1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
|
00499{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"dtls_mid_sessions.pcapng","alias":"nDPId-test","max-flows-per-thread":2048,"max-idle-flows-per-thread":64,"reader-thread-count":1,"flow-scan-interval":10000000,"generic-max-idle-time":600000000,"icmp-max-idle-time":120000000,"udp-max-idle-time":180000000,"tcp-max-idle-time":3265032704,"max-packets-per-flow-to-send":3,"max-packets-per-flow-to-process":32,"max-packets-per-flow-to-analyse":32,"global_ts_usec":0}
00562{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":1,"source":"dtls_mid_sessions.pcapng","alias":"nDPId-test","packets-captured":1,"packets-processed":0,"total-skipped-flows":0,"total-l4-payload-len":0,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":0,"total-detection-updates":0,"total-updates":0,"current-active-flows":0,"total-active-flows":0,"total-idle-flows":0,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":2,"global_ts_usec":1644251732783352}
00769{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"dtls_mid_sessions.pcapng","alias":"nDPId-test","flow_id":1,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1644251732783352,"flow_src_last_pkt_time":1644251732783352,"flow_dst_last_pkt_time":1644251732783352,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":93,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":93,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":93,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1644251732783352,"l3_proto":"ip4","src_ip":"53.214.238.65","dst_ip":"199.186.151.155","src_port":53558,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3}
00634{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"dtls_mid_sessions.pcapng","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_src_last_pkt_time":1644251732783352,"flow_dst_last_pkt_time":1644251732783352,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":135,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":135,"pkt_l4_len":101,"thread_ts_usec":1644251732783352,"pkt":"AAAAAAAAAAUAH77DCABFAAB5TfQAAHkRcBI11u5Bx7qXm9E2AbsAZQC2FwEAAAEAAAAA1BUAUFbLHE7KkMRUAMa+BCcg\/DTD4cWbj4CR\/ou6\/eEj1qcEoJjrsJeHH7KwZMNGTwAG1rS\/\/iatJdFhJzn0FDJ0hSfdwvHN8cKVzNzbvFPCN5Gy"}
00864{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"dtls_mid_sessions.pcapng","alias":"nDPId-test","flow_id":1,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1644251732783352,"flow_src_last_pkt_time":1644251732783352,"flow_dst_last_pkt_time":1644251732783352,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":93,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":93,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":93,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1644251732783352,"l3_proto":"ip4","src_ip":"53.214.238.65","dst_ip":"199.186.151.155","src_port":53558,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DTLS","proto_id":"30","encrypted":1,"breed":"Safe","category_id":5,"category":"Web"}}
00771{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2,"source":"dtls_mid_sessions.pcapng","alias":"nDPId-test","flow_id":2,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1644251732795618,"flow_src_last_pkt_time":1644251732795618,"flow_dst_last_pkt_time":1644251732795618,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":378,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":378,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":378,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1644251732795618,"l3_proto":"ip4","src_ip":"135.215.56.198","dst_ip":"124.73.140.89","src_port":443,"dst_port":61189,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3}
01016{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"dtls_mid_sessions.pcapng","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_src_last_pkt_time":1644251732795618,"flow_dst_last_pkt_time":1644251732795618,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":420,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":420,"pkt_l4_len":386,"thread_ts_usec":1644251732795618,"pkt":"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"}
00866{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":2,"source":"dtls_mid_sessions.pcapng","alias":"nDPId-test","flow_id":2,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1644251732795618,"flow_src_last_pkt_time":1644251732795618,"flow_dst_last_pkt_time":1644251732795618,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":378,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":378,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":378,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1644251732795618,"l3_proto":"ip4","src_ip":"135.215.56.198","dst_ip":"124.73.140.89","src_port":443,"dst_port":61189,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DTLS","proto_id":"30","encrypted":1,"breed":"Safe","category_id":5,"category":"Web"}}
00776{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3,"source":"dtls_mid_sessions.pcapng","alias":"nDPId-test","flow_id":3,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1644251732819831,"flow_src_last_pkt_time":1644251732819831,"flow_dst_last_pkt_time":1644251732819831,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1243,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1243,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1243,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1644251732819831,"l3_proto":"ip4","src_ip":"170.151.105.215","dst_ip":"121.152.255.238","src_port":443,"dst_port":8460,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3}
02195{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"dtls_mid_sessions.pcapng","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_src_last_pkt_time":1644251732819831,"flow_dst_last_pkt_time":1644251732819831,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1285,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1285,"pkt_l4_len":1251,"thread_ts_usec":1644251732819831,"pkt":"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"}
00871{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":3,"source":"dtls_mid_sessions.pcapng","alias":"nDPId-test","flow_id":3,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1644251732819831,"flow_src_last_pkt_time":1644251732819831,"flow_dst_last_pkt_time":1644251732819831,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1243,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1243,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1243,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1644251732819831,"l3_proto":"ip4","src_ip":"170.151.105.215","dst_ip":"121.152.255.238","src_port":443,"dst_port":8460,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DTLS","proto_id":"30","encrypted":1,"breed":"Safe","category_id":5,"category":"Web"}}
00784{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"dtls_mid_sessions.pcapng","alias":"nDPId-test","flow_id":2,"flow_packet_id":2,"flow_src_last_pkt_time":1644251732824440,"flow_dst_last_pkt_time":1644251732795618,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":248,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":248,"pkt_l4_len":214,"thread_ts_usec":1644251732824440,"pkt":"AAAAAAAAAA0A4CzfCABFAADqm5gAAPMRYiqH1zjGfEmMWQG77wUA1gTeF\/79AAEAAAAMHEgAwbJE\/pYaT4jqSUPNYrxJL8Codo+NI1ON15wpo0UXGwutN5NqnUCtT4dyFWAwgXODy+FvALQSrXC5ZUWgnBdE5XT3NYf0YexgHZ5a2Idl8QW41Rj7Lf2MjzpVZcdBplQYlFQw8nR6sXhVOTnwn+aZxjvNjegLOT\/kssRbnCbEZBdFElSPioELBFUc51QWw1KkVU7sCAsrnomfJlGQXKgbAgDCxy96WQjMbwdI0DC9j1PjopVLRsWpCdrq61oMc+AXpbs="}
01050{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"dtls_mid_sessions.pcapng","alias":"nDPId-test","flow_id":2,"flow_packet_id":3,"flow_src_last_pkt_time":1644251732837695,"flow_dst_last_pkt_time":1644251732795618,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":444,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":444,"pkt_l4_len":410,"thread_ts_usec":1644251732837695,"pkt":"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"}
00776{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8,"source":"dtls_mid_sessions.pcapng","alias":"nDPId-test","flow_id":4,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1644251732859305,"flow_src_last_pkt_time":1644251732859305,"flow_dst_last_pkt_time":1644251732859305,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1453,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1453,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1453,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1644251732859305,"l3_proto":"ip4","src_ip":"170.151.105.215","dst_ip":"72.102.179.218","src_port":443,"dst_port":62811,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3}
02482{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"dtls_mid_sessions.pcapng","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_src_last_pkt_time":1644251732859305,"flow_dst_last_pkt_time":1644251732859305,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1495,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1495,"pkt_l4_len":1461,"thread_ts_usec":1644251732859305,"pkt":"AAAAAAAAAAwAL85GCABFAAXJjqAAAD8R1tSql2nXSGaz2gG79VsFtfY\/F\/79AAEAAAAB\/fEFoF3h0hdGzu1TA0QyQd7pCFDSC3afBB7oBt63isvB1x36GJE6p5uYZLqeMCF8Kq0L9np57tsKxCxlUs+HEPNPgjqe\/5xfHnAfj07cLfClN5VTtTUB5qb\/Uzgw\/vvP21xao12ZqooD5yTV1LTW6vA7if2PeOLOISFIxtnk7K2YvqcYKSdlvHG6yR+nEkUYbU6TN2Si0w3F\/bXRIVZn\/utSvUrMMpJQJGoyc7+0D7gvTiD9elmM37eoGxMYN55aok\/Rqv5EzI9hLqHql4oyLrfR42TDTlKAkRrc8o4qI6IJa2LOra10lxuvJr\/k1kRymQi6OxdIBknFY9dxgj5ObzX8O8pZOayh3UP4Vz2Jf9AKuKYkDQt849LLzHcrz0KblbvSBh2+N16WkmUh4djf9UB8Gz1JDPiAayjCAJw5hmhil7+YLZ296spISGAB5r+u2tjzsifTOVhY7bN2UxxQL0fIlvoaWY\/y9\/ZCMN\/+nJC7y\/XaroqRUKCqLjMYIujedrY1z0fJdM0JfAxaURRtxuDg6RFwNJnO9cLRQvh2RBzs\/gEowITgrTOESBsB55ioZA+Tux2j7WJNEhcOrgqTxI1bbJVWgffituxrnfBek0e9qluQHI\/txOueYvkNqy+HmJuv6W9AqBW3FLdr3Vvac5XD4DcALe3OScCVumc+FhPk75xVgGSkCoI4G0TrOiDufPdLg8z2pt3BUcoLG3IOtO+HLK7pOSMmXHAtxLVvAmBgQRWFG2JQmfDm8onH1OYL8Iltb4x64j6qzL6hMWdqlw+a\/02Thb3V8PyMIouKtfvvmtMlyz08F\/FoFzYRF\/35lnpkyu7ILHtXf1gpl0BZFCjkiCrF80wOmxr34kk1Gh1nYmpvmR2c1gELo7egBTM4KmQu9zFJfddi1h5O5opVp2pZuvj7z0f+FQazcpP4K9W13C5doxhwqXYYRZUtt4pqSg7VuALKfHsI\/K4Nx5Pzjd8Iq83sBzE+Sij3K\/EOkb5S9OiJ5d4w\/8wChDtFtsZpbRqkgwtGZ4TnrZnmSWbnnYYmGLqkMVmQuWU3rujzIrOQB3K0aG7ROps9lH7HqkjO+xYl5kdVzAGlgBs4BUa5byQ9qr7+gASs2al+BeQGeNCk2lpX2dqMAWnlf9SFESF2PJ\/+D6wtsuLQNHWW98GDiQpZzl+TQEPv6M1IetlQnSEOrzTPvlVQ0qow\/isWdiWwy8jpT8kNltVS+TkyWuH33iJfs3osf1kc5j7VlJaSBFpBjStPiqCDgKjsbq+6tvZLCOrEhWktxUlyr4aS9FORJj6ifTHGiv9WaymbCyoyXZJIFaxmPOAb7c5uS\/0cFN3bjuM3H7QT7GWZlj6gyPR9zg4bGxlM97TWOC4d3ARcYsEBlv8VHv18CdgJohP47cPxOB9a+opIrMkOrhFGrrK44v+vTKioNn1c8+f9NCG8Fbxr5tdxL7fxVfgjuqbXOIBakcJUzdLWRNsAzRKgrPtIANoM9cxCLHkQD90heWs8wEJNR32F2du7L9Qj1wLSY255H+1dRBEN8sdZF3daSWc6HVfsiBsrKqYjNzYxgRW9EdxQnKRaUyEHb86zwYV+sCsCdtwBsST+orAadvLP+wODDjxGrp9hm5xmQsK0\/f+1q95HNtla\/h6LX2PUKlV9s\/xr32qoZMz5UYCZspfSbz\/g8qULof8RlfM8mCMFFROIBVYtfH3DfZvErVwl5dv6Ws2OhC7zPqb2i5xtt3COdOQq\/9wpconfg6RsNV4FfxrLV9+c1vSJ4BpssIk13lXRoHchuE7VyZo0yumolNBEM51qkcDI6ZUDyZOm4xRNlKZ4zHbJKFbfP6fXjB+0\/\/eyWSigKAUOj3m6IU\/DBl7etveDbav3int0J2aVp9BTKqRhvW7r4DdpbGP0lgAopZGSAdRjWrFa\/w=="}
00871{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":8,"source":"dtls_mid_sessions.pcapng","alias":"nDPId-test","flow_id":4,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1644251732859305,"flow_src_last_pkt_time":1644251732859305,"flow_dst_last_pkt_time":1644251732859305,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1453,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1453,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1453,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1644251732859305,"l3_proto":"ip4","src_ip":"170.151.105.215","dst_ip":"72.102.179.218","src_port":443,"dst_port":62811,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DTLS","proto_id":"30","encrypted":1,"breed":"Safe","category_id":5,"category":"Web"}}
00634{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"dtls_mid_sessions.pcapng","alias":"nDPId-test","flow_id":3,"flow_packet_id":2,"flow_src_last_pkt_time":1644251732819831,"flow_dst_last_pkt_time":1644251732895363,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":135,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":135,"pkt_l4_len":101,"thread_ts_usec":1644251732895363,"pkt":"AAAAAAAAAA0A4CzfCABFAAB5eiMAAHURPVt5mP\/uqpdp1yEMAbsAZRo2F\/79AAEAAAAMhRMAUKWzGmfeg9vDd7\/B3T+kirAR7zq6Tf8oB5f1Qe4Uo6LIUlneZEoesMiQtJMzhmqS3RqJKvvRB2aCGmdCfvmL62icrVJNR6\/VZ+07XbOviqwQ"}
00849{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"dtls_mid_sessions.pcapng","alias":"nDPId-test","flow_id":4,"flow_packet_id":2,"flow_src_last_pkt_time":1644251732859305,"flow_dst_last_pkt_time":1644251732899743,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":293,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":293,"pkt_l4_len":259,"thread_ts_usec":1644251732899743,"pkt":"AAAAAAAAAA0A4CzfCABFAAEXWbEAAHsR1HVIZrPaqpdp1\/VbAbsBA4vCF\/79AAEAAAABzVAA7sDAOt7ZNYadwFH6SHccSVCdGOeDS5VAVNAWpaw7BhQgb+1bCi82Zlyb4VWcAVH\/n1elQ7THJB3xDUKy4xtskzMRGshyDl5w6kBiV+\/uymBxK+YhMTQUTq1HeBxB7zUOp+X+xuu7HM616iGjTAfQnnvrYWz\/HmxBxjmowsnmxGXDMK7PSSumdsoeyWUI738iBD4CXuuT0D1mQ3mFUW6\/Pk13ysfBe5VqGzIqxDG7bUTMvbDlBM25yv2N52iEk51XTxj0yy9gjACGD6yvi0albjjmw6qqv2ayTvP7YsK8J5EjIW\/WNb6g+p99LqUDPkA="}
00636{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"dtls_mid_sessions.pcapng","alias":"nDPId-test","flow_id":3,"flow_packet_id":3,"flow_src_last_pkt_time":1644251732904039,"flow_dst_last_pkt_time":1644251732895363,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":135,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":135,"pkt_l4_len":101,"thread_ts_usec":1644251732904039,"pkt":"AAAAAAAAAAwAL85GCABFAAB5j\/YAAD8RXYiql2nXeZj\/7gG7IQwAZQo0F\/79AAEAAAAOADoAUJBZfrcT0WI3vKOvm48zQRKNwV9xk31D25d9i4LGPOZLsa\/MxEM\/iT8j5X2NeXzZcl7g81+pOvAYTMQ6CMg7uw6mEidESPz\/p+RCZ0ysmpq9"}
00703{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"dtls_mid_sessions.pcapng","alias":"nDPId-test","flow_id":4,"flow_packet_id":3,"flow_src_last_pkt_time":1644251733036484,"flow_dst_last_pkt_time":1644251732899743,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":186,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":186,"pkt_l4_len":152,"thread_ts_usec":1644251733036484,"pkt":"AAAAAAAAAAwAL85GCABFAACskrIAAD8R19+ql2nXSGaz2gG79VsAmK\/7F\/79AAEAAAAB\/fQAg13h0hdGzu1WNO2vU\/IbgHdYF0RFMS34pXUQgZKyQWeJANVsXGZq+9MFiIsKjl3D7HT8luq5HJMe4S4Zb3zMPZ6zO4gT5DOoVt7Is6ObHtcjGB0kUDwHIjrh3nhApNylKNWwtoR5rdprjwF7EWz\/b9mEcMLFaMAE3VniOUA3LqrIzirj"}
00908{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":91,"source":"dtls_mid_sessions.pcapng","alias":"nDPId-test","flow_id":2,"flow_state":"finished","flow_src_packets_processed":30,"flow_dst_packets_processed":0,"flow_first_seen":1644251732795618,"flow_src_last_pkt_time":1644251733063123,"flow_dst_last_pkt_time":1644251732795618,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":78,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1339,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":7981,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1644251736135259,"l3_proto":"ip4","src_ip":"135.215.56.198","dst_ip":"124.73.140.89","src_port":443,"dst_port":61189,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"DTLS","proto_id":"30","encrypted":1,"breed":"Safe","category_id":5,"category":"Web"}}
00917{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":91,"source":"dtls_mid_sessions.pcapng","alias":"nDPId-test","flow_id":3,"flow_state":"finished","flow_src_packets_processed":17,"flow_dst_packets_processed":13,"flow_first_seen":1644251732819831,"flow_src_last_pkt_time":1644251733371724,"flow_dst_last_pkt_time":1644251733286733,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":93,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1453,"flow_dst_max_l4_payload_len":310,"flow_src_tot_l4_payload_len":15606,"flow_dst_tot_l4_payload_len":1540,"midstream":0,"thread_ts_usec":1644251736135259,"l3_proto":"ip4","src_ip":"170.151.105.215","dst_ip":"121.152.255.238","src_port":443,"dst_port":8460,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"DTLS","proto_id":"30","encrypted":1,"breed":"Safe","category_id":5,"category":"Web"}}
00904{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":91,"source":"dtls_mid_sessions.pcapng","alias":"nDPId-test","flow_id":1,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1644251732783352,"flow_src_last_pkt_time":1644251732783352,"flow_dst_last_pkt_time":1644251732783352,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":93,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":93,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":93,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1644251736135259,"l3_proto":"ip4","src_ip":"53.214.238.65","dst_ip":"199.186.151.155","src_port":53558,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"DTLS","proto_id":"30","encrypted":1,"breed":"Safe","category_id":5,"category":"Web"}}
00916{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":91,"source":"dtls_mid_sessions.pcapng","alias":"nDPId-test","flow_id":4,"flow_state":"finished","flow_src_packets_processed":13,"flow_dst_packets_processed":17,"flow_first_seen":1644251732859305,"flow_src_last_pkt_time":1644251736135259,"flow_dst_last_pkt_time":1644251736133006,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":93,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1453,"flow_dst_max_l4_payload_len":791,"flow_src_tot_l4_payload_len":5737,"flow_dst_tot_l4_payload_len":3089,"midstream":0,"thread_ts_usec":1644251736135259,"l3_proto":"ip4","src_ip":"170.151.105.215","dst_ip":"72.102.179.218","src_port":443,"dst_port":62811,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"DTLS","proto_id":"30","encrypted":1,"breed":"Safe","category_id":5,"category":"Web"}}
00572{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":91,"source":"dtls_mid_sessions.pcapng","alias":"nDPId-test","packets-captured":91,"packets-processed":91,"total-skipped-flows":0,"total-l4-payload-len":34046,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":4,"total-detection-updates":0,"total-updates":0,"current-active-flows":0,"total-active-flows":4,"total-idle-flows":4,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":25,"global_ts_usec":1644251736135259}
~~~~~~~~~~~~~~~~~~~~ SUMMARY ~~~~~~~~~~~~~~~~~~~~
~~ packets captured/processed: 91/91
~~ skipped flows.............: 0
~~ total layer4 data length..: 34046 bytes
~~ total detected protocols..: 4
~~ total active/idle flows...: 4/4
~~ total timeout flows.......: 0
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~ total memory allocated....: 6043696 bytes
~~ total memory freed........: 6043696 bytes
~~ total allocations/frees...: 121612/121612
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~ json string min len.......: 504 chars
~~ json string max len.......: 2487 chars
~~ json string avg len.......: 1494 chars
|