow_dst_last_pkt_time":1572254070608854,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1572254070608854,"pkt":"OjUSPEK7RoQclwmZCABFAAA8AABAAEAGMvDAqEMZwKhDYidC30pw8XhkcAHR1aAScSDKPwAAAgQFtAQCCAorfUX3K8I10wEDAwc="}
00540{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":3,"flow_src_last_pkt_time":1572254070608873,"flow_dst_last_pkt_time":1572254070608854,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1572254070608873,"pkt":"RoQclwmZOjUSPEK7CABFAAA05AhAAEAGTu\/AqENiwKhDGd9KJ0JwAdHVcPF4ZYAQAOUH8wAAAQEICivCNdQrfUX3"}
00571{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":4,"flow_src_last_pkt_time":1572254070608917,"flow_dst_last_pkt_time":1572254070608854,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"thread_ts_usec":1572254070608917,"pkt":"RoQclwmZOjUSPEK7CABFAABL5AlAAEAGTtfAqENiwKhDGd9KJ0JwAdHVcPF4ZYAYAOUICgAAAQEICivCNdQrfUX3WkJYRAEKAAAAAAAAAHByb2MubnVtW10="}
00929{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":1,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1572254070608539,"flow_src_last_pkt_time":1572254070608917,"flow_dst_last_pkt_time":1572254070608854,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":23,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":23,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1572254070608917,"l3_proto":"ip4","src_ip":"192.168.67.98","dst_ip":"192.168.67.25","src_port":57162,"dst_port":10050,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"Zabbix","proto_id":"248","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00539{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":5,"flow_src_last_pkt_time":1572254070608917,"flow_dst_last_pkt_time":1572254070609214,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1572254070609214,"pkt":"OjUSPEK7RoQclwmZCABFAAA0t4ZAAEAGe3HAqEMZwKhDYidC30pw8XhlcAHR7IAQAONpMQAAAQEICit9RfcrwjXU"}
00791{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":11,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","version":"1.7.0","ndpi_version":"4.11.0-4834-92507c0","packets-captured":11,"packets-processed":10,"pfring_active":false,"pfring_recv":0,"pfring_drop":0,"pfring_shunt":0,"total-skipped-flows":0,"total-l4-payload-len":39,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":1,"total-detection-updates":0,"total-updates":0,"current-active-flows":1,"total-active-flows":1,"total-idle-flows":0,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"global-alloc-count":0,"global-free-count":0,"global-alloc-bytes":0,"global-free-bytes":0,"total-events-serialized":10,"global_ts_usec":1657872825792772}
00774{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":11,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":2,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1657872825792772,"flow_src_last_pkt_time":1657872825792772,"flow_dst_last_pkt_time":1657872825792772,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1657872825792772,"l3_proto":"ip4","src_ip":"192.168.7.16","dst_ip":"192.168.7.17","src_port":36699,"dst_port":10051,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00552{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_src_last_pkt_time":1657872825792772,"flow_dst_last_pkt_time":1657872825792772,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1657872825792772,"pkt":"AAwphPY8AAwpXdTzCABFAAA86nZAAEAGwNPAqAcQwKgHEY9bJ0PFmT3IAAAAAKAC+vDyGgAAAgQFtAQCCArVxDu9AAAAAAEDAwc="}
00553{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":2,"flow_src_last_pkt_time":1657872825792772,"flow_dst_last_pkt_time":1657872825792809,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1657872825792809,"pkt":"AAwpXdTzAAwphPY8CABFAAA8AABAAEAGq0rAqAcRwKgHECdDj1uwlSH0xZk9yaAS\/ohzWgAAAgQFtAQCCAqaoA3u1cQ7vQEDAwc="}
00540{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":3,"flow_src_last_pkt_time":1657872825792913,"flow_dst_last_pkt_time":1657872825792809,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1657872825792913,"pkt":"AAwphPY8AAwpXdTzCABFAAA06ndAAEAGwNrAqAcQwKgHEY9bJ0PFmT3JsJUh9YAQAfaeuAAAAQEICtXEO72aoA3u"}
00669{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":4,"flow_src_last_pkt_time":1657872825793409,"flow_dst_last_pkt_time":1657872825792809,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":157,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":157,"pkt_l4_len":123,"thread_ts_usec":1657872825793409,"pkt":"AAwphPY8AAwpXdTzCABFAACP6nhAAEAGwH7AqAcQwKgHEY9bJ0PFmT3JsJUh9YAYAfZYBgAAAQEICtXEO72aoA3uWkJYRANOAAAARQAAAHicqlYqSi0sTS0uUbJSSkwuySxLVUjOSE3OLlbSUcrIBwtHJSYlZVaY6RnpJudkpuaVKOkolaUWFWfm5ylZKZnpGSnVAgIAAP\/\/OxIWqQ=="}
00928{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":14,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":2,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1657872825792772,"flow_src_last_pkt_time":1657872825793409,"flow_dst_last_pkt_time":1657872825792809,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":91,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":91,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1657872825793409,"l3_proto":"ip4","src_ip":"192.168.7.16","dst_ip":"192.168.7.17","src_port":36699,"dst_port":10051,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"Zabbix","proto_id":"248","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00541{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":5,"flow_src_last_pkt_time":1657872825793409,"flow_dst_last_pkt_time":1657872825793428,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1657872825793428,"pkt":"AAwpXdTzAAwphPY8CABFAAA0hIBAAEAGJtLAqAcRwKgHECdDj1uwlSH1xZk+JIAQAf2eVgAAAQEICpqgDe\/VxDu9"}
00774{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":21,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":3,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1657872825796640,"flow_src_last_pkt_time":1657872825796640,"flow_dst_last_pkt_time":1657872825796640,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1657872825796640,"l3_proto":"ip4","src_ip":"192.168.7.16","dst_ip":"192.168.7.17","src_port":54089,"dst_port":10051,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00552{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_src_last_pkt_time":1657872825796640,"flow_dst_last_pkt_time":1657872825796640,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1657872825796640,"pkt":"AAwphPY8AAwpXdTzCABFAAA8ZpZAAEAGRLTAqAcQwKgHEdNJJ0Nj0kvXAAAAAKAC+vAB4QAAAgQFtAQCCArVxDvBAAAAAAEDAwc="}
00553{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":2,"flow_src_last_pkt_time":1657872825796640,"flow_dst_last_pkt_time":1657872825796651,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1657872825796651,"pkt":"AAwpXdTzAAwphPY8CABFAAA8AABAAEAGq0rAqAcRwKgHECdD00m2qpL1Y9JL2KAS\/ogMBgAAAgQFtAQCCAqaoA3y1cQ7wQEDAwc="}
00540{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":3,"flow_src_last_pkt_time":1657872825796690,"flow_dst_last_pkt_time":1657872825796651,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1657872825796690,"pkt":"AAwphPY8AAwpXdTzCABFAAA0ZpdAAEAGRLvAqAcQwKgHEdNJJ0Nj0kvYtqqS9oAQAfY3ZAAAAQEICtXEO8GaoA3y"}
00673{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":4,"flow_src_last_pkt_time":1657872825797831,"flow_dst_last_pkt_time":1657872825796651,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":161,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":161,"pkt_l4_len":127,"thread_ts_usec":1657872825797831,"pkt":"AAwphPY8AAwpXdTzCABFAACTZphAAEAGRFvAqAcQwKgHEdNJJ0Nj0kvYtqqS9oAYAfYXoQAAAQEICtXEO8KaoA3yWkJYRANSAAAAUgAAAHicqlYqSi0sTS0uUbJSSkwuySxLVUjOSE3OVshITSwqSUpNLFHSUcrIB8tHJSYlZVaY6RnpJudkpuaBZWCq4tOKUguVrMwMagEBAAD\/\/6XPHEk="}
00928{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":24,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":3,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1657872825796640,"flow_src_last_pkt_time":1657872825797831,"flow_dst_last_pkt_time":1657872825796651,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":95,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":95,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1657872825797831,"l3_proto":"ip4","src_ip":"192.168.7.16","dst_ip":"192.168.7.17","src_port":54089,"dst_port":10051,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"Zabbix","proto_id":"248","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00541{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":5,"flow_src_last_pkt_time":1657872825797831,"flow_dst_last_pkt_time":1657872825797839,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1657872825797839,"pkt":"AAwpXdTzAAwphPY8CABFAAA0ttdAAEAG9HrAqAcRwKgHECdD00m2qpL2Y9JMN4AQAf02\/QAAAQEICpqgDfPVxDvC"}
00774{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":29,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":4,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1657872831792753,"flow_src_last_pkt_time":1657872831792753,"flow_dst_last_pkt_time":1657872831792753,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1657872831792753,"l3_proto":"ip4","src_ip":"192.168.7.16","dst_ip":"192.168.7.17","src_port":37781,"dst_port":10051,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00552{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_src_last_pkt_time":1657872831792753,"flow_dst_last_pkt_time":1657872831792753,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1657872831792753,"pkt":"AAwphPY8AAwpXdTzCABFAAA8u4BAAEAG78nAqAcQwKgHEZOVJ0P5MlnXAAAAAKAC+vCGyAAAAgQFtAQCCArVxFMtAAAAAAEDAwc="}
00553{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":2,"flow_src_last_pkt_time":1657872831792753,"flow_dst_last_pkt_time":1657872831792781,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1657872831792781,"pkt":"AAwpXdTzAAwphPY8CABFAAA8AABAAEAGq0rAqAcRwKgHECdDk5UJ9i4r+TJZ2KAS\/oiLAAAAAgQFtAQCCAqaoCVe1cRTLQEDAwc="}
00540{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":3,"flow_src_last_pkt_time":1657872831793290,"flow_dst_last_pkt_time":1657872831792781,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1657872831793290,"pkt":"AAwphPY8AAwpXdTzCABFAAA0u4FAAEAG79DAqAcQwKgHEZOVJ0P5MlnYCfYuLIAQAfa2XgAAAQEICtXEUy2aoCVe"}
00892{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":4,"flow_src_last_pkt_time":1657872831793335,"flow_dst_last_pkt_time":1657872831792781,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":323,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":323,"pkt_l4_len":289,"thread_ts_usec":1657872831793335,"pkt":"AAwphPY8AAwpXdTzCABFAAE1u4JAAEAG7s7AqAcQwKgHEZOVJ0P5MlnYCfYuLIAYAfZ2sAAAAQEICtXEUy2aoCVeWkJYRAP0AAAA7gEAAHicjNFNasMwEAXgq5S3VoVG0ox+jtLShWSrrWnq0NgJhZC7l\/yYYMiis5lZDB8P3hG79rNv04yM8tHG+akvc4HCZeXXI4YemRSGuX2fTxe8DQqHstk3ZBhtLgOFbrPtvpBJOMRg4\/lrnJDJhxDZn9SVsmsq\/ouKVypYY4MskltJMd2lKDrZZEgeUOlKcaIkvFB+RSVzp1LSIt7yA8qZG8UkISwUrym6U0yanTjyDyhaUgkxn94UpjZNw3ZERihUC5tYjfHe174Vlt53jtJ7V6t1UPjcXvp7KbUOv6Ltc7cZ2jhD4dB2N0a0xekvAAD\/\/04MhQg="}
00930{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":32,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":4,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1657872831792753,"flow_src_last_pkt_time":1657872831793335,"flow_dst_last_pkt_time":1657872831792781,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":257,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":257,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1657872831793335,"l3_proto":"ip4","src_ip":"192.168.7.16","dst_ip":"192.168.7.17","src_port":37781,"dst_port":10051,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"Zabbix","proto_id":"248","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00541{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":5,"flow_src_last_pkt_time":1657872831793335,"flow_dst_last_pkt_time":1657872831793344,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1657872831793344,"pkt":"AAwpXdTzAAwphPY8CABFAAA0xNxAAEAG5nXAqAcRwKgHECdDk5UJ9i4s+TJa2YAQAfy1VwAAAQEICpqgJV\/VxFMt"}
00970{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":40,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":1,"flow_state":"finished","flow_src_packets_processed":5,"flow_dst_packets_processed":5,"flow_first_seen":1572254070608539,"flow_src_last_pkt_time":1572254070614569,"flow_dst_last_pkt_time":1572254070614852,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":23,"flow_dst_max_l4_payload_len":16,"flow_src_tot_l4_payload_len":23,"flow_dst_tot_l4_payload_len":16,"midstream":0,"thread_ts_usec":1657872831794189,"l3_proto":"ip4","src_ip":"192.168.67.98","dst_ip":"192.168.67.25","src_port":57162,"dst_port":10050,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"Zabbix","proto_id":"248","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00774{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":40,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":5,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1657872837792827,"flow_src_last_pkt_time":1657872837792827,"flow_dst_last_pkt_time":1657872837792827,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1657872837792827,"l3_proto":"ip4","src_ip":"192.168.7.16","dst_ip":"192.168.7.17","src_port":58079,"dst_port":10051,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00552{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_src_last_pkt_time":1657872837792827,"flow_dst_last_pkt_time":1657872837792827,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1657872837792827,"pkt":"AAwphPY8AAwpXdTzCABFAAA8L9lAAEAGe3HAqAcQwKgHEeLfJ0OV8NHDAAAAAKAC+vALZAAAAgQFtAQCCArVxGqdAAAAAAEDAwc="}
00553{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":2,"flow_src_last_pkt_time":1657872837792827,"flow_dst_last_pkt_time":1657872837792856,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1657872837792856,"pkt":"AAwpXdTzAAwphPY8CABFAAA8AABAAEAGq0rAqAcRwKgHECdD4t+C5SzClfDRxKAS\/oiApQAAAgQFtAQCCAqaoDzO1cRqnQEDAwc="}
00540{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":3,"flow_src_last_pkt_time":1657872837793420,"flow_dst_last_pkt_time":1657872837792856,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1657872837793420,"pkt":"AAwphPY8AAwpXdTzCABFAAA0L9pAAEAGe3jAqAcQwKgHEeLfJ0OV8NHEguUsw4AQAfasAwAAAQEICtXEap2aoDzO"}
00980{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":4,"flow_src_last_pkt_time":1657872837793883,"flow_dst_last_pkt_time":1657872837792856,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":385,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":385,"pkt_l4_len":351,"thread_ts_usec":1657872837793883,"pkt":"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"}
00930{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":43,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":5,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1657872837792827,"flow_src_last_pkt_time":1657872837793883,"flow_dst_last_pkt_time":1657872837792856,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":319,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":319,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1657872837793883,"l3_proto":"ip4","src_ip":"192.168.7.16","dst_ip":"192.168.7.17","src_port":58079,"dst_port":10051,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"Zabbix","proto_id":"248","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00541{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":5,"flow_src_last_pkt_time":1657872837793883,"flow_dst_last_pkt_time":1657872837793898,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1657872837793898,"pkt":"AAwpXdTzAAwphPY8CABFAAA0EU1AAEAGmgXAqAcRwKgHECdD4t+C5SzDlfDTA4AQAfuqvgAAAQEICpqgPM\/VxGqe"}
00774{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":50,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":6,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1657872843792650,"flow_src_last_pkt_time":1657872843792650,"flow_dst_last_pkt_time":1657872843792650,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1657872843792650,"l3_proto":"ip4","src_ip":"192.168.7.16","dst_ip":"192.168.7.17","src_port":33661,"dst_port":10051,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00552{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_src_last_pkt_time":1657872843792650,"flow_dst_last_pkt_time":1657872843792650,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1657872843792650,"pkt":"AAwphPY8AAwpXdTzCABFAAA8UxNAAEAGWDfAqAcQwKgHEYN9J0PKek1lAAAAAKAC+vCjKgAAAgQFtAQCCArVxIINAAAAAAEDAwc="}
00553{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":2,"flow_src_last_pkt_time":1657872843792650,"flow_dst_last_pkt_time":1657872843792687,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1657872843792687,"pkt":"AAwpXdTzAAwphPY8CABFAAA8AABAAEAGq0rAqAcRwKgHECdDg32jDXGfynpNZqAS\/oib9gAAAgQFtAQCCAqaoFQ+1cSCDQEDAwc="}
00540{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":3,"flow_src_last_pkt_time":1657872843792814,"flow_dst_last_pkt_time":1657872843792687,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1657872843792814,"pkt":"AAwphPY8AAwpXdTzCABFAAA0UxRAAEAGWD7AqAcQwKgHEYN9J0PKek1mow1xoIAQAfbHVAAAAQEICtXEgg2aoFQ+"}
00896{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":4,"flow_src_last_pkt_time":1657872843793364,"flow_dst_last_pkt_time":1657872843792687,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":322,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":322,"pkt_l4_len":288,"thread_ts_usec":1657872843793364,"pkt":"AAwphPY8AAwpXdTzCABFAAE0UxVAAEAGVz3AqAcQwKgHEYN9J0PKek1mow1xoIAYAfbooQAAAQEICtXEgg2aoFQ+WkJYRAPzAAAA6AEAAHicbNHBasMwDAbgVxk6e8WWbMn2o2zsYCfeFpYlrEnLoOTdR5rQLJCTdPj18YNucC4\/lzKMECF9lG58qtOYQMF9xNcbNDVEYxU0Y\/medxJLXsE1tZcCEQg9g4Kq7asviIadeEE\/J7oBIpMjbya1Mm7PhI0xB0ZYDBcINT8M3hnWbIZ1JMZrc9Bnji19UP5Zsrdws1w4cfA66AMLV0swWHlYfm\/RZglrjToEPLBosYwVzSLTm4KhDEPTd\/NdMjk57bPW1tpcl+S4thWZ8F7ljAQKPvv7515Szs0vn\/C5apvSjaDgWs4rwyeE6S8AAP\/\/LnOD\/w=="}
00930{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":53,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":6,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1657872843792650,"flow_src_last_pkt_time":1657872843793364,"flow_dst_last_pkt_time":1657872843792687,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":256,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":256,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1657872843793364,"l3_proto":"ip4","src_ip":"192.168.7.16","dst_ip":"192.168.7.17","src_port":33661,"dst_port":10051,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"Zabbix","proto_id":"248","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00541{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":54,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":5,"flow_src_last_pkt_time":1657872843793364,"flow_dst_last_pkt_time":1657872843793378,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1657872843793378,"pkt":"AAwpXdTzAAwphPY8CABFAAA0FtFAAEAGlIHAqAcRwKgHECdDg32jDXGgynpOZoAQAfzGTgAAAQEICpqgVD\/VxIIN"}
00774{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":60,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":7,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1657872870792611,"flow_src_last_pkt_time":1657872870792611,"flow_dst_last_pkt_time":1657872870792611,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1657872870792611,"l3_proto":"ip4","src_ip":"192.168.7.16","dst_ip":"192.168.7.17","src_port":40553,"dst_port":10051,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00552{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_src_last_pkt_time":1657872870792611,"flow_dst_last_pkt_time":1657872870792611,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1657872870792611,"pkt":"AAwphPY8AAwpXdTzCABFAAA8sZNAAEAG+bbAqAcQwKgHEZ5pJ0NDI7D5AAAAAKAC+vBCiQAAAgQFtAQCCArVxOuFAAAAAAEDAwc="}
00553{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":61,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":2,"flow_src_last_pkt_time":1657872870792611,"flow_dst_last_pkt_time":1657872870792640,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1657872870792640,"pkt":"AAwpXdTzAAwphPY8CABFAAA8AABAAEAGq0rAqAcRwKgHECdDnmkg1DRmQyOw+qAS\/oiRTwAAAgQFtAQCCAqaoL221cTrhQEDAwc="}
00540{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":3,"flow_src_last_pkt_time":1657872870792705,"flow_dst_last_pkt_time":1657872870792640,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1657872870792705,"pkt":"AAwphPY8AAwpXdTzCABFAAA0sZRAAEAG+b3AqAcQwKgHEZ5pJ0NDI7D6INQ0Z4AQAfa8rQAAAQEICtXE64WaoL22"}
00834{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":4,"flow_src_last_pkt_time":1657872870793946,"flow_dst_last_pkt_time":1657872870792640,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":279,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":279,"pkt_l4_len":245,"thread_ts_usec":1657872870793946,"pkt":"AAwphPY8AAwpXdTzCABFAAEJsZVAAEAG+OfAqAcQwKgHEZ5pJ0NDI7D6INQ0Z4AYAfbC0AAAAQEICtXE64aaoL22WkJYRAPIAAAASQEAAHicbNDPSgMxGATwV5E5x5L\/X5JHUTwk2U8N1l1s0iKUfXexLmrR08zpxzBnHPjtyH0gIT\/xPG6mPDIELpHuz2gTkooCbfDrZzdkpRc45f2RkaAgUPdLfUFS3lEgHbwXmDuSC9ZRXMWXoeWVYcKPYYzy\/zBhY4iCst+MumKU\/DUlhr8KyU2J5J1bHwQ6996WGQmUVclOhiKltbZMnJ2fbDUqPtZStIHA83K55i6X0t79Tt\/WfeN5QODEh43xO431IwAA\/\/8yQ1u9"}
00930{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":63,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":7,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1657872870792611,"flow_src_last_pkt_time":1657872870793946,"flow_dst_last_pkt_time":1657872870792640,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":213,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":213,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1657872870793946,"l3_proto":"ip4","src_ip":"192.168.7.16","dst_ip":"192.168.7.17","src_port":40553,"dst_port":10051,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"Zabbix","proto_id":"248","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00540{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":5,"flow_src_last_pkt_time":1657872870793946,"flow_dst_last_pkt_time":1657872870793960,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1657872870793960,"pkt":"AAwpXdTzAAwphPY8CABFAAA06GpAAEAGwufAqAcRwKgHECdDnmkg1DRnQyOxz4AQAfy70AAAAQEICpqgvbjVxOuG"}
00774{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":70,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":8,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1657872876792584,"flow_src_last_pkt_time":1657872876792584,"flow_dst_last_pkt_time":1657872876792584,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1657872876792584,"l3_proto":"ip4","src_ip":"192.168.7.16","dst_ip":"192.168.7.17","src_port":36755,"dst_port":10051,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00552{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":70,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_src_last_pkt_time":1657872876792584,"flow_dst_last_pkt_time":1657872876792584,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1657872876792584,"pkt":"AAwphPY8AAwpXdTzCABFAAA8ax1AAEAGQC3AqAcQwKgHEY+TJ0PXhyVQAAAAAKAC+vAxNAAAAgQFtAQCCArVxQL1AAAAAAEDAwc="}
00553{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":71,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":2,"flow_src_last_pkt_time":1657872876792584,"flow_dst_last_pkt_time":1657872876792612,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1657872876792612,"pkt":"AAwpXdTzAAwphPY8CABFAAA8AABAAEAGq0rAqAcRwKgHECdDj5NOlfBz14clUaAS\/oh+uwAAAgQFtAQCCAqaoNUm1cUC9QEDAwc="}
00540{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":72,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":3,"flow_src_last_pkt_time":1657872876792676,"flow_dst_last_pkt_time":1657872876792612,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1657872876792676,"pkt":"AAwphPY8AAwpXdTzCABFAAA0ax5AAEAGQDTAqAcQwKgHEY+TJ0PXhyVRTpXwdIAQAfaqGQAAAQEICtXFAvWaoNUm"}
00879{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":73,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":4,"flow_src_last_pkt_time":1657872876793015,"flow_dst_last_pkt_time":1657872876792612,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":315,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":315,"pkt_l4_len":281,"thread_ts_usec":1657872876793015,"pkt":"AAwphPY8AAwpXdTzCABFAAEtax9AAEAGPzrAqAcQwKgHEY+TJ0PXhyVRTpXwdIAYAfaCegAAAQEICtXFAvWaoNUmWkJYRAPsAAAA5wEAAHicdNHBasMwDMbxVxnf2SuWZdmOH2VjBzvxtrAsYU1aBiXvPtaGNoH2JJ1+\/IVO2JefQxknRKSP0k9PTZoSFM4jvp7QNojGKLRT+f7f2VsihWPqDgURGgp1N9RfiOTEB2+CJ4V+RCQh722Y1YLwFuEbYjh4qe5IfJEca3F0hewWsquanfZa63tR9kJJxRX5KyVbStaUrR5QslQFQ3I7z20pt6aMfkC5pUqYWOY3hbGMYzv0iPCJchIdstbW2tyUJK6xNVP1XudsGAqfw\/lxLynn9tftzHPdtaWfoHAs+4VxO4P5LwAA\/\/9Q04Nw"}
00930{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":73,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":8,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1657872876792584,"flow_src_last_pkt_time":1657872876793015,"flow_dst_last_pkt_time":1657872876792612,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":249,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":249,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1657872876793015,"l3_proto":"ip4","src_ip":"192.168.7.16","dst_ip":"192.168.7.17","src_port":36755,"dst_port":10051,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"Zabbix","proto_id":"248","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00540{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":74,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":5,"flow_src_last_pkt_time":1657872876793015,"flow_dst_last_pkt_time":1657872876793029,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1657872876793029,"pkt":"AAwpXdTzAAwphPY8CABFAAA0G3xAAEAGj9bAqAcRwKgHECdDj5NOlfB014cmSoAQAfypGgAAAQEICpqg1SfVxQL1"}
00774{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":80,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":9,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1657872881792581,"flow_src_last_pkt_time":1657872881792581,"flow_dst_last_pkt_time":1657872881792581,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1657872881792581,"l3_proto":"ip4","src_ip":"192.168.7.16","dst_ip":"192.168.7.17","src_port":43395,"dst_port":10051,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00553{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":80,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_src_last_pkt_time":1657872881792581,"flow_dst_last_pkt_time":1657872881792581,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1657872881792581,"pkt":"AAwphPY8AAwpXdTzCABFAAA8ZftAAEAGRU\/AqAcQwKgHEamDJ0OwMQEiAAAAAKAC+vBPQAAAAgQFtAQCCArVxRZ9AAAAAAEDAwc="}
00553{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":81,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":2,"flow_src_last_pkt_time":1657872881792581,"flow_dst_last_pkt_time":1657872881792608,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1657872881792608,"pkt":"AAwpXdTzAAwphPY8CABFAAA8AABAAEAGq0rAqAcRwKgHECdDqYNDohkxsDEBI6AS\/ohrdQAAAgQFtAQCCAqaoOiu1cUWfQEDAwc="}
00540{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":82,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":3,"flow_src_last_pkt_time":1657872881792682,"flow_dst_last_pkt_time":1657872881792608,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1657872881792682,"pkt":"AAwphPY8AAwpXdTzCABFAAA0ZfxAAEAGRVbAqAcQwKgHEamDJ0OwMQEjQ6IZMoAQAfaW0wAAAQEICtXFFn2aoOiu"}
00922{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":4,"flow_src_last_pkt_time":1657872881793297,"flow_dst_last_pkt_time":1657872881792608,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":345,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":345,"pkt_l4_len":311,"thread_ts_usec":1657872881793297,"pkt":"AAwphPY8AAwpXdTzCABFAAFLZf1AAEAGRD7AqAcQwKgHEamDJ0OwMQEjQ6IZMoAYAfYnWQAAAQEICtXFFn2aoOiuWkJYRAMKAQAAdQIAAHicjNLbasMwDAbgVxm69oJ8kGX5UTZ2YSfeFtalW5OWQem7jx7W1NDAriQQfPwS2sOmfG\/LOEGE9FaG6aFLUwIFpxKf99B3EA0r6KfyeewtO2YFu7TaFoiw\/QIF7WrdfkDUnjiwCcf5MEIka5H0QV2QUCH6BtHLBgcv4q6G1EaYDfIueLoDhUsYcW6GLNYb3UAaEXHZCdaIw6uj60AyO9ggLlBypjSjJeOvlqksg\/+xAp4tL+RppmxN6ZkSadh4Yr5j6b+bk3A4vCgYyzj26wEicNI5EYaM6JzLXUnkO9daLa9tzsaCgvf16Y2eUs79j2\/MY7vqyzCBgl3ZXBjfGDj8BgAA\/\/\/szqkd"}
00930{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":83,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":9,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1657872881792581,"flow_src_last_pkt_time":1657872881793297,"flow_dst_last_pkt_time":1657872881792608,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":279,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":279,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1657872881793297,"l3_proto":"ip4","src_ip":"192.168.7.16","dst_ip":"192.168.7.17","src_port":43395,"dst_port":10051,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"Zabbix","proto_id":"248","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00541{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":84,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":5,"flow_src_last_pkt_time":1657872881793297,"flow_dst_last_pkt_time":1657872881793310,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1657872881793310,"pkt":"AAwpXdTzAAwphPY8CABFAAA0sHRAAEAG+t3AqAcRwKgHECdDqYNDohkysDECOoAQAfuVtwAAAQEICpqg6K\/VxRZ9"}
00775{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":90,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":10,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1657872886792642,"flow_src_last_pkt_time":1657872886792642,"flow_dst_last_pkt_time":1657872886792642,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1657872886792642,"l3_proto":"ip4","src_ip":"192.168.7.16","dst_ip":"192.168.7.17","src_port":45197,"dst_port":10051,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00553{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":90,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_src_last_pkt_time":1657872886792642,"flow_dst_last_pkt_time":1657872886792642,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1657872886792642,"pkt":"AAwphPY8AAwpXdTzCABFAAA8K4VAAEAGf8XAqAcQwKgHEbCNJ0MOlvVFAAAAAKAC+vDiJQAAAgQFtAQCCArVxSoFAAAAAAEDAwc="}
00554{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":91,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":2,"flow_src_last_pkt_time":1657872886792642,"flow_dst_last_pkt_time":1657872886792669,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1657872886792669,"pkt":"AAwpXdTzAAwphPY8CABFAAA8AABAAEAGq0rAqAcRwKgHECdDsI0h9tt8Dpb1RqAS\/ohKMwAAAgQFtAQCCAqaoPw21cUqBQEDAwc="}
00541{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":92,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":3,"flow_src_last_pkt_time":1657872886792744,"flow_dst_last_pkt_time":1657872886792669,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1657872886792744,"pkt":"AAwphPY8AAwpXdTzCABFAAA0K4ZAAEAGf8zAqAcQwKgHEbCNJ0MOlvVGIfbbfYAQAfZ1kQAAAQEICtXFKgWaoPw2"}
00775{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":93,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":11,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1657872886792782,"flow_src_last_pkt_time":1657872886792782,"flow_dst_last_pkt_time":1657872886792782,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1657872886792782,"l3_proto":"ip4","src_ip":"192.168.7.16","dst_ip":"192.168.7.17","src_port":35243,"dst_port":10051,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00554{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":93,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_src_last_pkt_time":1657872886792782,"flow_dst_last_pkt_time":1657872886792782,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1657872886792782,"pkt":"AAwphPY8AAwpXdTzCABFAAA8A\/1AAEAGp03AqAcQwKgHEYmrJ0PRuNzAAAAAAKAC+vBeagAAAgQFtAQCCArVxSoFAAAAAAEDAwc="}
00554{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":94,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":2,"flow_src_last_pkt_time":1657872886792782,"flow_dst_last_pkt_time":1657872886792788,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1657872886792788,"pkt":"AAwpXdTzAAwphPY8CABFAAA8AABAAEAGq0rAqAcRwKgHECdDiatccWMA0bjcwaAS\/ogEeQAAAgQFtAQCCAqaoPw21cUqBQEDAwc="}
00542{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":95,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":3,"flow_src_last_pkt_time":1657872886792868,"flow_dst_last_pkt_time":1657872886792788,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1657872886792868,"pkt":"AAwphPY8AAwpXdTzCABFAAA0A\/5AAEAGp1TAqAcQwKgHEYmrJ0PRuNzBXHFjAYAQAfYv1wAAAQEICtXFKgWaoPw2"}
00674{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":96,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":4,"flow_src_last_pkt_time":1657872886793051,"flow_dst_last_pkt_time":1657872886792669,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":161,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":161,"pkt_l4_len":127,"thread_ts_usec":1657872886793051,"pkt":"AAwphPY8AAwpXdTzCABFAACTK4dAAEAGf2zAqAcQwKgHEbCNJ0MOlvVGIfbbfYAYAfZVzwAAAQEICtXFKgWaoPw2WkJYRANSAAAAUgAAAHicqlYqSi0sTS0uUbJSSkwuySxLVUjOSE3OVshITSwqSUpNLFHSUcrIB8tHJSYlZVaY6RnpJudkpuaBZWCq4tOKUguVrMwMagEBAAD\/\/6XPHEk="}
00929{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":96,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":10,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1657872886792642,"flow_src_last_pkt_time":1657872886793051,"flow_dst_last_pkt_time":1657872886792669,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":95,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":95,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1657872886793051,"l3_proto":"ip4","src_ip":"192.168.7.16","dst_ip":"192.168.7.17","src_port":45197,"dst_port":10051,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"Zabbix","proto_id":"248","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00542{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":97,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":5,"flow_src_last_pkt_time":1657872886793051,"flow_dst_last_pkt_time":1657872886793062,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1657872886793062,"pkt":"AAwpXdTzAAwphPY8CABFAAA0VVRAAEAGVf7AqAcRwKgHECdDsI0h9tt9Dpb1pYAQAf11KwAAAQEICpqg\/DfVxSoF"}
00968{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":101,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":4,"flow_src_last_pkt_time":1657872886793509,"flow_dst_last_pkt_time":1657872886792788,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":376,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":376,"pkt_l4_len":342,"thread_ts_usec":1657872886793509,"pkt":"AAwphPY8AAwpXdTzCABFAAFqA\/9AAEAGph3AqAcQwKgHEYmrJ0PRuNzBXHFjAYAYAfavwQAAAQEICtXFKgaaoPw2WkJYRAMpAQAAuAIAAHicjNLRauswDAbgVzG69im2bEtyHuUczoWTeFtYl7ImLYPSdx9xszBDC9VNfhzz5RfkAsf8ecrTDA2k1zzOqk9zAg3l0fy7wNBD47yGYc4fJbMX1HBO+1OGBpRS1lhr1TIYiZVSQkLilwNLgUtQjGtwEWW56oN3WO5gQFbrmHLCEqkEax1Vrx4E0NDtD907NMsXhVGWjuMEDfloOV71ukioFsFfi5idKfOYig5DoI2imnIVJRyDvUO5tZWwYdkorin\/VCt\/o9g4imGjpKZCRVmKEe9Q4UaJYYluo2JN0VOt6KdVdEjX\/xqmPE3DYYQGONk2BSOtMd77ts8pUO87Z+NL17boQMPbofyJf1PbDl+0wz\/dfsjjDBrO+bgytEO4fgcAAP\/\/usGrvg=="}
00932{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":101,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":11,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1657872886792782,"flow_src_last_pkt_time":1657872886793509,"flow_dst_last_pkt_time":1657872886792788,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":310,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":310,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1657872886793509,"l3_proto":"ip4","src_ip":"192.168.7.16","dst_ip":"192.168.7.17","src_port":35243,"dst_port":10051,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"Zabbix","proto_id":"248","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00543{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":102,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":5,"flow_src_last_pkt_time":1657872886793509,"flow_dst_last_pkt_time":1657872886793517,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1657872886793517,"pkt":"AAwpXdTzAAwphPY8CABFAAA0CnBAAEAGoOLAqAcRwKgHECdDiatccWMB0bjd94AQAfsumwAAAQEICpqg\/DfVxSoG"}
00776{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":108,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":12,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1657872892792572,"flow_src_last_pkt_time":1657872892792572,"flow_dst_last_pkt_time":1657872892792572,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1657872892792572,"l3_proto":"ip4","src_ip":"192.168.7.16","dst_ip":"192.168.7.17","src_port":36623,"dst_port":10051,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00554{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":108,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_src_last_pkt_time":1657872892792572,"flow_dst_last_pkt_time":1657872892792572,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1657872892792572,"pkt":"AAwphPY8AAwpXdTzCABFAAA8BORAAEAGpmbAqAcQwKgHEY8PJ0MgPQwEAAAAAKAC+vDDzgAAAgQFtAQCCArVxUF1AAAAAAEDAwc="}
00556{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":109,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":2,"flow_src_last_pkt_time":1657872892792572,"flow_dst_last_pkt_time":1657872892792601,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1657872892792601,"pkt":"AAwpXdTzAAwphPY8CABFAAA8AABAAEAGq0rAqAcRwKgHECdDjw\/xVE9QID0MBaAS\/ojROQAAAgQFtAQCCAqaoROm1cVBdQEDAwc="}
00542{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":110,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":3,"flow_src_last_pkt_time":1657872892792678,"flow_dst_last_pkt_time":1657872892792601,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1657872892792678,"pkt":"AAwphPY8AAwpXdTzCABFAAA0BOVAAEAGpm3AqAcQwKgHEY8PJ0MgPQwF8VRPUYAQAfb8lwAAAQEICtXFQXWaoROm"}
00925{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":111,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":4,"flow_src_last_pkt_time":1657872892793279,"flow_dst_last_pkt_time":1657872892792601,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":347,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":347,"pkt_l4_len":313,"thread_ts_usec":1657872892793279,"pkt":"AAwphPY8AAwpXdTzCABFAAFNBOZAAEAGpVPAqAcQwKgHEY8PJ0MgPQwF8VRPUYAYAfbOWAAAAQEICtXFQXWaoROmWkJYRAMMAQAAPgIAAHicbNLRauswDAbgVzno2sfYsiXLfpSNXdiJt4V1KWvSMih995G2NDXkSrr4+eAXOsOh\/hzrNEOC\/FHH+V+f5wwKriO9nmHoIXmjYJjr97K74DEoOOXdsUICow2zeAIF3W7ffUGyTEECigQF4wTJEgpac1F3y7aWNJY48rhhyc2KjjyvFDaUxJUS1hGjsbxhxZvFaJnkYbnGima1YtTMHmnDWmKLRcLBhoflW8uuFllNjh1t3GuJXa0Y5KkjtRY+ddTWBImyQeGD8oKXNwVTnaZhP0KCkG3JZKQY470vfc3Eve+cje9dKehAwef++g8vuZThlzX+73ZDHWdQcKqHO8Ma4fIXAAD\/\/w1BmaM="}
00932{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":111,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":12,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1657872892792572,"flow_src_last_pkt_time":1657872892793279,"flow_dst_last_pkt_time":1657872892792601,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":281,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":281,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1657872892793279,"l3_proto":"ip4","src_ip":"192.168.7.16","dst_ip":"192.168.7.17","src_port":36623,"dst_port":10051,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"Zabbix","proto_id":"248","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00544{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":112,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":5,"flow_src_last_pkt_time":1657872892793279,"flow_dst_last_pkt_time":1657872892793293,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1657872892793293,"pkt":"AAwpXdTzAAwphPY8CABFAAA08vJAAEAGuF\/AqAcRwKgHECdDjw\/xVE9RID0NHoAQAfv7eQAAAQEICpqhE6fVxUF1"}
00776{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":118,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":13,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1657872897792597,"flow_src_last_pkt_time":1657872897792597,"flow_dst_last_pkt_time":1657872897792597,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1657872897792597,"l3_proto":"ip4","src_ip":"192.168.7.16","dst_ip":"192.168.7.17","src_port":35627,"dst_port":10051,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00554{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":118,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_src_last_pkt_time":1657872897792597,"flow_dst_last_pkt_time":1657872897792597,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1657872897792597,"pkt":"AAwphPY8AAwpXdTzCABFAAA8oFRAAEAGCvbAqAcQwKgHEYsrJ0NzXFJJAAAAAKAC+vAaxgAAAgQFtAQCCArVxVT9AAAAAAEDAwc="}
00556{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":119,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":2,"flow_src_last_pkt_time":1657872897792597,"flow_dst_last_pkt_time":1657872897792623,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1657872897792623,"pkt":"AAwpXdTzAAwphPY8CABFAAA8AABAAEAGq0rAqAcRwKgHECdDiyvqkeMjc1xSSqAS\/oiHmAAAAgQFtAQCCAqaoScu1cVU\/QEDAwc="}
00542{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":120,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":3,"flow_src_last_pkt_time":1657872897792690,"flow_dst_last_pkt_time":1657872897792623,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1657872897792690,"pkt":"AAwphPY8AAwpXdTzCABFAAA0oFVAAEAGCv3AqAcQwKgHEYsrJ0NzXFJK6pHjJIAQAfay9gAAAQEICtXFVP2aoScu"}
00958{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":121,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":4,"flow_src_last_pkt_time":1657872897793078,"flow_dst_last_pkt_time":1657872897792623,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":368,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":368,"pkt_l4_len":334,"thread_ts_usec":1657872897793078,"pkt":"AAwphPY8AAwpXdTzCABFAAFioFZAAEAGCc7AqAcQwKgHEYsrJ0NzXFJK6pHjJIAYAfZmPAAAAQEICtXFVP2aoScuWkJYRAMhAQAAlgIAAHicfNLNbtswDMDxVxl41gKSJinKj7JhB9nWWqOpg8ZOUCDIuxf5jgG3J+kg\/KC\/xANsy8eujBPUkF\/KMP3q8pQhwHmp\/x6g76AWC9BP5f20r6KkKsA+r3cFaiAUE2RWdgjQrjftG9RkGj2ynw4OI9QJYyQ8hqsWZ1olD41Royp55AVMLhgpM+pD8\/ndnjQSQ01sgj9oLuIc71qaa\/rQlDCKaLQlTS+aiiGmG6Y4D33CUlolI0r2veXi5HS3aG7Z7NG80lPpAmbXTPGoie8azzOfNCL0RIhL33nDLFrF6fgvwFjGsd8MUEPM1GRFbxBFpOlKVuukrSj9b5uGKwjwujnP2Z\/cNP2nrfh3u+7LMEGAfdleGVsxHL8CAAD\/\/6dBr4o="}
00932{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":121,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":13,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1657872897792597,"flow_src_last_pkt_time":1657872897793078,"flow_dst_last_pkt_time":1657872897792623,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":302,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":302,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1657872897793078,"l3_proto":"ip4","src_ip":"192.168.7.16","dst_ip":"192.168.7.17","src_port":35627,"dst_port":10051,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"Zabbix","proto_id":"248","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00543{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":122,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":5,"flow_src_last_pkt_time":1657872897793078,"flow_dst_last_pkt_time":1657872897793092,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1657872897793092,"pkt":"AAwpXdTzAAwphPY8CABFAAA0kwRAAEAGGE7AqAcRwKgHECdDiyvqkeMkc1xTeIAQAfuxwwAAAQEICpqhJy\/VxVT9"}
00776{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":128,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":14,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1657872903792545,"flow_src_last_pkt_time":1657872903792545,"flow_dst_last_pkt_time":1657872903792545,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1657872903792545,"l3_proto":"ip4","src_ip":"192.168.7.16","dst_ip":"192.168.7.17","src_port":49215,"dst_port":10051,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00556{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":128,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_src_last_pkt_time":1657872903792545,"flow_dst_last_pkt_time":1657872903792545,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1657872903792545,"pkt":"AAwphPY8AAwpXdTzCABFAAA8P\/1AAEAGa03AqAcQwKgHEcA\/J0OkvITAAAAAAKAC+vBqagAAAgQFtAQCCArVxWxtAAAAAAEDAwc="}
00555{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":129,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":2,"flow_src_last_pkt_time":1657872903792545,"flow_dst_last_pkt_time":1657872903792574,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1657872903792574,"pkt":"AAwpXdTzAAwphPY8CABFAAA8AABAAEAGq0rAqAcRwKgHECdDwD9H2o+ZpLyEwaAS\/oi2DgAAAgQFtAQCCAqaoT6e1cVsbQEDAwc="}
00544{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":130,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":3,"flow_src_last_pkt_time":1657872903792644,"flow_dst_last_pkt_time":1657872903792574,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1657872903792644,"pkt":"AAwphPY8AAwpXdTzCABFAAA0P\/5AAEAGa1TAqAcQwKgHEcA\/J0OkvITBR9qPmoAQAfbhbAAAAQEICtXFbG2aoT6e"}
00893{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":131,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":4,"flow_src_last_pkt_time":1657872903793147,"flow_dst_last_pkt_time":1657872903792574,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":321,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":321,"pkt_l4_len":287,"thread_ts_usec":1657872903793147,"pkt":"AAwphPY8AAwpXdTzCABFAAEzP\/9AAEAGalTAqAcQwKgHEcA\/J0OkvITBR9qPmoAYAfYxIAAAAQEICtXFbG2aoT6eWkJYRAPyAAAA5wEAAHicbNHNasMwDMDxVxk6e8XWh235UTZ2sBNvC+tS1qRlUPLuo13aENqTdNGPP+gE+\/pzqMMICfJH7cenNo8ZDFxGej1B10ISMtCN9fu8U2CKBo55e6iQgIg9GGi2u+YLkvMSYsCo0UA\/QPJExDiZmeE1owvjHhj6b4hYcYshK4PdYrAwimW971Hrrhaq6M3yawsXS3QTfHRy36UWZ4vVq71ZYW3RYgVvLVpVfGDR1XIkYXozMNRh6Hb9+Sy7ksXGYi0zl7Zm8S035PS9KQUJDHzuLo97yaV0v36Dz822q\/0IBo51PzN+gzD9BQAA\/\/\/EBYPU"}
00932{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":131,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":14,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1657872903792545,"flow_src_last_pkt_time":1657872903793147,"flow_dst_last_pkt_time":1657872903792574,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":255,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":255,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1657872903793147,"l3_proto":"ip4","src_ip":"192.168.7.16","dst_ip":"192.168.7.17","src_port":49215,"dst_port":10051,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"Zabbix","proto_id":"248","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00543{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":132,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":5,"flow_src_last_pkt_time":1657872903793147,"flow_dst_last_pkt_time":1657872903793160,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1657872903793160,"pkt":"AAwpXdTzAAwphPY8CABFAAA0QWxAAEAGaebAqAcRwKgHECdDwD9H2o+apLyFwIAQAfzgZwAAAQEICpqhPp\/VxWxt"}
00776{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":138,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":15,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1657872930793502,"flow_src_last_pkt_time":1657872930793502,"flow_dst_last_pkt_time":1657872930793502,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1657872930793502,"l3_proto":"ip4","src_ip":"192.168.7.16","dst_ip":"192.168.7.17","src_port":55759,"dst_port":10051,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00554{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":138,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_src_last_pkt_time":1657872930793502,"flow_dst_last_pkt_time":1657872930793502,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1657872930793502,"pkt":"AAwphPY8AAwpXdTzCABFAAA8aOZAAEAGQmTAqAcQwKgHEdnPJ0PpqOYFAAAAAKAC+vBBLwAAAgQFtAQCCArVxdXmAAAAAAEDAwc="}
00555{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":139,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":2,"flow_src_last_pkt_time":1657872930793502,"flow_dst_last_pkt_time":1657872930793538,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1657872930793538,"pkt":"AAwpXdTzAAwphPY8CABFAAA8AABAAEAGq0rAqAcRwKgHECdD2c9PMqoP6ajmBqAS\/ogBjAAAAgQFtAQCCAqaoagX1cXV5gEDAwc="}
00542{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":140,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":3,"flow_src_last_pkt_time":1657872930793707,"flow_dst_last_pkt_time":1657872930793538,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1657872930793707,"pkt":"AAwphPY8AAwpXdTzCABFAAA0aOdAAEAGQmvAqAcQwKgHEdnPJ0PpqOYGTzKqEIAQAfYs6gAAAQEICtXF1eaaoagX"}
00835{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":141,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":4,"flow_src_last_pkt_time":1657872930795536,"flow_dst_last_pkt_time":1657872930793538,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":278,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":278,"pkt_l4_len":244,"thread_ts_usec":1657872930795536,"pkt":"AAwphPY8AAwpXdTzCABFAAEIaOhAAEAGQZbAqAcQwKgHEdnPJ0PpqOYGTzKqEIAYAfYlSQAAAQEICtXF1eeaoagXWkJYRAPHAAAASQEAAHicbNDPSgMxGATwV5E5x\/IlX\/4\/iuIhyUYN1l1s0iKUfXexbNGip5nTj2HOONSPY+0DEemlzuNuSiNB4BLx8Yw2IRov0EZ9\/+7sNFmBU9ofKyIkBMp+KW+I0hrnnQrKCswd0bBUbFexGeHGYP9jMDv7D+M3xpEhujKWbhhJv6YE91dhuipeBl6fBHrtvS0zIlySORnymUhrnaeajJ10YRmeS86KIfC6XK55SDm3T7tT92Xf6jwgcKqHjbE7hfUrAAD\/\/yRbW6Y="}
00932{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":141,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":15,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1657872930793502,"flow_src_last_pkt_time":1657872930795536,"flow_dst_last_pkt_time":1657872930793538,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":212,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":212,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1657872930795536,"l3_proto":"ip4","src_ip":"192.168.7.16","dst_ip":"192.168.7.17","src_port":55759,"dst_port":10051,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"Zabbix","proto_id":"248","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00542{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":142,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":5,"flow_src_last_pkt_time":1657872930795536,"flow_dst_last_pkt_time":1657872930795553,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1657872930795553,"pkt":"AAwpXdTzAAwphPY8CABFAAA0uL9AAEAG8pLAqAcRwKgHECdD2c9PMqoQ6ajm2oAQAfwsDgAAAQEICpqhqBnVxdXn"}
00776{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":149,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":16,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1657872936792500,"flow_src_last_pkt_time":1657872936792500,"flow_dst_last_pkt_time":1657872936792500,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1657872936792500,"l3_proto":"ip4","src_ip":"192.168.7.16","dst_ip":"192.168.7.17","src_port":50639,"dst_port":10051,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00554{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":149,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_src_last_pkt_time":1657872936792500,"flow_dst_last_pkt_time":1657872936792500,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1657872936792500,"pkt":"AAwphPY8AAwpXdTzCABFAAA8VpBAAEAGVLrAqAcQwKgHEcXPJ0PDXpHCAAAAAKAC+vC4TQAAAgQFtAQCCArVxe1VAAAAAAEDAwc="}
00555{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":150,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":2,"flow_src_last_pkt_time":1657872936792500,"flow_dst_last_pkt_time":1657872936792528,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1657872936792528,"pkt":"AAwpXdTzAAwphPY8CABFAAA8AABAAEAGq0rAqAcRwKgHECdDxc9EEUkkw16Rw6AS\/ojNRwAAAgQFtAQCCAqaob+G1cXtVQEDAwc="}
00542{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":151,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":3,"flow_src_last_pkt_time":1657872936792594,"flow_dst_last_pkt_time":1657872936792528,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1657872936792594,"pkt":"AAwphPY8AAwpXdTzCABFAAA0VpFAAEAGVMHAqAcQwKgHEcXPJ0PDXpHDRBFJJYAQAfb4pQAAAQEICtXF7VWaob+G"}
00999{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":152,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":4,"flow_src_last_pkt_time":1657872936792868,"flow_dst_last_pkt_time":1657872936792528,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":397,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":397,"pkt_l4_len":363,"thread_ts_usec":1657872936792868,"pkt":"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"}
00932{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":152,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":16,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1657872936792500,"flow_src_last_pkt_time":1657872936792868,"flow_dst_last_pkt_time":1657872936792528,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":331,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":331,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1657872936792868,"l3_proto":"ip4","src_ip":"192.168.7.16","dst_ip":"192.168.7.17","src_port":50639,"dst_port":10051,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"Zabbix","proto_id":"248","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00542{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":153,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":5,"flow_src_last_pkt_time":1657872936792868,"flow_dst_last_pkt_time":1657872936792883,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1657872936792883,"pkt":"AAwpXdTzAAwphPY8CABFAAA0fppAAEAGLLjAqAcRwKgHECdDxc9EEUklw16TDoAQAfv3VgAAAQEICpqhv4bVxe1V"}
00776{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":159,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":17,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1657872941792573,"flow_src_last_pkt_time":1657872941792573,"flow_dst_last_pkt_time":1657872941792573,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1657872941792573,"l3_proto":"ip4","src_ip":"192.168.7.16","dst_ip":"192.168.7.17","src_port":41309,"dst_port":10051,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00554{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":159,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_src_last_pkt_time":1657872941792573,"flow_dst_last_pkt_time":1657872941792573,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1657872941792573,"pkt":"AAwphPY8AAwpXdTzCABFAAA805FAAEAG17jAqAcQwKgHEaFdJ0PrusPWAAAAAKAC+vBuxwAAAgQFtAQCCArVxgDdAAAAAAEDAwc="}
00555{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":160,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":2,"flow_src_last_pkt_time":1657872941792573,"flow_dst_last_pkt_time":1657872941792600,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1657872941792600,"pkt":"AAwpXdTzAAwphPY8CABFAAA8AABAAEAGq0rAqAcRwKgHECdDoV3qIUU267rD16AS\/ojOFgAAAgQFtAQCCAqaodMO1cYA3QEDAwc="}
00543{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":161,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":3,"flow_src_last_pkt_time":1657872941792655,"flow_dst_last_pkt_time":1657872941792600,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1657872941792655,"pkt":"AAwphPY8AAwpXdTzCABFAAA005JAAEAG17\/AqAcQwKgHEaFdJ0PrusPX6iFFN4AQAfb5dAAAAQEICtXGAN2aodMO"}
00907{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":162,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":4,"flow_src_last_pkt_time":1657872941793507,"flow_dst_last_pkt_time":1657872941792600,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":332,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":332,"pkt_l4_len":298,"thread_ts_usec":1657872941793507,"pkt":"AAwphPY8AAwpXdTzCABFAAE+05NAAEAG1rTAqAcQwKgHEaFdJ0PrusPX6iFFN4AYAfbsFAAAAQEICtXGAN6aodMOWkJYRAP9AAAALQIAAHicjNHPSvQwFAXwV\/k463wlN\/9ukkdRXCRt1OLY0WlnEIa+u9iOrYUK3s09qx8HzhWn8n4u\/YCI9FS64V+ThgSB6cX7K9oGkZVAO5TXr6zZMAtc0uFcEHF+g0B9ONYviOQse1ZBs0DXI1rjidwobojeIPQDod8NNoGdWgyzNfxqWNbBqB3If5cha+QC2S0UVkhWcrodKsyU194FvVBuQyn5F8rImXJBa80LxVuKViqEypMjsjsWzRYxe+t4fBDoS9+3xw4RnCgnK32W0hiTm5Ksa0ytKTzWOSsNgefjNP9dyrn9cJX6Xx\/a0g0QuJTTjXGVwvgZAAD\/\/6rWlnA="}
00932{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":162,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":17,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1657872941792573,"flow_src_last_pkt_time":1657872941793507,"flow_dst_last_pkt_time":1657872941792600,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":266,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":266,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1657872941793507,"l3_proto":"ip4","src_ip":"192.168.7.16","dst_ip":"192.168.7.17","src_port":41309,"dst_port":10051,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"Zabbix","proto_id":"248","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00543{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":163,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":5,"flow_src_last_pkt_time":1657872941793507,"flow_dst_last_pkt_time":1657872941793520,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1657872941793520,"pkt":"AAwpXdTzAAwphPY8CABFAAA0v3VAAEAG69zAqAcRwKgHECdDoV3qIUU367rE4YAQAfv4ZAAAAQEICpqh0w\/VxgDe"}
00776{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":169,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":18,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1657872946792586,"flow_src_last_pkt_time":1657872946792586,"flow_dst_last_pkt_time":1657872946792586,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1657872946792586,"l3_proto":"ip4","src_ip":"192.168.7.16","dst_ip":"192.168.7.17","src_port":60217,"dst_port":10051,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00554{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":169,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_src_last_pkt_time":1657872946792586,"flow_dst_last_pkt_time":1657872946792586,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1657872946792586,"pkt":"AAwphPY8AAwpXdTzCABFAAA8mKpAAEAGEqDAqAcQwKgHEes5J0OuG6ccAAAAAKAC+vBrvAAAAgQFtAQCCArVxhRlAAAAAAEDAwc="}
00555{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":170,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":2,"flow_src_last_pkt_time":1657872946792586,"flow_dst_last_pkt_time":1657872946792616,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1657872946792616,"pkt":"AAwpXdTzAAwphPY8CABFAAA8AABAAEAGq0rAqAcRwKgHECdD6zkMhI4LrhunHaAS\/ohMTAAAAgQFtAQCCAqaoeaW1cYUZQEDAwc="}
00776{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":171,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":19,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1657872946792630,"flow_src_last_pkt_time":1657872946792630,"flow_dst_last_pkt_time":1657872946792630,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1657872946792630,"l3_proto":"ip4","src_ip":"192.168.7.16","dst_ip":"192.168.7.17","src_port":43677,"dst_port":10051,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00554{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":171,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_src_last_pkt_time":1657872946792630,"flow_dst_last_pkt_time":1657872946792630,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1657872946792630,"pkt":"AAwphPY8AAwpXdTzCABFAAA82ltAAEAG0O7AqAcQwKgHEaqdJ0OOmrBbAAAAAKAC+vDCmgAAAgQFtAQCCArVxhRlAAAAAAEDAwc="}
00556{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":172,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":2,"flow_src_last_pkt_time":1657872946792630,"flow_dst_last_pkt_time":1657872946792636,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1657872946792636,"pkt":"AAwpXdTzAAwphPY8CABFAAA8AABAAEAGq0rAqAcRwKgHECdDqp39rkBzjpqwXKAS\/oj\/lwAAAgQFtAQCCAqaoeaW1cYUZQEDAwc="}
00542{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":173,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":3,"flow_src_last_pkt_time":1657872946792659,"flow_dst_last_pkt_time":1657872946792616,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1657872946792659,"pkt":"AAwphPY8AAwpXdTzCABFAAA0mKtAAEAGEqfAqAcQwKgHEes5J0OuG6cdDISODIAQAfZ3qgAAAQEICtXGFGWaoeaW"}
00543{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":174,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":3,"flow_src_last_pkt_time":1657872946792683,"flow_dst_last_pkt_time":1657872946792636,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1657872946792683,"pkt":"AAwphPY8AAwpXdTzCABFAAA02lxAAEAG0PXAqAcQwKgHEaqdJ0OOmrBc\/a5AdIAQAfYq9gAAAQEICtXGFGWaoeaW"}
00970{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":175,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":4,"flow_src_last_pkt_time":1657872946792952,"flow_dst_last_pkt_time":1657872946792636,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":377,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":377,"pkt_l4_len":343,"thread_ts_usec":1657872946792952,"pkt":"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"}
00932{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":175,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":19,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1657872946792630,"flow_src_last_pkt_time":1657872946792952,"flow_dst_last_pkt_time":1657872946792636,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":311,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":311,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1657872946792952,"l3_proto":"ip4","src_ip":"192.168.7.16","dst_ip":"192.168.7.17","src_port":43677,"dst_port":10051,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"Zabbix","proto_id":"248","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00542{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":176,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":5,"flow_src_last_pkt_time":1657872946792952,"flow_dst_last_pkt_time":1657872946792965,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1657872946792965,"pkt":"AAwpXdTzAAwphPY8CABFAAA0w7NAAEAG557AqAcRwKgHECdDqp39rkB0jpqxk4AQAfspugAAAQEICpqh5pfVxhRl"}
00671{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":180,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":4,"flow_src_last_pkt_time":1657872946793358,"flow_dst_last_pkt_time":1657872946792616,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":157,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":157,"pkt_l4_len":123,"thread_ts_usec":1657872946793358,"pkt":"AAwphPY8AAwpXdTzCABFAACPmKxAAEAGEkvAqAcQwKgHEes5J0OuG6cdDISODIAYAfYw+AAAAQEICtXGFGWaoeaWWkJYRANOAAAARQAAAHicqlYqSi0sTS0uUbJSSkwuySxLVUjOSE3OLlbSUcrIBwtHJSYlZVaY6RnpJudkpuaVKOkolaUWFWfm5ylZKZnpGSnVAgIAAP\/\/OxIWqQ=="}
00930{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":180,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":18,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1657872946792586,"flow_src_last_pkt_time":1657872946793358,"flow_dst_last_pkt_time":1657872946792616,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":91,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":91,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1657872946793358,"l3_proto":"ip4","src_ip":"192.168.7.16","dst_ip":"192.168.7.17","src_port":60217,"dst_port":10051,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"Zabbix","proto_id":"248","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00542{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":181,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":5,"flow_src_last_pkt_time":1657872946793358,"flow_dst_last_pkt_time":1657872946793365,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1657872946793365,"pkt":"AAwpXdTzAAwphPY8CABFAAA0fqlAAEAGLKnAqAcRwKgHECdD6zkMhI4MrhuneIAQAf13SAAAAQEICpqh5pfVxhRl"}
00776{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":189,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":20,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1657872947793311,"flow_src_last_pkt_time":1657872947793311,"flow_dst_last_pkt_time":1657872947793311,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1657872947793311,"l3_proto":"ip4","src_ip":"192.168.7.16","dst_ip":"192.168.7.17","src_port":48677,"dst_port":10051,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00554{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":189,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_src_last_pkt_time":1657872947793311,"flow_dst_last_pkt_time":1657872947793311,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1657872947793311,"pkt":"AAwphPY8AAwpXdTzCABFAAA8gvJAAEAGKFjAqAcQwKgHEb4lJ0MQcz+qAAAAAKAC+vCaAwAAAgQFtAQCCArVxhhNAAAAAAEDAwc="}
00557{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":190,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":2,"flow_src_last_pkt_time":1657872947793311,"flow_dst_last_pkt_time":1657872947793340,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1657872947793340,"pkt":"AAwpXdTzAAwphPY8CABFAAA8AABAAEAGq0rAqAcRwKgHECdDviV4fJDbEHM\/q6AS\/ogH4gAAAgQFtAQCCAqaoep\/1cYYTQEDAwc="}
00544{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":191,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":3,"flow_src_last_pkt_time":1657872947793404,"flow_dst_last_pkt_time":1657872947793340,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1657872947793404,"pkt":"AAwphPY8AAwpXdTzCABFAAA0gvNAAEAGKF\/AqAcQwKgHEb4lJ0MQcz+reHyQ3IAQAfYzPwAAAQEICtXGGE6aoep\/"}
00678{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":192,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":4,"flow_src_last_pkt_time":1657872947794418,"flow_dst_last_pkt_time":1657872947793340,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":161,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":161,"pkt_l4_len":127,"thread_ts_usec":1657872947794418,"pkt":"AAwphPY8AAwpXdTzCABFAACTgvRAAEAGJ\/\/AqAcQwKgHEb4lJ0MQcz+reHyQ3IAYAfYTfQAAAQEICtXGGE6aoep\/WkJYRANSAAAAUgAAAHicqlYqSi0sTS0uUbJSSkwuySxLVUjOSE3OVshITSwqSUpNLFHSUcrIB8tHJSYlZVaY6RnpJudkpuaBZWCq4tOKUguVrMwMagEBAAD\/\/6XPHEk="}
00930{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":192,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":20,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1657872947793311,"flow_src_last_pkt_time":1657872947794418,"flow_dst_last_pkt_time":1657872947793340,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":95,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":95,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1657872947794418,"l3_proto":"ip4","src_ip":"192.168.7.16","dst_ip":"192.168.7.17","src_port":48677,"dst_port":10051,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"Zabbix","proto_id":"248","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00542{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":193,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":5,"flow_src_last_pkt_time":1657872947794418,"flow_dst_last_pkt_time":1657872947794432,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1657872947794432,"pkt":"AAwpXdTzAAwphPY8CABFAAA0fFtAAEAGLvfAqAcRwKgHECdDviV4fJDcEHNACoAQAf0y2QAAAQEICpqh6oDVxhhO"}
00971{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":197,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":2,"flow_state":"finished","flow_src_packets_processed":5,"flow_dst_packets_processed":5,"flow_first_seen":1657872825792772,"flow_src_last_pkt_time":1657872825796257,"flow_dst_last_pkt_time":1657872825796264,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":91,"flow_dst_max_l4_payload_len":745,"flow_src_tot_l4_payload_len":91,"flow_dst_tot_l4_payload_len":745,"midstream":0,"thread_ts_usec":1657872947794590,"l3_proto":"ip4","src_ip":"192.168.7.16","dst_ip":"192.168.7.17","src_port":36699,"dst_port":10051,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"Zabbix","proto_id":"248","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00967{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":197,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":3,"flow_state":"finished","flow_src_packets_processed":5,"flow_dst_packets_processed":3,"flow_first_seen":1657872825796640,"flow_src_last_pkt_time":1657872825798048,"flow_dst_last_pkt_time":1657872825798009,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":95,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":95,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1657872947794590,"l3_proto":"ip4","src_ip":"192.168.7.16","dst_ip":"192.168.7.17","src_port":54089,"dst_port":10051,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"Zabbix","proto_id":"248","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00776{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":197,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":21,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1657872952792575,"flow_src_last_pkt_time":1657872952792575,"flow_dst_last_pkt_time":1657872952792575,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1657872952792575,"l3_proto":"ip4","src_ip":"192.168.7.16","dst_ip":"192.168.7.17","src_port":52901,"dst_port":10051,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00554{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":197,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":1,"flow_src_last_pkt_time":1657872952792575,"flow_dst_last_pkt_time":1657872952792575,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1657872952792575,"pkt":"AAwphPY8AAwpXdTzCABFAAA8255AAEAGz6vAqAcQwKgHEc6lJ0N0SnSMAAAAAKAC+vDdQQAAAgQFtAQCCArVxivVAAAAAAEDAwc="}
00555{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":198,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":2,"flow_src_last_pkt_time":1657872952792575,"flow_dst_last_pkt_time":1657872952792605,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1657872952792605,"pkt":"AAwpXdTzAAwphPY8CABFAAA8AABAAEAGq0rAqAcRwKgHECdDzqWyONx7dEp0jaAS\/oiyPAAAAgQFtAQCCAqaof4G1cYr1QEDAwc="}
00542{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":199,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":3,"flow_src_last_pkt_time":1657872952792721,"flow_dst_last_pkt_time":1657872952792605,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1657872952792721,"pkt":"AAwphPY8AAwpXdTzCABFAAA0259AAEAGz7LAqAcQwKgHEc6lJ0N0SnSNsjjcfIAQAfbdmgAAAQEICtXGK9Waof4G"}
00928{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":200,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":4,"flow_src_last_pkt_time":1657872952792995,"flow_dst_last_pkt_time":1657872952792605,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":347,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":347,"pkt_l4_len":313,"thread_ts_usec":1657872952792995,"pkt":"AAwphPY8AAwpXdTzCABFAAFN26BAAEAGzpjAqAcQwKgHEc6lJ0N0SnSNsjjcfIAYAfaZpgAAAQEICtXGK9Waof4GWkJYRAMMAQAAPwIAAHicbNJRa+MwDMDxr3Lo2Wck25Itf5Q77sFOfFtYl7ImLYPS7z7WZc0CeZKefugPusKpvZ3bNEOG8tTG+Vdf5gIG7iP\/vcLQQ07BwDC318\/dx+CigUs5nBtkQIuMFBwY6A7H7gUyCccUnYZoYJwgEyEl1ZtZLN5aaWOJJIk7VlosjkjkH5ZsrKSrlcSqUyTZwfQL4xAE17vixlJcLVUrEhzvWIzfFjsvDyttLVotJstevO5EMi1WUh\/oYenWcj8aLWFMmnYot1DMSHz7Z2Bq0zQcR8gQC9XCmCpiCKH2rbD0ofOk\/7tanQcDz8f7Q\/wptQ7vYt3v7jC0cQYDl3ZaGLEObh8BAAD\/\/5zUmdY="}
00932{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":200,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":21,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1657872952792575,"flow_src_last_pkt_time":1657872952792995,"flow_dst_last_pkt_time":1657872952792605,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":281,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":281,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1657872952792995,"l3_proto":"ip4","src_ip":"192.168.7.16","dst_ip":"192.168.7.17","src_port":52901,"dst_port":10051,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"Zabbix","proto_id":"248","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00543{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":201,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":5,"flow_src_last_pkt_time":1657872952792995,"flow_dst_last_pkt_time":1657872952793009,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1657872952793009,"pkt":"AAwpXdTzAAwphPY8CABFAAA0AHVAAEAGqt3AqAcRwKgHECdDzqWyONx8dEp1poAQAfvcfAAAAQEICpqh\/gfVxivV"}
00776{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":207,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":22,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1657872958792640,"flow_src_last_pkt_time":1657872958792640,"flow_dst_last_pkt_time":1657872958792640,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1657872958792640,"l3_proto":"ip4","src_ip":"192.168.7.16","dst_ip":"192.168.7.17","src_port":48017,"dst_port":10051,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00554{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":207,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":1,"flow_src_last_pkt_time":1657872958792640,"flow_dst_last_pkt_time":1657872958792640,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1657872958792640,"pkt":"AAwphPY8AAwpXdTzCABFAAA8ZUVAAEAGRgXAqAcQwKgHEbuRJ0OG8OfRAAAAAKAC+vBS+gAAAgQFtAQCCArVxkNFAAAAAAEDAwc="}
00555{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":208,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":2,"flow_src_last_pkt_time":1657872958792640,"flow_dst_last_pkt_time":1657872958792670,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1657872958792670,"pkt":"AAwpXdTzAAwphPY8CABFAAA8AABAAEAGq0rAqAcRwKgHECdDu5Ho2mZ8hvDn0qAS\/ohP4gAAAgQFtAQCCAqaohV21cZDRQEDAwc="}
00542{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":209,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":3,"flow_src_last_pkt_time":1657872958792769,"flow_dst_last_pkt_time":1657872958792670,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1657872958792769,"pkt":"AAwphPY8AAwpXdTzCABFAAA0ZUZAAEAGRgzAqAcQwKgHEbuRJ0OG8OfS6NpmfYAQAfZ7QAAAAQEICtXGQ0WaohV2"}
00977{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":210,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":4,"flow_src_last_pkt_time":1657872958793339,"flow_dst_last_pkt_time":1657872958792670,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":382,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":382,"pkt_l4_len":348,"thread_ts_usec":1657872958793339,"pkt":"AAwphPY8AAwpXdTzCABFAAFwZUdAAEAGRM\/AqAcQwKgHEbuRJ0OG8OfS6NpmfYAYAfaDGQAAAQEICtXGQ0WaohV2WkJYRAMvAQAA3AIAAHicfNLBjtQwDAbgV0E+h5Ht2I7TRwFxSNsAFUNHbLsrpNW8O9qlaidS4ZScPv2\/7Vd4qr+e67JCB+VbndcPY1kLBHh\/us+vMI3QZQwwrfXn2z8myTHAS7k+V+iAUEyQWdkhwHC9DT+gI9PkibPGAPMCnSG5p3vYNGq0KIfGqEmVPPEJJhumFkl2jNtoDxiJoWY2wX9jhNEk8a7FVtNDU8Ikkl3tRNNNExcy3zVpiz5oOV+yEeX\/YQkN+YimLWbN1DzqW9cTzbapcYxiO2ZtzweMCD0T4tk6N8sjux8bSG0wP6woeFbQ\/zIanRPevwRY6rJMtxk6SIX6oug9ooj0Yy1qowyR8teh7zlCgO+392v9VPp++m0X\/jhcpzqvEOClPm2MXRjufwIAAP\/\/Zc7B0Q=="}
00932{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":210,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":22,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1657872958792640,"flow_src_last_pkt_time":1657872958793339,"flow_dst_last_pkt_time":1657872958792670,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":316,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":316,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1657872958793339,"l3_proto":"ip4","src_ip":"192.168.7.16","dst_ip":"192.168.7.17","src_port":48017,"dst_port":10051,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"Zabbix","proto_id":"248","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00543{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":211,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":5,"flow_src_last_pkt_time":1657872958793339,"flow_dst_last_pkt_time":1657872958793354,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1657872958793354,"pkt":"AAwpXdTzAAwphPY8CABFAAA0vxZAAEAG7DvAqAcRwKgHECdDu5Ho2mZ9hvDpDoAQAft5\/wAAAQEICpqiFXfVxkNF"}
00971{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":217,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":5,"flow_state":"finished","flow_src_packets_processed":5,"flow_dst_packets_processed":5,"flow_first_seen":1657872837792827,"flow_src_last_pkt_time":1657872837794574,"flow_dst_last_pkt_time":1657872837794583,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":319,"flow_dst_max_l4_payload_len":98,"flow_src_tot_l4_payload_len":319,"flow_dst_tot_l4_payload_len":98,"midstream":0,"thread_ts_usec":1657872958793824,"l3_proto":"ip4","src_ip":"192.168.7.16","dst_ip":"192.168.7.17","src_port":58079,"dst_port":10051,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"Zabbix","proto_id":"248","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00971{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":217,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":4,"flow_state":"finished","flow_src_packets_processed":6,"flow_dst_packets_processed":5,"flow_first_seen":1657872831792753,"flow_src_last_pkt_time":1657872831794189,"flow_dst_last_pkt_time":1657872831794139,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":257,"flow_dst_max_l4_payload_len":98,"flow_src_tot_l4_payload_len":257,"flow_dst_tot_l4_payload_len":98,"midstream":0,"thread_ts_usec":1657872958793824,"l3_proto":"ip4","src_ip":"192.168.7.16","dst_ip":"192.168.7.17","src_port":37781,"dst_port":10051,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"Zabbix","proto_id":"248","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00776{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":217,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":23,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1657872964792521,"flow_src_last_pkt_time":1657872964792521,"flow_dst_last_pkt_time":1657872964792521,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1657872964792521,"l3_proto":"ip4","src_ip":"192.168.7.16","dst_ip":"192.168.7.17","src_port":39595,"dst_port":10051,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00554{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":217,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_src_last_pkt_time":1657872964792521,"flow_dst_last_pkt_time":1657872964792521,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1657872964792521,"pkt":"AAwphPY8AAwpXdTzCABFAAA8k+9AAEAGF1vAqAcQwKgHEZqrJ0MwDBwrAAAAAKAC+vB++wAAAgQFtAQCCArVxlq1AAAAAAEDAwc="}
00555{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":218,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":2,"flow_src_last_pkt_time":1657872964792521,"flow_dst_last_pkt_time":1657872964792556,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1657872964792556,"pkt":"AAwpXdTzAAwphPY8CABFAAA8AABAAEAGq0rAqAcRwKgHECdDmqvJ0atgMAwcLKAS\/og+mAAAAgQFtAQCCAqaoizm1cZatQEDAwc="}
00543{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":219,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":3,"flow_src_last_pkt_time":1657872964792625,"flow_dst_last_pkt_time":1657872964792556,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1657872964792625,"pkt":"AAwphPY8AAwpXdTzCABFAAA0k\/BAAEAGF2LAqAcQwKgHEZqrJ0MwDBwsydGrYYAQAfZp9gAAAQEICtXGWrWaoizm"}
00878{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":220,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":4,"flow_src_last_pkt_time":1657872964793883,"flow_dst_last_pkt_time":1657872964792556,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":309,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":309,"pkt_l4_len":275,"thread_ts_usec":1657872964793883,"pkt":"AAwphPY8AAwpXdTzCABFAAEnk\/FAAEAGFm7AqAcQwKgHEZqrJ0MwDBwsydGrYYAYAfYL3QAAAQEICtXGWraaoizmWkJYRAPmAAAAowEAAHicbNDRTrQwEAXgV\/kz1\/3JdKadMn0UjRctVCUixIXdmGx4d8OKQeJezdycLyfnCqfycS7TDBHSSxnmf22aExi4nfh4ha6FqLWBbi7v68\/BsRq4pP5cIIIFA00\/Nm8QrfhQB1KvBoYJosVahXgxG6IHxNkdcZ41CIr7i4n9xrxjsfJjWcQjRjvmtQpM6PgORhsWapZfmD1ivGNBEAlV6Q7GG6ZeyS9PBqYyTd04rLFkc\/JYZ0TnXG5L8tK6hq0+NznTWu11vI3+kHLuPqWi\/03flWEGA5dy2hipCJavAAAA\/\/+aH3IE"}
00932{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":220,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":23,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1657872964792521,"flow_src_last_pkt_time":1657872964793883,"flow_dst_last_pkt_time":1657872964792556,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":243,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":243,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1657872964793883,"l3_proto":"ip4","src_ip":"192.168.7.16","dst_ip":"192.168.7.17","src_port":39595,"dst_port":10051,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"Zabbix","proto_id":"248","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00543{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":221,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":5,"flow_src_last_pkt_time":1657872964793883,"flow_dst_last_pkt_time":1657872964793897,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1657872964793897,"pkt":"AAwpXdTzAAwphPY8CABFAAA0kS5AAEAGGiTAqAcRwKgHECdDmqvJ0athMAwdH4AQAfxo\/AAAAQEICpqiLOfVxlq2"}
00971{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":227,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":6,"flow_state":"finished","flow_src_packets_processed":5,"flow_dst_packets_processed":5,"flow_first_seen":1657872843792650,"flow_src_last_pkt_time":1657872843793960,"flow_dst_last_pkt_time":1657872843793967,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":256,"flow_dst_max_l4_payload_len":98,"flow_src_tot_l4_payload_len":256,"flow_dst_tot_l4_payload_len":98,"midstream":0,"thread_ts_usec":1657872964794314,"l3_proto":"ip4","src_ip":"192.168.7.16","dst_ip":"192.168.7.17","src_port":33661,"dst_port":10051,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"Zabbix","proto_id":"248","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00776{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":227,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":24,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1657872986792468,"flow_src_last_pkt_time":1657872986792468,"flow_dst_last_pkt_time":1657872986792468,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1657872986792468,"l3_proto":"ip4","src_ip":"192.168.7.16","dst_ip":"192.168.7.17","src_port":36763,"dst_port":10051,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
00554{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":227,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_src_last_pkt_time":1657872986792468,"flow_dst_last_pkt_time":1657872986792468,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1657872986792468,"pkt":"AAwphPY8AAwpXdTzCABFAAA8HIpAAEAGjsDAqAcQwKgHEY+bJ0NtIvI9AAAAAKAC+vAg8gAAAgQFtAQCCArVxrClAAAAAAEDAwc="}
00555{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":228,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":2,"flow_src_last_pkt_time":1657872986792468,"flow_dst_last_pkt_time":1657872986792497,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1657872986792497,"pkt":"AAwpXdTzAAwphPY8CABFAAA8AABAAEAGq0rAqAcRwKgHECdDj5te3hoCbSLyPqAS\/oiG8AAAAgQFtAQCCAqaooLW1cawpQEDAwc="}
00542{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":229,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":3,"flow_src_last_pkt_time":1657872986792564,"flow_dst_last_pkt_time":1657872986792497,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1657872986792564,"pkt":"AAwphPY8AAwpXdTzCABFAAA0HItAAEAGjsfAqAcQwKgHEY+bJ0NtIvI+Xt4aA4AQAfayTgAAAQEICtXGsKWaooLW"}
00786{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":230,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":4,"flow_src_last_pkt_time":1657872986792889,"flow_dst_last_pkt_time":1657872986792497,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":241,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":241,"pkt_l4_len":207,"thread_ts_usec":1657872986792889,"pkt":"AAwphPY8AAwpXdTzCABFAADjHIxAAEAGjhfAqAcQwKgHEY+bJ0NtIvI+Xt4aA4AYAfb+twAAAQEICtXGsKWaooLWWkJYRAOiAAAAvgAAAHicLI7NSgMxFEZfRb71tSSZ\/DWPori4Sa4aHDPYpEUo8+7i0NXhbA7njov8XGVMJPCH9PlUeTIIB9LrHa0iaWUIbcr3vyzBKk+48XoVJGgQyrqVLyTtXYjBnKMn9IGknY3Rmf2NMGSMtnUkBNaZnYpZKWttrsLOV1sWfX4vOZsFhM\/t+HnhnNuvP5nnsjbpE4SbXB4ZfzLY\/wIAAP\/\/zj43ZA=="}
00932{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":230,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":24,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1657872986792468,"flow_src_last_pkt_time":1657872986792889,"flow_dst_last_pkt_time":1657872986792497,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":175,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":175,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1657872986792889,"l3_proto":"ip4","src_ip":"192.168.7.16","dst_ip":"192.168.7.17","src_port":36763,"dst_port":10051,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"Zabbix","proto_id":"248","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00542{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":231,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":5,"flow_src_last_pkt_time":1657872986792889,"flow_dst_last_pkt_time":1657872986792903,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1657872986792903,"pkt":"AAwpXdTzAAwphPY8CABFAAA0vPxAAEAG7lXAqAcRwKgHECdDj5te3hoDbSLy7YAQAfyxmgAAAQEICpqigtbVxrCl"}
00971{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":236,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":8,"flow_state":"finished","flow_src_packets_processed":5,"flow_dst_packets_processed":5,"flow_first_seen":1657872876792584,"flow_src_last_pkt_time":1657872876793352,"flow_dst_last_pkt_time":1657872876793359,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":249,"flow_dst_max_l4_payload_len":98,"flow_src_tot_l4_payload_len":249,"flow_dst_tot_l4_payload_len":98,"midstream":0,"thread_ts_usec":1657872986793226,"l3_proto":"ip4","src_ip":"192.168.7.16","dst_ip":"192.168.7.17","src_port":36755,"dst_port":10051,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"Zabbix","proto_id":"248","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00972{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":236,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":24,"flow_state":"finished","flow_src_packets_processed":5,"flow_dst_packets_processed":5,"flow_first_seen":1657872986792468,"flow_src_last_pkt_time":1657872986793220,"flow_dst_last_pkt_time":1657872986793226,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":175,"flow_dst_max_l4_payload_len":98,"flow_src_tot_l4_payload_len":175,"flow_dst_tot_l4_payload_len":98,"midstream":0,"thread_ts_usec":1657872986793226,"l3_proto":"ip4","src_ip":"192.168.7.16","dst_ip":"192.168.7.17","src_port":36763,"dst_port":10051,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"Zabbix","proto_id":"248","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00972{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":236,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":14,"flow_state":"finished","flow_src_packets_processed":5,"flow_dst_packets_processed":5,"flow_first_seen":1657872903792545,"flow_src_last_pkt_time":1657872903793526,"flow_dst_last_pkt_time":1657872903793533,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":255,"flow_dst_max_l4_payload_len":98,"flow_src_tot_l4_payload_len":255,"flow_dst_tot_l4_payload_len":98,"midstream":0,"thread_ts_usec":1657872986793226,"l3_proto":"ip4","src_ip":"192.168.7.16","dst_ip":"192.168.7.17","src_port":49215,"dst_port":10051,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"Zabbix","proto_id":"248","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00968{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":236,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":10,"flow_state":"finished","flow_src_packets_processed":5,"flow_dst_packets_processed":3,"flow_first_seen":1657872886792642,"flow_src_last_pkt_time":1657872886793202,"flow_dst_last_pkt_time":1657872886793171,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":95,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":95,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1657872986793226,"l3_proto":"ip4","src_ip":"192.168.7.16","dst_ip":"192.168.7.17","src_port":45197,"dst_port":10051,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"Zabbix","proto_id":"248","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00972{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":236,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":17,"flow_state":"finished","flow_src_packets_processed":5,"flow_dst_packets_processed":5,"flow_first_seen":1657872941792573,"flow_src_last_pkt_time":1657872941793953,"flow_dst_last_pkt_time":1657872941793960,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":266,"flow_dst_max_l4_payload_len":98,"flow_src_tot_l4_payload_len":266,"flow_dst_tot_l4_payload_len":98,"midstream":0,"thread_ts_usec":1657872986793226,"l3_proto":"ip4","src_ip":"192.168.7.16","dst_ip":"192.168.7.17","src_port":41309,"dst_port":10051,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"Zabbix","proto_id":"248","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00971{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":236,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":9,"flow_state":"finished","flow_src_packets_processed":5,"flow_dst_packets_processed":5,"flow_first_seen":1657872881792581,"flow_src_last_pkt_time":1657872881793668,"flow_dst_last_pkt_time":1657872881793678,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":279,"flow_dst_max_l4_payload_len":98,"flow_src_tot_l4_payload_len":279,"flow_dst_tot_l4_payload_len":98,"midstream":0,"thread_ts_usec":1657872986793226,"l3_proto":"ip4","src_ip":"192.168.7.16","dst_ip":"192.168.7.17","src_port":43395,"dst_port":10051,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"Zabbix","proto_id":"248","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00972{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":236,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":11,"flow_state":"finished","flow_src_packets_processed":5,"flow_dst_packets_processed":5,"flow_first_seen":1657872886792782,"flow_src_last_pkt_time":1657872886794139,"flow_dst_last_pkt_time":1657872886794145,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":310,"flow_dst_max_l4_payload_len":98,"flow_src_tot_l4_payload_len":310,"flow_dst_tot_l4_payload_len":98,"midstream":0,"thread_ts_usec":1657872986793226,"l3_proto":"ip4","src_ip":"192.168.7.16","dst_ip":"192.168.7.17","src_port":35243,"dst_port":10051,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"Zabbix","proto_id":"248","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00972{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":236,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":15,"flow_state":"finished","flow_src_packets_processed":6,"flow_dst_packets_processed":5,"flow_first_seen":1657872930793502,"flow_src_last_pkt_time":1657872930795972,"flow_dst_last_pkt_time":1657872930795980,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":212,"flow_dst_max_l4_payload_len":98,"flow_src_tot_l4_payload_len":212,"flow_dst_tot_l4_payload_len":98,"midstream":0,"thread_ts_usec":1657872986793226,"l3_proto":"ip4","src_ip":"192.168.7.16","dst_ip":"192.168.7.17","src_port":55759,"dst_port":10051,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"Zabbix","proto_id":"248","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00972{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":236,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":19,"flow_state":"finished","flow_src_packets_processed":5,"flow_dst_packets_processed":5,"flow_first_seen":1657872946792630,"flow_src_last_pkt_time":1657872946793412,"flow_dst_last_pkt_time":1657872946793417,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":311,"flow_dst_max_l4_payload_len":98,"flow_src_tot_l4_payload_len":311,"flow_dst_tot_l4_payload_len":98,"midstream":0,"thread_ts_usec":1657872986793226,"l3_proto":"ip4","src_ip":"192.168.7.16","dst_ip":"192.168.7.17","src_port":43677,"dst_port":10051,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"Zabbix","proto_id":"248","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00972{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":236,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":23,"flow_state":"finished","flow_src_packets_processed":5,"flow_dst_packets_processed":5,"flow_first_seen":1657872964792521,"flow_src_last_pkt_time":1657872964794307,"flow_dst_last_pkt_time":1657872964794314,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":243,"flow_dst_max_l4_payload_len":98,"flow_src_tot_l4_payload_len":243,"flow_dst_tot_l4_payload_len":98,"midstream":0,"thread_ts_usec":1657872986793226,"l3_proto":"ip4","src_ip":"192.168.7.16","dst_ip":"192.168.7.17","src_port":39595,"dst_port":10051,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"Zabbix","proto_id":"248","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00972{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":236,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":13,"flow_state":"finished","flow_src_packets_processed":5,"flow_dst_packets_processed":5,"flow_first_seen":1657872897792597,"flow_src_last_pkt_time":1657872897793446,"flow_dst_last_pkt_time":1657872897793453,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":302,"flow_dst_max_l4_payload_len":97,"flow_src_tot_l4_payload_len":302,"flow_dst_tot_l4_payload_len":97,"midstream":0,"thread_ts_usec":1657872986793226,"l3_proto":"ip4","src_ip":"192.168.7.16","dst_ip":"192.168.7.17","src_port":35627,"dst_port":10051,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"Zabbix","proto_id":"248","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00972{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":236,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":18,"flow_state":"finished","flow_src_packets_processed":5,"flow_dst_packets_processed":5,"flow_first_seen":1657872946792586,"flow_src_last_pkt_time":1657872946796114,"flow_dst_last_pkt_time":1657872946796119,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":91,"flow_dst_max_l4_payload_len":745,"flow_src_tot_l4_payload_len":91,"flow_dst_tot_l4_payload_len":745,"midstream":0,"thread_ts_usec":1657872986793226,"l3_proto":"ip4","src_ip":"192.168.7.16","dst_ip":"192.168.7.17","src_port":60217,"dst_port":10051,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"Zabbix","proto_id":"248","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00972{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":236,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":22,"flow_state":"finished","flow_src_packets_processed":5,"flow_dst_packets_processed":5,"flow_first_seen":1657872958792640,"flow_src_last_pkt_time":1657872958793816,"flow_dst_last_pkt_time":1657872958793824,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":316,"flow_dst_max_l4_payload_len":97,"flow_src_tot_l4_payload_len":316,"flow_dst_tot_l4_payload_len":97,"midstream":0,"thread_ts_usec":1657872986793226,"l3_proto":"ip4","src_ip":"192.168.7.16","dst_ip":"192.168.7.17","src_port":48017,"dst_port":10051,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"Zabbix","proto_id":"248","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00972{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":236,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":16,"flow_state":"finished","flow_src_packets_processed":5,"flow_dst_packets_processed":5,"flow_first_seen":1657872936792500,"flow_src_last_pkt_time":1657872936793305,"flow_dst_last_pkt_time":1657872936793312,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":331,"flow_dst_max_l4_payload_len":98,"flow_src_tot_l4_payload_len":331,"flow_dst_tot_l4_payload_len":98,"midstream":0,"thread_ts_usec":1657872986793226,"l3_proto":"ip4","src_ip":"192.168.7.16","dst_ip":"192.168.7.17","src_port":50639,"dst_port":10051,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"Zabbix","proto_id":"248","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00968{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":236,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":20,"flow_state":"finished","flow_src_packets_processed":5,"flow_dst_packets_processed":3,"flow_first_seen":1657872947793311,"flow_src_last_pkt_time":1657872947794590,"flow_dst_last_pkt_time":1657872947794546,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":95,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":95,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1657872986793226,"l3_proto":"ip4","src_ip":"192.168.7.16","dst_ip":"192.168.7.17","src_port":48677,"dst_port":10051,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"Zabbix","proto_id":"248","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00971{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":236,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":7,"flow_state":"finished","flow_src_packets_processed":5,"flow_dst_packets_processed":5,"flow_first_seen":1657872870792611,"flow_src_last_pkt_time":1657872870794489,"flow_dst_last_pkt_time":1657872870794496,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":213,"flow_dst_max_l4_payload_len":97,"flow_src_tot_l4_payload_len":213,"flow_dst_tot_l4_payload_len":97,"midstream":0,"thread_ts_usec":1657872986793226,"l3_proto":"ip4","src_ip":"192.168.7.16","dst_ip":"192.168.7.17","src_port":40553,"dst_port":10051,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"Zabbix","proto_id":"248","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00972{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":236,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":21,"flow_state":"finished","flow_src_packets_processed":5,"flow_dst_packets_processed":5,"flow_first_seen":1657872952792575,"flow_src_last_pkt_time":1657872952793338,"flow_dst_last_pkt_time":1657872952793345,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":281,"flow_dst_max_l4_payload_len":97,"flow_src_tot_l4_payload_len":281,"flow_dst_tot_l4_payload_len":97,"midstream":0,"thread_ts_usec":1657872986793226,"l3_proto":"ip4","src_ip":"192.168.7.16","dst_ip":"192.168.7.17","src_port":52901,"dst_port":10051,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"Zabbix","proto_id":"248","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00972{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":236,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","flow_id":12,"flow_state":"finished","flow_src_packets_processed":5,"flow_dst_packets_processed":5,"flow_first_seen":1657872892792572,"flow_src_last_pkt_time":1657872892794079,"flow_dst_last_pkt_time":1657872892794088,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":281,"flow_dst_max_l4_payload_len":97,"flow_src_tot_l4_payload_len":281,"flow_dst_tot_l4_payload_len":97,"midstream":0,"thread_ts_usec":1657872986793226,"l3_proto":"ip4","src_ip":"192.168.7.16","dst_ip":"192.168.7.17","src_port":36623,"dst_port":10051,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"Zabbix","proto_id":"248","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00802{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":236,"source":"cfgs\/default\/pcap\/zabbix.pcap","alias":"nDPId-test","version":"1.7.0","ndpi_version":"4.11.0-4834-92507c0","packets-captured":236,"packets-processed":236,"pfring_active":false,"pfring_recv":0,"pfring_drop":0,"pfring_shunt":0,"total-skipped-flows":0,"total-l4-payload-len":8611,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":24,"total-detection-updates":0,"total-updates":0,"current-active-flows":0,"total-active-flows":24,"total-idle-flows":24,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"global-alloc-count":0,"global-free-count":0,"global-alloc-bytes":0,"global-free-bytes":0,"total-events-serialized":196,"global_ts_usec":1657872986793226}
~~~~~~~~~~~~~~~~~~~~ SUMMARY ~~~~~~~~~~~~~~~~~~~~
~~ packets captured/processed: 236/236
~~ skipped flows.............: 0
~~ total layer4 data length..: 8611 bytes
~~ total detected protocols..: 24
~~ total active/idle flows...: 24/24
~~ total timeout flows.......: 0
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~ total memory allocated....: 6701203 bytes
~~ total memory freed........: 6701203 bytes
~~ total allocations/frees...: 114509/114509
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~ json message min len.......: 544 chars
~~ json message max len.......: 1004 chars
~~ json message avg len.......: 774 chars
|