1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
|
00482{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","max-flows-per-thread":2048,"max-idle-flows-per-thread":64,"tick-resolution":1000,"reader-thread-count":1,"flow-scan-interval":10000000,"generic-max-idle-time":600000000,"icmp-max-idle-time":120000000,"udp-max-idle-time":180000000,"tcp-max-idle-time":3265032704,"max-packets-per-flow-to-send":3,"max-packets-per-flow-to-process":32,"global_ts_usec":0}
00558{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":1,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","packets-captured":1,"packets-processed":0,"total-skipped-flows":0,"total-l4-payload-len":0,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":0,"total-detection-updates":0,"total-updates":0,"current-active-flows":0,"total-active-flows":0,"total-idle-flows":0,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":2,"global_ts_usec":946744635161000}
00766{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":1,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946744635161000,"flow_src_last_pkt_time":946744635161000,"flow_dst_last_pkt_time":946744635161000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":816,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":816,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":816,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946744635161000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.193","src_port":14500,"dst_port":4500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3}
01595{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_src_last_pkt_time":946744635161000,"flow_dst_last_pkt_time":946744635161000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":858,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":858,"pkt_l4_len":824,"thread_ts_usec":946744635161000,"pkt":"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"}
00862{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":1,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946744635161000,"flow_src_last_pkt_time":946744635161000,"flow_dst_last_pkt_time":946744635161000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":816,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":816,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":816,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946744635161000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.193","src_port":14500,"dst_port":4500,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00781{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":2,"flow_src_last_pkt_time":946744635161000,"flow_dst_last_pkt_time":946744635283000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":250,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":250,"pkt_l4_len":216,"thread_ts_usec":946744635283000,"pkt":"YDjgxTWgeJS0JASgCABFAADsdK0AAPcRYZht7bvBwKgCZBGUOKQA2OumAAAAALZO8yExpIlShrq9OQSIaVUuICMgAAAAAQAAAMwkAACwawmreKZrDBcIUTKWFfToFDg6qtDsyKKjgBXTNi4vJaEzwbhJuG171IwN4X7FupdGnYt8Co6xmRVm+RkdtKZ0NJmqeR\/qj\/G34eopZIcEsqB7nVGS9NkMVNQcB92DOLKkbkTpEypbftjCf9PGdG4jAg2e7K5fG1yC3G1wHKmrKsTWscrC+5r6aMrQIgOr0unE2oUc0o+Ct9Zb0Dqhj+nQky39U42OTCpKJsuUJg=="}
00653{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":3,"flow_src_last_pkt_time":946744635838000,"flow_dst_last_pkt_time":946744635283000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":154,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":154,"pkt_l4_len":120,"thread_ts_usec":946744635838000,"pkt":"eJS0JASgYDjgxTWgCABFAACMRLVAAD8RCfHAqAJkbe27wTikEZQAeEVsAAAAALZO8yExpIlShrq9OQSIaVUuICMIAAAAAgAAAGwwAABQsvg7Xs9r\/Ox3tq4oeDG2fCdsQnjxZd10Tk3TjbPgn+1YkpKifKhrE04HnKNVi6NO3zCXbR\/3wORB+UprbFsUQK+XhsAwdIy8g2ma9g=="}
00766{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":16,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":2,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946744638499000,"flow_src_last_pkt_time":946744638499000,"flow_dst_last_pkt_time":946744638499000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":776,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":776,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":776,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946744638499000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.193","src_port":10500,"dst_port":500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3}
01540{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_src_last_pkt_time":946744638499000,"flow_dst_last_pkt_time":946744638499000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":818,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":818,"pkt_l4_len":784,"thread_ts_usec":946744638499000,"pkt":"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"}
00862{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":16,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":2,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946744638499000,"flow_src_last_pkt_time":946744638499000,"flow_dst_last_pkt_time":946744638499000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":776,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":776,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":776,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946744638499000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.193","src_port":10500,"dst_port":500,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00569{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":2,"flow_src_last_pkt_time":946744638499000,"flow_dst_last_pkt_time":946744638499000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"thread_ts_usec":946744638499000,"pkt":"YDjgxTWgeJS0JASgCABFAABQc3cAAPcRY2pt7bvBwKgCZAH0KQQAPCbetk7zITGkiVIAAAAAAAAAACkgIiAAAAAAAAAANAAAABgAAEAGAAFVc59hOnD3cUhMt6aqPw=="}
01572{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":3,"flow_src_last_pkt_time":946744638499000,"flow_dst_last_pkt_time":946744638499000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":842,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":842,"pkt_l4_len":808,"thread_ts_usec":946744638499000,"pkt":"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"}
00566{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":24,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","packets-captured":24,"packets-processed":23,"total-skipped-flows":0,"total-l4-payload-len":11884,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":2,"total-detection-updates":0,"total-updates":0,"current-active-flows":2,"total-active-flows":2,"total-idle-flows":0,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":13,"global_ts_usec":946745300340000}
00914{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":42,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":1,"flow_state":"finished","flow_src_packets_processed":15,"flow_dst_packets_processed":14,"flow_first_seen":946744635161000,"flow_src_last_pkt_time":946745301909000,"flow_dst_last_pkt_time":946745301906000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":96,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1332,"flow_dst_max_l4_payload_len":1028,"flow_src_tot_l4_payload_len":11540,"flow_dst_tot_l4_payload_len":3360,"midstream":0,"thread_ts_usec":946745301909000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.193","src_port":14500,"dst_port":4500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00909{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":42,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":2,"flow_state":"finished","flow_src_packets_processed":6,"flow_dst_packets_processed":6,"flow_first_seen":946744638499000,"flow_src_last_pkt_time":946745300381000,"flow_dst_last_pkt_time":946745300411000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":776,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":800,"flow_dst_max_l4_payload_len":288,"flow_src_tot_l4_payload_len":4728,"flow_dst_tot_l4_payload_len":1020,"midstream":0,"thread_ts_usec":946745301909000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.193","src_port":10500,"dst_port":500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
01378{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":48,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":1,"flow_state":"finished","flow_src_packets_processed":16,"flow_dst_packets_processed":16,"flow_first_seen":946744635161000,"flow_src_last_pkt_time":946745723299000,"flow_dst_last_pkt_time":946745723443000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":96,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1332,"flow_dst_max_l4_payload_len":1028,"flow_src_tot_l4_payload_len":12356,"flow_dst_tot_l4_payload_len":3648,"midstream":0,"thread_ts_usec":946745723443000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.193","src_port":14500,"dst_port":4500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"data_analysis": {"iat": {"flow_min":1000,"flow_avg":87056800.0,"flow_max":662067000,"flow_stddev":203163760.0,"c_to_s_min":1000,"c_to_s_avg":90678168.0,"c_to_s_max":661960000,"c_to_s_stddev":207584736.0,"s_to_c_min":4000,"s_to_c_avg":83714000.0,"s_to_c_max":662067000,"s_to_c_stddev":198937184.0},"pktlen": {"c_to_s_min":138,"c_to_s_avg":814.2,"c_to_s_max":1374,"c_to_s_stddev":488.5,"s_to_c_min":122,"s_to_c_avg":270.0,"s_to_c_max":1070,"s_to_c_stddev":229.4}},"ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00914{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":61,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":1,"flow_state":"finished","flow_src_packets_processed":22,"flow_dst_packets_processed":22,"flow_first_seen":946744635161000,"flow_src_last_pkt_time":946745725650000,"flow_dst_last_pkt_time":946745725647000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":96,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1332,"flow_dst_max_l4_payload_len":1028,"flow_src_tot_l4_payload_len":16260,"flow_dst_tot_l4_payload_len":5568,"midstream":0,"thread_ts_usec":946745725650000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.193","src_port":14500,"dst_port":4500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00909{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":61,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":2,"flow_state":"finished","flow_src_packets_processed":8,"flow_dst_packets_processed":8,"flow_first_seen":946744638499000,"flow_src_last_pkt_time":946745723231000,"flow_dst_last_pkt_time":946745723263000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":776,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":800,"flow_dst_max_l4_payload_len":288,"flow_src_tot_l4_payload_len":6304,"flow_dst_tot_l4_payload_len":1360,"midstream":0,"thread_ts_usec":946745725650000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.193","src_port":10500,"dst_port":500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00566{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":62,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","packets-captured":62,"packets-processed":61,"total-skipped-flows":0,"total-l4-payload-len":29572,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":2,"total-detection-updates":0,"total-updates":4,"current-active-flows":2,"total-active-flows":2,"total-idle-flows":0,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":19,"global_ts_usec":946747247312000}
00907{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":76,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":2,"flow_state":"finished","flow_src_packets_processed":8,"flow_dst_packets_processed":8,"flow_first_seen":946744638499000,"flow_src_last_pkt_time":946745723231000,"flow_dst_last_pkt_time":946745723263000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":776,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":800,"flow_dst_max_l4_payload_len":288,"flow_src_tot_l4_payload_len":6304,"flow_dst_tot_l4_payload_len":1360,"midstream":0,"thread_ts_usec":946747248846000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.193","src_port":10500,"dst_port":500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00914{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":76,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":1,"flow_state":"finished","flow_src_packets_processed":29,"flow_dst_packets_processed":30,"flow_first_seen":946744635161000,"flow_src_last_pkt_time":946747248846000,"flow_dst_last_pkt_time":946747248843000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":96,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1332,"flow_dst_max_l4_payload_len":1028,"flow_src_tot_l4_payload_len":20980,"flow_dst_tot_l4_payload_len":7776,"midstream":0,"thread_ts_usec":946747248846000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.193","src_port":14500,"dst_port":4500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00766{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":77,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":3,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946747261671000,"flow_src_last_pkt_time":946747261671000,"flow_dst_last_pkt_time":946747261671000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":776,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":776,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":776,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946747261671000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.193","src_port":10500,"dst_port":500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3}
01542{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":77,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_src_last_pkt_time":946747261671000,"flow_dst_last_pkt_time":946747261671000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":818,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":818,"pkt_l4_len":784,"thread_ts_usec":946747261671000,"pkt":"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"}
00862{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":77,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":3,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946747261671000,"flow_src_last_pkt_time":946747261671000,"flow_dst_last_pkt_time":946747261671000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":776,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":776,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":776,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946747261671000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.193","src_port":10500,"dst_port":500,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00569{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":78,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":2,"flow_src_last_pkt_time":946747261671000,"flow_dst_last_pkt_time":946747261671000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"thread_ts_usec":946747261671000,"pkt":"YDjgxTWgeJS0JASgCABFAABQldUAAPcRQQxt7bvBwKgCZAH0KQQAPJQuAZBhkeKlmwMAAAAAAAAAACkgIiAAAAAAAAAANAAAABgAAEAGAAFVeqG9ayGKhGr+lsf4kQ=="}
01574{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":79,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":3,"flow_src_last_pkt_time":946747261671000,"flow_dst_last_pkt_time":946747261671000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":842,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":842,"pkt_l4_len":808,"thread_ts_usec":946747261671000,"pkt":"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"}
00566{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":85,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","packets-captured":85,"packets-processed":84,"total-skipped-flows":0,"total-l4-payload-len":40332,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":3,"total-detection-updates":0,"total-updates":5,"current-active-flows":2,"total-active-flows":3,"total-idle-flows":1,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":27,"global_ts_usec":946748116878000}
00912{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":89,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":1,"flow_state":"finished","flow_src_packets_processed":29,"flow_dst_packets_processed":31,"flow_first_seen":946744635161000,"flow_src_last_pkt_time":946747248846000,"flow_dst_last_pkt_time":946747261671000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":96,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1332,"flow_dst_max_l4_payload_len":1028,"flow_src_tot_l4_payload_len":20980,"flow_dst_tot_l4_payload_len":7856,"midstream":0,"thread_ts_usec":946748116945000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.193","src_port":14500,"dst_port":4500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00909{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":89,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":3,"flow_state":"finished","flow_src_packets_processed":6,"flow_dst_packets_processed":6,"flow_first_seen":946747261671000,"flow_src_last_pkt_time":946748116917000,"flow_dst_last_pkt_time":946748116945000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":776,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":800,"flow_dst_max_l4_payload_len":288,"flow_src_tot_l4_payload_len":4728,"flow_dst_tot_l4_payload_len":1020,"midstream":0,"thread_ts_usec":946748116945000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.193","src_port":10500,"dst_port":500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00767{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":89,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":4,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946748252067000,"flow_src_last_pkt_time":946748252067000,"flow_dst_last_pkt_time":946748252067000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":816,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":816,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":816,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946748252067000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.195","src_port":14500,"dst_port":4500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3}
01603{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":89,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_src_last_pkt_time":946748252067000,"flow_dst_last_pkt_time":946748252067000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":858,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":858,"pkt_l4_len":824,"thread_ts_usec":946748252067000,"pkt":"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"}
00863{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":89,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":4,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946748252067000,"flow_src_last_pkt_time":946748252067000,"flow_dst_last_pkt_time":946748252067000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":816,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":816,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":816,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946748252067000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.195","src_port":14500,"dst_port":4500,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00786{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":90,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":2,"flow_src_last_pkt_time":946748252067000,"flow_dst_last_pkt_time":946748252223000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":250,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":250,"pkt_l4_len":216,"thread_ts_usec":946748252223000,"pkt":"YDjgxTWgeJS0JASgCABFAADsll0AAPcRP+Zt7bvDwKgCZBGUOKQA2ApBAAAAANpOZUhee9vE4X9PRQEMKCsuICMgAAAAAQAAAMwkAACwwtTY3LpsT\/qwmvDisdfuxNK9yYrpebO+rMZ5gosLrRPfV7l+EmjCwenOXlPnAJuTroZt2GWmHMwPx6R5Wj70Qr9DZKVTSqPq6YqJS5sGXfmFN\/1jExW+fCr7RKpVks1R0rYUvIXhcUMq0ZUYx\/gcQzqKd1Y5K58gnestiIbcfozWvwAaS\/ZalYwjttsUIr8A6e7tdKFyD5BgINSk\/rB0eTyeYdm7\/lsSjZrFmw=="}
00653{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":91,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":3,"flow_src_last_pkt_time":946748252781000,"flow_dst_last_pkt_time":946748252223000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":154,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":154,"pkt_l4_len":120,"thread_ts_usec":946748252781000,"pkt":"eJS0JASgYDjgxTWgCABFAACM6UxAAD8RZVfAqAJkbe27wzikEZQAeNdkAAAAANpOZUhee9vE4X9PRQEMKCsuICMIAAAAAgAAAGwwAABQbRlMTHkBUjUiFIJs0wUF7LPLrRl4iHhgYt7SBLhXlxpp\/nE4VODX3ETKtazVaSDnsVwjWda2BE7eb0FjKUfCaTvVEmiG7yYu+Hga6A=="}
00768{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":104,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":5,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946748266345000,"flow_src_last_pkt_time":946748266345000,"flow_dst_last_pkt_time":946748266345000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":816,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":816,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":816,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946748266345000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.193","src_port":14500,"dst_port":4500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3}
01614{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":104,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_src_last_pkt_time":946748266345000,"flow_dst_last_pkt_time":946748266345000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":858,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":858,"pkt_l4_len":824,"thread_ts_usec":946748266345000,"pkt":"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"}
00864{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":104,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":5,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946748266345000,"flow_src_last_pkt_time":946748266345000,"flow_dst_last_pkt_time":946748266345000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":816,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":816,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":816,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946748266345000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.193","src_port":14500,"dst_port":4500,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00784{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":105,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":2,"flow_src_last_pkt_time":946748266345000,"flow_dst_last_pkt_time":946748266345000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":250,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":250,"pkt_l4_len":216,"thread_ts_usec":946748266345000,"pkt":"YDjgxTWgeJS0JASgCABFAADsWI4AAPcRfbdt7bvBwKgCZBGUOKQA2HH\/AAAAAP914hnvOUFtU+t6DQP4cgkuICMgAAAAAQAAAMwkAACwfOu85cuZCUbVuq5wm542UXnESUHvBRNjBca38ma3hqliZsy+G\/\/n62MBVQNpBmYJoZnF09Qmr1Z9AMg5tlsZQg+4xCpY4ssYThUAi8+wYicxcx11cAacOuAlsFrAIcFYRZV3T7KvT4B6PT3kvl+mZX8NHattCE7zkX+uEGW41fimmWlx+QR1iVB7GlSVyjJxXMb2eHWzkhBMoZHUk6vSm+Uwhf0kF6eDJ160Jg=="}
00656{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":106,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":3,"flow_src_last_pkt_time":946748266345000,"flow_dst_last_pkt_time":946748266345000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":154,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":154,"pkt_l4_len":120,"thread_ts_usec":946748266345000,"pkt":"eJS0JASgYDjgxTWgCABFAACMYKRAAD8R7gHAqAJkbe27wTikEZQAeHXnAAAAAP914hnvOUFtU+t6DQP4cgkuICMIAAAAAgAAAGwwAABQsyybA\/pO5Y0NejAqULLQtpl3j4jbOqkLYKooS0R9AlfONoTAuJ23Z4\/\/Qg3tTx3Q2UzJE2YfJf0QtP9cSb3bPqnZCPECcDF2jFD5Kg=="}
00767{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":119,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":6,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946748266345000,"flow_src_last_pkt_time":946748266345000,"flow_dst_last_pkt_time":946748266345000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":776,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":776,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":776,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946748266345000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.195","src_port":10500,"dst_port":500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3}
01538{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":119,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_src_last_pkt_time":946748266345000,"flow_dst_last_pkt_time":946748266345000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":818,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":818,"pkt_l4_len":784,"thread_ts_usec":946748266345000,"pkt":"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"}
00863{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":119,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":6,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946748266345000,"flow_src_last_pkt_time":946748266345000,"flow_dst_last_pkt_time":946748266345000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":776,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":776,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":776,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946748266345000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.195","src_port":10500,"dst_port":500,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00570{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":120,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":2,"flow_src_last_pkt_time":946748266345000,"flow_dst_last_pkt_time":946748266345000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"thread_ts_usec":946748266345000,"pkt":"YDjgxTWgeJS0JASgCABFAABQlSsAAPcRQbRt7bvDwKgCZAH0KQQAPKW92k5lSF5728QAAAAAAAAAACkgIiAAAAAAAAAANAAAABgAAEAGAAB8LnJU3X9N35FnuMbYiA=="}
01570{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":121,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":3,"flow_src_last_pkt_time":946748266345000,"flow_dst_last_pkt_time":946748266345000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":842,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":842,"pkt_l4_len":808,"thread_ts_usec":946748266345000,"pkt":"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"}
00908{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":127,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":3,"flow_state":"finished","flow_src_packets_processed":6,"flow_dst_packets_processed":6,"flow_first_seen":946747261671000,"flow_src_last_pkt_time":946748116917000,"flow_dst_last_pkt_time":946748116945000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":776,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":800,"flow_dst_max_l4_payload_len":288,"flow_src_tot_l4_payload_len":4728,"flow_dst_tot_l4_payload_len":1020,"midstream":0,"thread_ts_usec":946748298684000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.193","src_port":10500,"dst_port":500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00569{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":127,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","packets-captured":127,"packets-processed":126,"total-skipped-flows":0,"total-l4-payload-len":59936,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":6,"total-detection-updates":0,"total-updates":6,"current-active-flows":3,"total-active-flows":6,"total-idle-flows":3,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":46,"global_ts_usec":946748870137000}
00910{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":145,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":5,"flow_state":"finished","flow_src_packets_processed":7,"flow_dst_packets_processed":8,"flow_first_seen":946748266345000,"flow_src_last_pkt_time":946748266345000,"flow_dst_last_pkt_time":946748266345000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":96,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1332,"flow_dst_max_l4_payload_len":1028,"flow_src_tot_l4_payload_len":4720,"flow_dst_tot_l4_payload_len":2208,"midstream":0,"thread_ts_usec":946748871542000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.193","src_port":14500,"dst_port":4500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00914{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":145,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":4,"flow_state":"finished","flow_src_packets_processed":14,"flow_dst_packets_processed":15,"flow_first_seen":946748252067000,"flow_src_last_pkt_time":946748871542000,"flow_dst_last_pkt_time":946748871538000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":96,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1332,"flow_dst_max_l4_payload_len":1028,"flow_src_tot_l4_payload_len":9440,"flow_dst_tot_l4_payload_len":4336,"midstream":0,"thread_ts_usec":946748871542000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.195","src_port":14500,"dst_port":4500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00910{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":145,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":6,"flow_state":"finished","flow_src_packets_processed":6,"flow_dst_packets_processed":6,"flow_first_seen":946748266345000,"flow_src_last_pkt_time":946748870175000,"flow_dst_last_pkt_time":946748870202000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":776,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":800,"flow_dst_max_l4_payload_len":288,"flow_src_tot_l4_payload_len":4728,"flow_dst_tot_l4_payload_len":1020,"midstream":0,"thread_ts_usec":946748871542000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.195","src_port":10500,"dst_port":500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00569{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":146,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","packets-captured":146,"packets-processed":145,"total-skipped-flows":0,"total-l4-payload-len":68780,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":6,"total-detection-updates":0,"total-updates":8,"current-active-flows":2,"total-active-flows":6,"total-idle-flows":4,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":50,"global_ts_usec":946749778334000}
00767{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":146,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":7,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946749778334000,"flow_src_last_pkt_time":946749778334000,"flow_dst_last_pkt_time":946749778334000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":776,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":776,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":776,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946749778334000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.194","src_port":10500,"dst_port":500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3}
01543{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":146,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_src_last_pkt_time":946749778334000,"flow_dst_last_pkt_time":946749778334000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":818,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":818,"pkt_l4_len":784,"thread_ts_usec":946749778334000,"pkt":"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"}
00863{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":146,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":7,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946749778334000,"flow_src_last_pkt_time":946749778334000,"flow_dst_last_pkt_time":946749778334000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":776,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":776,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":776,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946749778334000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.194","src_port":10500,"dst_port":500,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00570{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":147,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":2,"flow_src_last_pkt_time":946749778334000,"flow_dst_last_pkt_time":946749778364000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"thread_ts_usec":946749778364000,"pkt":"YDjgxTWgeJS0JASgCABFAABQyUgAAPcRDZht7bvCwKgCZAH0KQQAPBQcUUmluBAEMEQAAAAAAAAAACkgIiAAAAAAAAAANAAAABgAAEAGAAFVgBk+LvIcxJJoE2awhA=="}
01575{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":148,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":3,"flow_src_last_pkt_time":946749778371000,"flow_dst_last_pkt_time":946749778364000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":842,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":842,"pkt_l4_len":808,"thread_ts_usec":946749778371000,"pkt":"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"}
00768{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":150,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":8,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946749778420000,"flow_src_last_pkt_time":946749778420000,"flow_dst_last_pkt_time":946749778420000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":816,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":816,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":816,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946749778420000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.194","src_port":14500,"dst_port":4500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3}
01601{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":150,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_src_last_pkt_time":946749778420000,"flow_dst_last_pkt_time":946749778420000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":858,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":858,"pkt_l4_len":824,"thread_ts_usec":946749778420000,"pkt":"eJS0JASgYDjgxTWgCABFAANM5zxAAD8RZKjAqAJkbe27wjikEZQDOErMAAAAAFFJpbgQBDBELFuvwAKAaBsuICMIAAAAAQAAAywjAAMQbA4QxmfNSp+fyUaP2skcxjhRyRA+Hy+nulOzx4seP\/VJbGCawiDcrcQc5QWGL3j\/WGmj93yDBSuy1WL7euil8k+L7Lh7IAx\/NEbTgeGj3cL+spCq6ZMgNKlhRmf6z4mQrPD29ZnJmLkBEmRQeomp2qPvmDIKkRMTrB2BfjuJ3YLSygMFLctsI7ggXNYV1Po\/4vPk4vVzDgwRrFqrW7KYrJLiAVN1hDJPr7Gy9kuPluJ8z8o2PofHRbWuScAYE0E+eb21tLzdgXQ3tKXX\/vpC+hFitQfjlOh5t9vsoEgIWNuITZ3lvptM6HOoSsn5dQw+XRBKZuJT7XF1A11+UL3jVX5RITf88G+Q7dv+tP6+TWskvGxDjrTTGXNofiTWyJ0w+3Fdae7fW2ijy34\/AL0iJMLvN1YPXO3N8vN5fGYPpypBTKw4V7xWeo3oBe0ejub4fmsULl2SoNBKg9VDPByKUUYEn50TQzW4BY7Z\/PTxzIQcPmN6aDEGl2ZTA47xO9I\/J4Zg4T43ce7SbxXpZ7f4uRctE9VnCWLMpGoVX9J+gc3pnlcwRtYfvwllyRptZ87skVsrIIvJBqDaL1f+oFz66PltKumOsgL0CivcQ6iqILl0OFgquRDBleUUEodHghaanDd7OmwElgTX2VD7RHoHmm5WDDXo2Tu35iL9ktdUtRy3n9bBpXgD1gXs8xWnOBYEH4muaXHxllxzh3KU+j1o1hssWvMNqfk3+UtFJIb0\/HFa7TC0KgAqPRF8BpMATPvlSferLmQOkCNvtSvw4LYOAPrld3EUDVStRHUbViInYZC1CTA15NkdRyFHZ1Vwqg\/6HJvl5DH8X0N95iuoDd+x3ONBHtR1y6njUd86stH8E\/t9P6ZXKzKVKC8e9b9G+9dCCwrRz4bWQMpH3mV9fTxYCVHXsaZR0xVSrKXIE6kZ\/XrBFCnbPiPXQkJKO4Nwn9bhYgongIZBMSUV9SDtmsnwsaLjW6NEYKhlmP3XJ287IRxrZ+3XDb9CCTOVdttWvgGvN5pdRZKp9jpIxrWW"}
00864{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":150,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":8,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946749778420000,"flow_src_last_pkt_time":946749778420000,"flow_dst_last_pkt_time":946749778420000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":816,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":816,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":816,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946749778420000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.194","src_port":14500,"dst_port":4500,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00786{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":151,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":2,"flow_src_last_pkt_time":946749778420000,"flow_dst_last_pkt_time":946749778561000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":250,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":250,"pkt_l4_len":216,"thread_ts_usec":946749778561000,"pkt":"YDjgxTWgeJS0JASgCABFAADsydYAAPcRDG5t7bvCwKgCZBGUOKQA2H8VAAAAAFFJpbgQBDBELFuvwAKAaBsuICMgAAAAAQAAAMwkAACw2vKDsI4WvCewQgUoU\/SKrFqCVUiKj1KKiDUx8Cqi9Zwcr5gbr2Mtoeu970bnlX31FD4v\/q7xpGL7dx9OD7xJZhwuc1Igl\/opndPG7\/EbMmU7b4lg00bORCDWSEUicP2p712CNcs8OyaUthH\/WyYO+D2i8bAigrbPmFCDIkhLbGRlEsDsQxrZRbqYVnxjaH3eSWftv0T1TsSVO3fOcXcaUJcQtsMqEfqp4CNimw=="}
00655{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":152,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":3,"flow_src_last_pkt_time":946749779105000,"flow_dst_last_pkt_time":946749778561000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":154,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":154,"pkt_l4_len":120,"thread_ts_usec":946749779105000,"pkt":"eJS0JASgYDjgxTWgCABFAACM501AAD8RZ1fAqAJkbe27wjikEZQAeG1BAAAAAFFJpbgQBDBELFuvwAKAaBsuICMIAAAAAgAAAGwwAABQGw+MmDcuV24HZanpawl3j\/i3cSl527taeiNa1LQV32lRXZkxAYiyvhFGbUNbtCFv+dhSQ2oZjW\/ai6sYO041xroOv3SvSK1vPWSgpA=="}
00912{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":164,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":4,"flow_state":"finished","flow_src_packets_processed":14,"flow_dst_packets_processed":16,"flow_first_seen":946748252067000,"flow_src_last_pkt_time":946748871542000,"flow_dst_last_pkt_time":946748884718000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":96,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1332,"flow_dst_max_l4_payload_len":1028,"flow_src_tot_l4_payload_len":9440,"flow_dst_tot_l4_payload_len":4416,"midstream":0,"thread_ts_usec":946749779886000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.195","src_port":14500,"dst_port":4500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00908{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":164,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":6,"flow_state":"finished","flow_src_packets_processed":6,"flow_dst_packets_processed":6,"flow_first_seen":946748266345000,"flow_src_last_pkt_time":946748870175000,"flow_dst_last_pkt_time":946748870202000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":776,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":800,"flow_dst_max_l4_payload_len":288,"flow_src_tot_l4_payload_len":4728,"flow_dst_tot_l4_payload_len":1020,"midstream":0,"thread_ts_usec":946749779886000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.195","src_port":10500,"dst_port":500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00569{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":165,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","packets-captured":165,"packets-processed":164,"total-skipped-flows":0,"total-l4-payload-len":77624,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":8,"total-detection-updates":0,"total-updates":8,"current-active-flows":2,"total-active-flows":8,"total-idle-flows":6,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":63,"global_ts_usec":946750800427000}
00914{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":184,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":8,"flow_state":"finished","flow_src_packets_processed":15,"flow_dst_packets_processed":15,"flow_first_seen":946749778420000,"flow_src_last_pkt_time":946750802633000,"flow_dst_last_pkt_time":946750802082000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":96,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1332,"flow_dst_max_l4_payload_len":1028,"flow_src_tot_l4_payload_len":9588,"flow_dst_tot_l4_payload_len":4224,"midstream":0,"thread_ts_usec":946750802633000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.194","src_port":14500,"dst_port":4500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00909{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":184,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":7,"flow_state":"finished","flow_src_packets_processed":4,"flow_dst_packets_processed":4,"flow_first_seen":946749778334000,"flow_src_last_pkt_time":946750802633000,"flow_dst_last_pkt_time":946750802633000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":776,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":800,"flow_dst_max_l4_payload_len":288,"flow_src_tot_l4_payload_len":3152,"flow_dst_tot_l4_payload_len":680,"midstream":0,"thread_ts_usec":946750802633000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.194","src_port":10500,"dst_port":500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00570{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":188,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","packets-captured":188,"packets-processed":187,"total-skipped-flows":0,"total-l4-payload-len":88340,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":8,"total-detection-updates":0,"total-updates":10,"current-active-flows":2,"total-active-flows":8,"total-idle-flows":6,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":66,"global_ts_usec":946752053636000}
00767{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":188,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":9,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946752053636000,"flow_src_last_pkt_time":946752053636000,"flow_dst_last_pkt_time":946752053636000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":776,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":776,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":776,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946752053636000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.225","src_port":10500,"dst_port":500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3}
01544{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":188,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_src_last_pkt_time":946752053636000,"flow_dst_last_pkt_time":946752053636000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":818,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":818,"pkt_l4_len":784,"thread_ts_usec":946752053636000,"pkt":"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"}
00863{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":188,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":9,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946752053636000,"flow_src_last_pkt_time":946752053636000,"flow_dst_last_pkt_time":946752053636000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":776,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":776,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":776,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946752053636000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.225","src_port":10500,"dst_port":500,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00570{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":189,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":2,"flow_src_last_pkt_time":946752053636000,"flow_dst_last_pkt_time":946752053657000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"thread_ts_usec":946752053657000,"pkt":"YDjgxTWgeJS0JASgCABFAABQOHkAAPcRnkht7bvhwKgCZAH0KQQAPOJkeUX3Y1A5a1kAAAAAAAAAACkgIiAAAAAAAAAANAAAABgAAEAGAAE0tZBdGn8MHoQ9Q8GZvw=="}
01576{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":190,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":3,"flow_src_last_pkt_time":946752053676000,"flow_dst_last_pkt_time":946752053657000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":842,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":842,"pkt_l4_len":808,"thread_ts_usec":946752053676000,"pkt":"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"}
00769{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":192,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":10,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946752053740000,"flow_src_last_pkt_time":946752053740000,"flow_dst_last_pkt_time":946752053740000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":816,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":816,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":816,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946752053740000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.225","src_port":14500,"dst_port":4500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3}
01611{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":192,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_src_last_pkt_time":946752053740000,"flow_dst_last_pkt_time":946752053740000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":858,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":858,"pkt_l4_len":824,"thread_ts_usec":946752053740000,"pkt":"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"}
00985{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":192,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":10,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946752053740000,"flow_src_last_pkt_time":946752053740000,"flow_dst_last_pkt_time":946752053740000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":816,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":816,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":816,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946752053740000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.225","src_port":14500,"dst_port":4500,"l4_proto":"udp","ndpi": {"flow_risk": {"17": {"risk":"Malformed Packet","severity":"Low","risk_score": {"total":260,"client":130,"server":130}}},"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00787{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":193,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":2,"flow_src_last_pkt_time":946752053740000,"flow_dst_last_pkt_time":946752053856000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":250,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":250,"pkt_l4_len":216,"thread_ts_usec":946752053856000,"pkt":"YDjgxTWgeJS0JASgCABFAADsOPIAAPcRnTNt7bvhwKgCZBGUOKQA2GSxAAAAAHlF92NQOWtZRVafIANU3ecuICMgAAAAAQAAAMwkAACwbCnQO0t8tiDbRI0Dx49OEdau4d\/WY4nre6ns6n3vAP909JuZ1MJBTo0cUkWOpcHHZSiemknv+kvvcs0Xa4fyeaoZ0\/\/TyH\/qVQorUwn5KKKhNef10qbGA8IojK5T4Q9tL6LdR5DoRQd5VxvHqhklCeGrMX+Xi\/tVgDc6u4AVew+xxWga6nIJW2nxk4XW411m7qykRZck9XPKemD9+TvNlS3b9braHWj2dkZaUQ=="}
00655{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":194,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":3,"flow_src_last_pkt_time":946752054423000,"flow_dst_last_pkt_time":946752053856000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":154,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":154,"pkt_l4_len":120,"thread_ts_usec":946752054423000,"pkt":"eJS0JASgYDjgxTWgCABFAACMWZNAAD8R9PLAqAJkbe274TikEZQAeO2UAAAAAHlF92NQOWtZRVafIANU3ecuICMIAAAAAgAAAGwwAABQJ30Fv5jPlEo6jF9WI+\/EQw5N3QovViNGDc2rMu6lmbrgZceFAAmNip6IhkJ08NB0auxPyCkplcHXICvksAjBFss5XRkKhPp+oCuvyg=="}
00912{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":206,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":8,"flow_state":"finished","flow_src_packets_processed":15,"flow_dst_packets_processed":15,"flow_first_seen":946749778420000,"flow_src_last_pkt_time":946750802633000,"flow_dst_last_pkt_time":946750802082000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":96,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1332,"flow_dst_max_l4_payload_len":1028,"flow_src_tot_l4_payload_len":9588,"flow_dst_tot_l4_payload_len":4224,"midstream":0,"thread_ts_usec":946752055364000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.194","src_port":14500,"dst_port":4500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00908{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":206,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":7,"flow_state":"finished","flow_src_packets_processed":6,"flow_dst_packets_processed":6,"flow_first_seen":946749778334000,"flow_src_last_pkt_time":946750900940000,"flow_dst_last_pkt_time":946750900970000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":776,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":800,"flow_dst_max_l4_payload_len":288,"flow_src_tot_l4_payload_len":4728,"flow_dst_tot_l4_payload_len":1020,"midstream":0,"thread_ts_usec":946752055364000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.194","src_port":10500,"dst_port":500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00768{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":207,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":11,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946752614840000,"flow_src_last_pkt_time":946752614840000,"flow_dst_last_pkt_time":946752614840000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":776,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":776,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":776,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946752614840000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.131","src_port":10500,"dst_port":500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3}
01542{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":207,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_src_last_pkt_time":946752614840000,"flow_dst_last_pkt_time":946752614840000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":818,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":818,"pkt_l4_len":784,"thread_ts_usec":946752614840000,"pkt":"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"}
00984{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":207,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":11,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946752614840000,"flow_src_last_pkt_time":946752614840000,"flow_dst_last_pkt_time":946752614840000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":776,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":776,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":776,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946752614840000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.131","src_port":10500,"dst_port":500,"l4_proto":"udp","ndpi": {"flow_risk": {"17": {"risk":"Malformed Packet","severity":"Low","risk_score": {"total":260,"client":130,"server":130}}},"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00571{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":208,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":2,"flow_src_last_pkt_time":946752614840000,"flow_dst_last_pkt_time":946752614864000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"thread_ts_usec":946752614864000,"pkt":"YDjgxTWgeJS0JASgCABFAABQ3r8AAPcR+F9t7buDwKgCZAH0KQQAPOaMk4UY8WP9qlcAAAAAAAAAACkgIiAAAAAAAAAANAAAABgAAEAGAAAAAPa+lnAaTgFc15s6oA=="}
01574{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":209,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":3,"flow_src_last_pkt_time":946752614874000,"flow_dst_last_pkt_time":946752614864000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":842,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":842,"pkt_l4_len":808,"thread_ts_usec":946752614874000,"pkt":"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"}
00769{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":211,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":12,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946752614924000,"flow_src_last_pkt_time":946752614924000,"flow_dst_last_pkt_time":946752614924000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":816,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":816,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":816,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946752614924000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.131","src_port":14500,"dst_port":4500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3}
01610{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":211,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_src_last_pkt_time":946752614924000,"flow_dst_last_pkt_time":946752614924000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":858,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":858,"pkt_l4_len":824,"thread_ts_usec":946752614924000,"pkt":"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"}
00865{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":211,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":12,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946752614924000,"flow_src_last_pkt_time":946752614924000,"flow_dst_last_pkt_time":946752614924000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":816,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":816,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":816,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946752614924000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.131","src_port":14500,"dst_port":4500,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00789{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":212,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":2,"flow_src_last_pkt_time":946752614924000,"flow_dst_last_pkt_time":946752615060000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":250,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":250,"pkt_l4_len":216,"thread_ts_usec":946752615060000,"pkt":"YDjgxTWgeJS0JASgCABFAADs3yQAAPcR915t7buDwKgCZBGUOKQA2NJOAAAAAJOFGPFj\/apXtO8xDwLcetkuICMgAAAAAQAAAMwkAACwpdyW7c2\/gJunZPldMG411Fh9XqpWg0EGVUCu6b4sTpdSkoNBs3\/CE4TFf8eat4rNXCNJJMOTO4t7zRLT4TmdXa92K0pHwl8LDGXFFZsrJdJPRItlhYnUch1AegTc7Y\/4aa7WDES\/4jdGVNuF2mpbAdVbrWRKvson1Aj1kzSzxGzvxugD+08NJGxTPaQqcVwY0uvTjefK3iDBSw\/nM82zQiIarpThHkv1rvf\/wg=="}
00656{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":213,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":3,"flow_src_last_pkt_time":946752615613000,"flow_dst_last_pkt_time":946752615060000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":154,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":154,"pkt_l4_len":120,"thread_ts_usec":946752615613000,"pkt":"eJS0JASgYDjgxTWgCABFAACMYhlAAD8R7MrAqAJkbe27gzikEZQAeNh6AAAAAJOFGPFj\/apXtO8xDwLcetkuICMIAAAAAgAAAGwwAABQWFXXJkXtrzhht+gv7jZ95VEVBCnWapg+MomShlwjPicL4QCRZxMSSVMpbVw66U7T50uDB+5pmL\/W4ALVgFtUgLJsZyv4SFTwa+0OoQ=="}
01031{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":225,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":10,"flow_state":"finished","flow_src_packets_processed":7,"flow_dst_packets_processed":8,"flow_first_seen":946752053740000,"flow_src_last_pkt_time":946752055364000,"flow_dst_last_pkt_time":946752068592000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":96,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1332,"flow_dst_max_l4_payload_len":1028,"flow_src_tot_l4_payload_len":4720,"flow_dst_tot_l4_payload_len":2208,"midstream":0,"thread_ts_usec":946752616641000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.225","src_port":14500,"dst_port":4500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"flow_risk": {"17": {"risk":"Malformed Packet","severity":"Low","risk_score": {"total":260,"client":130,"server":130}}},"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00907{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":225,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":9,"flow_state":"finished","flow_src_packets_processed":2,"flow_dst_packets_processed":2,"flow_first_seen":946752053636000,"flow_src_last_pkt_time":946752053676000,"flow_dst_last_pkt_time":946752053697000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":776,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":800,"flow_dst_max_l4_payload_len":288,"flow_src_tot_l4_payload_len":1576,"flow_dst_tot_l4_payload_len":340,"midstream":0,"thread_ts_usec":946752616641000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.225","src_port":10500,"dst_port":500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00574{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":226,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","packets-captured":226,"packets-processed":225,"total-skipped-flows":0,"total-l4-payload-len":106028,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":12,"total-detection-updates":0,"total-updates":10,"current-active-flows":2,"total-active-flows":12,"total-idle-flows":10,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":91,"global_ts_usec":946753056378000}
00915{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":244,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":12,"flow_state":"finished","flow_src_packets_processed":14,"flow_dst_packets_processed":15,"flow_first_seen":946752614924000,"flow_src_last_pkt_time":946753058099000,"flow_dst_last_pkt_time":946753058095000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":96,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1332,"flow_dst_max_l4_payload_len":1028,"flow_src_tot_l4_payload_len":9440,"flow_dst_tot_l4_payload_len":4336,"midstream":0,"thread_ts_usec":946753058099000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.131","src_port":14500,"dst_port":4500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
01030{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":244,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":11,"flow_state":"finished","flow_src_packets_processed":4,"flow_dst_packets_processed":4,"flow_first_seen":946752614840000,"flow_src_last_pkt_time":946753056415000,"flow_dst_last_pkt_time":946753056444000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":776,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":800,"flow_dst_max_l4_payload_len":288,"flow_src_tot_l4_payload_len":3152,"flow_dst_tot_l4_payload_len":680,"midstream":0,"thread_ts_usec":946753058099000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.131","src_port":10500,"dst_port":500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"flow_risk": {"17": {"risk":"Malformed Packet","severity":"Low","risk_score": {"total":260,"client":130,"server":130}}},"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00574{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":245,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","packets-captured":245,"packets-processed":244,"total-skipped-flows":0,"total-l4-payload-len":114872,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":12,"total-detection-updates":0,"total-updates":12,"current-active-flows":2,"total-active-flows":12,"total-idle-flows":10,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":94,"global_ts_usec":946756085796000}
00769{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":245,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":13,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946756085796000,"flow_src_last_pkt_time":946756085796000,"flow_dst_last_pkt_time":946756085796000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":432,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":432,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":432,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946756085796000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.193","src_port":43811,"dst_port":4500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3}
01089{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":245,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_src_last_pkt_time":946756085796000,"flow_dst_last_pkt_time":946756085796000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":474,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":474,"pkt_l4_len":440,"thread_ts_usec":946756085796000,"pkt":"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"}
00865{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":245,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":13,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946756085796000,"flow_src_last_pkt_time":946756085796000,"flow_dst_last_pkt_time":946756085796000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":432,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":432,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":432,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946756085796000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.193","src_port":43811,"dst_port":4500,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00782{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":246,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":2,"flow_src_last_pkt_time":946756085796000,"flow_dst_last_pkt_time":946756085939000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":250,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":250,"pkt_l4_len":216,"thread_ts_usec":946756085939000,"pkt":"YDjgxTWgeJS0JASgCABFAADs+pAAAPcR27Rt7bvBwKgCZBGUqyMA2MgYAAAAAFdVWmAzg3AtUnd8qAS0wgwuICMgAAAAAQAAAMwkAACwGwVeph0IkLSNrMQe9KFyeKE0QuZjK7my0+yRWqTxlzWUA3mRbb7srC4MGUsPo5STZ+eQ0KsfgOiKhZp7JjPvU1DpL0hGi1nu0ki7rscKkFtuaIb3IUMJBUDOuKDG8TawmlzjbXA5xqwrTD4Y0Fd66XG6kIfvpzqyfjU8FQSbpLWobjdeptHYBdDQ0iUIflW9bAVW8UU1fJkZpox2qaywq8WitQBykYYx17qunw=="}
00655{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":247,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":3,"flow_src_last_pkt_time":946756086594000,"flow_dst_last_pkt_time":946756085939000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":154,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":154,"pkt_l4_len":120,"thread_ts_usec":946756086594000,"pkt":"eJS0JASgYDjgxTWgCABFAACMAuFAAP0RjcTAqAJkbe27wasjEZQAeNGiAAAAAFdVWmAzg3AtUnd8qAS0wgwuICMIAAAAAgAAAGwwAABQQF79b6huHtPKErITdIUO\/aRiOYMcetOdPsiFIJLCSJQ4cF8NEcwjhKJjD422ZZANRXbfE3zsy3AffzRBbdt1fenFelwBzHh8VhUHEg=="}
00768{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":260,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":14,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946756088542000,"flow_src_last_pkt_time":946756088542000,"flow_dst_last_pkt_time":946756088542000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":336,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":336,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":336,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946756088542000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.193","src_port":43811,"dst_port":500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3}
00955{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":260,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_src_last_pkt_time":946756088542000,"flow_dst_last_pkt_time":946756088542000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":378,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":378,"pkt_l4_len":344,"thread_ts_usec":946756088542000,"pkt":"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"}
00864{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":260,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":14,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946756088542000,"flow_src_last_pkt_time":946756088542000,"flow_dst_last_pkt_time":946756088542000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":336,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":336,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":336,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946756088542000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.193","src_port":43811,"dst_port":500,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00571{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":261,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":2,"flow_src_last_pkt_time":946756088542000,"flow_dst_last_pkt_time":946756088542000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"thread_ts_usec":946756088542000,"pkt":"YDjgxTWgeJS0JASgCABFAABQ+doAAPcR3QZt7bvBwKgCZAH0qyMAPCrmbglRU5LrZucAAAAAAAAAACkgIiAAAAAAAAAANAAAABgAAEAGAAFVk+LiqnjzgFIY5qXmyw=="}
00987{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":262,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":3,"flow_src_last_pkt_time":946756088542000,"flow_dst_last_pkt_time":946756088542000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":402,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":402,"pkt_l4_len":368,"thread_ts_usec":946756088542000,"pkt":"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"}
00913{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":268,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":12,"flow_state":"finished","flow_src_packets_processed":14,"flow_dst_packets_processed":16,"flow_first_seen":946752614924000,"flow_src_last_pkt_time":946753058099000,"flow_dst_last_pkt_time":946753071332000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":96,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1332,"flow_dst_max_l4_payload_len":1028,"flow_src_tot_l4_payload_len":9440,"flow_dst_tot_l4_payload_len":4416,"midstream":0,"thread_ts_usec":946756088542000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.131","src_port":14500,"dst_port":4500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
01028{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":268,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":11,"flow_state":"finished","flow_src_packets_processed":4,"flow_dst_packets_processed":4,"flow_first_seen":946752614840000,"flow_src_last_pkt_time":946753056415000,"flow_dst_last_pkt_time":946753056444000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":776,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":800,"flow_dst_max_l4_payload_len":288,"flow_src_tot_l4_payload_len":3152,"flow_dst_tot_l4_payload_len":680,"midstream":0,"thread_ts_usec":946756088542000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.131","src_port":10500,"dst_port":500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"flow_risk": {"17": {"risk":"Malformed Packet","severity":"Low","risk_score": {"total":260,"client":130,"server":130}}},"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00575{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":268,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","packets-captured":268,"packets-processed":267,"total-skipped-flows":0,"total-l4-payload-len":125706,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":14,"total-detection-updates":0,"total-updates":12,"current-active-flows":2,"total-active-flows":14,"total-idle-flows":12,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":107,"global_ts_usec":946763512822000}
00768{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":268,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":15,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946763512822000,"flow_src_last_pkt_time":946763512822000,"flow_dst_last_pkt_time":946763512822000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":776,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":776,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":776,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946763512822000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.129","src_port":10500,"dst_port":500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3}
01544{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":268,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_src_last_pkt_time":946763512822000,"flow_dst_last_pkt_time":946763512822000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":818,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":818,"pkt_l4_len":784,"thread_ts_usec":946763512822000,"pkt":"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"}
00864{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":268,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":15,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946763512822000,"flow_src_last_pkt_time":946763512822000,"flow_dst_last_pkt_time":946763512822000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":776,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":776,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":776,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946763512822000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.129","src_port":10500,"dst_port":500,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00572{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":269,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":2,"flow_src_last_pkt_time":946763512822000,"flow_dst_last_pkt_time":946763512846000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"thread_ts_usec":946763512846000,"pkt":"YDjgxTWgeJS0JASgCABFAABQmv4AAPcRPCNt7buBwKgCZAH0KQQAPLvu8zGl\/JiX39YAAAAAAAAAACkgIiAAAAAAAAAANAAAABgAAEAGAAFA8j2S3SJakzYmklIQMA=="}
01576{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":270,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":3,"flow_src_last_pkt_time":946763512859000,"flow_dst_last_pkt_time":946763512846000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":842,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":842,"pkt_l4_len":808,"thread_ts_usec":946763512859000,"pkt":"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"}
00769{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":272,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":16,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946763512920000,"flow_src_last_pkt_time":946763512920000,"flow_dst_last_pkt_time":946763512920000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":816,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":816,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":816,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946763512920000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.129","src_port":14500,"dst_port":4500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3}
01609{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":272,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_src_last_pkt_time":946763512920000,"flow_dst_last_pkt_time":946763512920000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":858,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":858,"pkt_l4_len":824,"thread_ts_usec":946763512920000,"pkt":"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"}
00865{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":272,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":16,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946763512920000,"flow_src_last_pkt_time":946763512920000,"flow_dst_last_pkt_time":946763512920000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":816,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":816,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":816,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946763512920000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.129","src_port":14500,"dst_port":4500,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00786{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":273,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":2,"flow_src_last_pkt_time":946763512920000,"flow_dst_last_pkt_time":946763513021000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":250,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":250,"pkt_l4_len":216,"thread_ts_usec":946763513021000,"pkt":"YDjgxTWgeJS0JASgCABFAADsmwgAAPcRO31t7buBwKgCZBGUOKQA2N42AAAAAPMxpfyYl9\/WLu8pUwPoTCguICMgAAAAAQAAAMwkAACwrhQ09Kh9+vnX5erplPpmkKxPU2ZyQ3UgWfgQd6t7a0GXP0QOt30giqAFHmWpPWeR9yE+jQc3kUdw92Kry8GP93GHU3JiQfdGX1dg80oiDVCCJN9VDUT9EYrK5BIf8TxxSxrHgnnGPhNiTcvbLhdqWqrhM+DCMWmbIQOLUP\/13aUdQqtJ2NskdLYZmBzVkSARdH\/nvMVxKh8rTWuRQL2HLCcM9jppc\/gTtn8O8w=="}
00658{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":274,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":3,"flow_src_last_pkt_time":946763513596000,"flow_dst_last_pkt_time":946763513021000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":154,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":154,"pkt_l4_len":120,"thread_ts_usec":946763513596000,"pkt":"eJS0JASgYDjgxTWgCABFAACMtaJAAD8RmUPAqAJkbe27gTikEZQAeLpaAAAAAPMxpfyYl9\/WLu8pUwPoTCguICMIAAAAAgAAAGwwAABQwOqdhYCbmm3bEKgkQ2BLZDzIv0XnrqQcxKkQyJsdMpetHDv3PBx9ZFaXf97NlAImLdQie\/fZWDwYC39ckJH2101yaGOEgl6g\/\/96sQ=="}
00911{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":286,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":13,"flow_state":"finished","flow_src_packets_processed":6,"flow_dst_packets_processed":9,"flow_first_seen":946756085796000,"flow_src_last_pkt_time":946756088354000,"flow_dst_last_pkt_time":946756088542000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":96,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1108,"flow_dst_max_l4_payload_len":1108,"flow_src_tot_l4_payload_len":3228,"flow_dst_tot_l4_payload_len":5400,"midstream":0,"thread_ts_usec":946763514604000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.193","src_port":43811,"dst_port":4500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00908{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":286,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":14,"flow_state":"finished","flow_src_packets_processed":4,"flow_dst_packets_processed":4,"flow_first_seen":946756088542000,"flow_src_last_pkt_time":946756088542000,"flow_dst_last_pkt_time":946756088542000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":336,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":488,"flow_dst_max_l4_payload_len":416,"flow_src_tot_l4_payload_len":1648,"flow_dst_tot_l4_payload_len":558,"midstream":0,"thread_ts_usec":946763514604000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.193","src_port":43811,"dst_port":500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00768{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":287,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":17,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946763527783000,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":776,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":776,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":776,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946763527783000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.225","src_port":10500,"dst_port":500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3}
01540{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":287,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":818,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":818,"pkt_l4_len":784,"thread_ts_usec":946763527783000,"pkt":"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"}
00864{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":287,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":17,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946763527783000,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":776,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":776,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":776,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946763527783000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.225","src_port":10500,"dst_port":500,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00571{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":288,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":2,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"thread_ts_usec":946763527783000,"pkt":"YDjgxTWgeJS0JASgCABFAABQlowAAPcRQDVt7bvhwKgCZAH0KQQAPNm6qPaH0PrOV4AAAAAAAAAAACkgIiAAAAAAAAAANAAAABgAAEAGAAE1BPl4uUkUN6wHNNoiXg=="}
01572{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":289,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":3,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":842,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":842,"pkt_l4_len":808,"thread_ts_usec":946763527783000,"pkt":"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"}
00769{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":291,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":18,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946763527783000,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":816,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":816,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":816,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946763527783000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.225","src_port":14500,"dst_port":4500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3}
01606{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":291,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":858,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":858,"pkt_l4_len":824,"thread_ts_usec":946763527783000,"pkt":"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"}
00865{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":291,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":18,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946763527783000,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":816,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":816,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":816,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946763527783000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.225","src_port":14500,"dst_port":4500,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00785{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":292,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":2,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":250,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":250,"pkt_l4_len":216,"thread_ts_usec":946763527783000,"pkt":"YDjgxTWgeJS0JASgCABFAADslpIAAPcRP5Nt7bvhwKgCZBGUOKQA2OOJAAAAAKj2h9D6zleA3PDVMwKwDlEuICMgAAAAAQAAAMwkAACwLCsD4mosZGmzS9zPOH7ZB3ntKXsbrg1mTaPeWquGkKyWCRF\/OjCDE2AY7gF6+QP5GKPQ0TXBpQE1YOldvNsFNdgrlAg6Fv3aay4aOWg5YoteQM9smeql\/l\/giTcrHwj6FXV0oSRjjlv74o0goNnCWGoPIRvxv9V1EQzAD2EbVa5quQlRJ4P625uNjcSoEn1nGktCsRV4BUtWTyE9paAe2sVXXtJL9tj6EzoDGA=="}
00655{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":293,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":3,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":154,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":154,"pkt_l4_len":120,"thread_ts_usec":946763527783000,"pkt":"eJS0JASgYDjgxTWgCABFAACMRPlAAD8RCY3AqAJkbe274TikEZQAeAhnAAAAAKj2h9D6zleA3PDVMwKwDlEuICMIAAAAAgAAAGwwAABQK27EVha44rT9dN9Ez3hFDAHW67\/DhEXLrtd9m2PGXusgAv2XsLrDq2JDhD6iOu+y5vuPRE4mc3OgV68O6by2edSn68oqDfBe7nI7rA=="}
00768{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":306,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":19,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946763527783000,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":776,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":776,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":776,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946763527783000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.131","src_port":10500,"dst_port":500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3}
01544{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":306,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":818,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":818,"pkt_l4_len":784,"thread_ts_usec":946763527783000,"pkt":"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"}
00864{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":306,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":19,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946763527783000,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":776,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":776,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":776,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946763527783000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.131","src_port":10500,"dst_port":500,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00571{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":307,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":2,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"thread_ts_usec":946763527783000,"pkt":"YDjgxTWgeJS0JASgCABFAABQ4hQAAPcR9Qpt7buDwKgCZAH0KQQAPL3CKYaJu7sMZisAAAAAAAAAACkgIiAAAAAAAAAANAAAABgAAEAGAAAAAN01S7xqKstfAW9qRg=="}
01576{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":308,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":3,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":842,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":842,"pkt_l4_len":808,"thread_ts_usec":946763527783000,"pkt":"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"}
00769{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":310,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":20,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946763527783000,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":816,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":816,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":816,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946763527783000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.131","src_port":14500,"dst_port":4500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3}
01605{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":310,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":858,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":858,"pkt_l4_len":824,"thread_ts_usec":946763527783000,"pkt":"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"}
00865{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":310,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":20,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946763527783000,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":816,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":816,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":816,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946763527783000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.131","src_port":14500,"dst_port":4500,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00787{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":311,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":2,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":250,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":250,"pkt_l4_len":216,"thread_ts_usec":946763527783000,"pkt":"YDjgxTWgeJS0JASgCABFAADs4h0AAPcR9GVt7buDwKgCZBGUOKQA2PzYAAAAACmGibu7DGYryhiyRAKATQQuICMgAAAAAQAAAMwkAACwqEBhGEkqTdk3OTJPVU+8yQTL8ZItLKounZsHCBXq6ysubqRk784GH\/owxO8EPqA9YbqFV54i4f05kBjS\/h8TdhcTet4lsitEO51fkiGfi0Vkc\/JI\/IrO1ZHnZGEeZHi6F6lpw7gAiKLzX7vKrdLCPx0wmSU9lwFSDsrE8LnuV3pSiACEa4nL+ragW0aQZ1MjWWNA\/UYXgaAtNOt3nz2vBhdfjv1epMHdb4oW+Q=="}
00654{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":312,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":3,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":154,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":154,"pkt_l4_len":120,"thread_ts_usec":946763527783000,"pkt":"eJS0JASgYDjgxTWgCABFAACMzoVAAD8RgF7AqAJkbe27gzikEZQAeI6gAAAAACmGibu7DGYryhiyRAKATQQuICMIAAAAAgAAAGwwAABQ7i9ltNSVoV2B7+spzMyxdFmVFpNCdGsnS1zYOWtZLLJ3jn5hta9uxbRTOuryQ1nfs8LoZe2STMzHnZYYlmsTR8H0L25CA7tIlvnPbQ=="}
00768{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":325,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":21,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946763527783000,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":776,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":776,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":776,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946763527783000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.193","src_port":10500,"dst_port":500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3}
01548{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":325,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":1,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":818,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":818,"pkt_l4_len":784,"thread_ts_usec":946763527783000,"pkt":"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"}
00864{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":325,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":21,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946763527783000,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":776,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":776,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":776,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946763527783000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.193","src_port":10500,"dst_port":500,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00573{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":326,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":2,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"thread_ts_usec":946763527783000,"pkt":"YDjgxTWgeJS0JASgCABFAABQIusAAPcRs\/Zt7bvBwKgCZAH0KQQAPCbzDC7fJGbFXWMAAAAAAAAAACkgIiAAAAAAAAAANAAAABgAAEAGAAFV7sh5\/22ST31yX0r43Q=="}
01581{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":327,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":3,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":842,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":842,"pkt_l4_len":808,"thread_ts_usec":946763527783000,"pkt":"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"}
00769{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":329,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":22,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946763527783000,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":816,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":816,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":816,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946763527783000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.193","src_port":14500,"dst_port":4500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3}
01608{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":329,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":1,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":858,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":858,"pkt_l4_len":824,"thread_ts_usec":946763527783000,"pkt":"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"}
00865{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":329,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":22,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946763527783000,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":816,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":816,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":816,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946763527783000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.193","src_port":14500,"dst_port":4500,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00784{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":330,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":2,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":250,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":250,"pkt_l4_len":216,"thread_ts_usec":946763527783000,"pkt":"YDjgxTWgeJS0JASgCABFAADsI9UAAPcRsnBt7bvBwKgCZBGUOKQA2AuLAAAAAAwu3yRmxV1jIFciNwR80qEuICMgAAAAAQAAAMwkAACwdm4ZqCn08scaTnuI9jZrtMOzwvKgCzLssEi17hqLdF52wfrjwlGnWHg4s7Htz\/Gxnh\/s0RPdhVSIN6eLY0tie04uvE5BsloxH7yxzkeCVrt16zA+hjPcXUPmxiTk9zs8awO3ouDCi50PL7v1Djwqke5YKqZs31YlwMVpuMXvtjQmPgylOFFjn44ZNCyP+ZBH4qdQEdwueJNrpZ2EQ7a1r8i7f8xHxKHHyczyEw=="}
00657{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":331,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":3,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":154,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":154,"pkt_l4_len":120,"thread_ts_usec":946763527783000,"pkt":"eJS0JASgYDjgxTWgCABFAACMFclAAD8RON3AqAJkbe27wTikEZQAeDIOAAAAAAwu3yRmxV1jIFciNwR80qEuICMIAAAAAgAAAGwwAABQVYMVSYyJ9gFWH7kETb2fU7dCYGW\/nqvCy2sJP\/JPQTMkiwZXC67JYZ\/uOaJ7kC8TcwUVknprrjkRxrCJVq1wLiNMXgpKaYe8r38Unw=="}
00768{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":344,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":23,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946763527783000,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":776,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":776,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":776,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946763527783000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.227","src_port":10500,"dst_port":500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3}
01542{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":344,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":818,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":818,"pkt_l4_len":784,"thread_ts_usec":946763527783000,"pkt":"eJS0JASgYDjgxTWgCABFAAMkqOlAAD8RowLAqAJkbe274ykEAfQDEMfwxPeugZRTkDEAAAAAAAAAACEgIggAAAAAAAADCCIAAggCAABQAQEACAMAAAwBAAAMgA4AgAMAAAwBAAAMgA4BAAMAAAgDAAACAwAACAMAAAwDAAAIAgAAAgMAAAgCAAAFAwAACAQAAAIAAAAIBAAABQAAAbQCAQAuAwAACAEAAAMDAAAMAQAADIAOAIADAAAMAQAADIAOAMADAAAMAQAADIAOAQADAAAMAQAADYAOAIADAAAMAQAADYAOAMADAAAMAQAADYAOAQADAAAMAQAAEoAOAIADAAAMAQAAEoAOAMADAAAMAQAAEoAOAQADAAAMAQAAE4AOAIADAAAMAQAAE4AOAMADAAAMAQAAE4AOAQADAAAMAQAAFIAOAIADAAAMAQAAFIAOAMADAAAMAQAAFIAOAQADAAAIAwAAAQMAAAgDAAACAwAACAMAAAUDAAAIAwAADAMAAAgDAAANAwAACAMAAA4DAAAIAgAAAQMAAAgCAAACAwAACAIAAAQDAAAIAgAABQMAAAgCAAAGAwAACAIAAAcDAAAIBAAAAgMAAAgEAAAFAwAACAQAAA4DAAAIBAAADwMAAAgEAAAQAwAACAQAABIDAAAIBAAAEwMAAAgEAAAUAwAACAQAABUDAAAIBAAAFgMAAAgEAAAXAwAACAQAABgDAAAIBAAAGQMAAAgEAAAaAwAACAQAABsDAAAIBAAAHAMAAAgEAAAdAAAACAQAAB4oAACIAAIAALaCq\/QqzbUl4TfVDbWtcIRhWbw1c7xzhe471e2uourx4gK4yu\/qx\/GMXpPCmq+AfIfCRxyfNb4eRtQdBek4+utR7rvvK74A9iefLvlsEBGQs3U+sNqUk9a13Hk+LhSeZopenNjNGBCXlMHDJtGZQCjGlhOR9N57RZan1wqNSI8CKQAAJK7\/+nXDLTKRQBD8OLeC6WRl3oX4ocuiIUqLdUtxFTBTKQAAHAAAQASCMP3w8Pive3ai2x+IuNuOWp8BpgAAABwAAEAFhhuQtn334e4kKy6crkOBRJ7fU3o="}
00864{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":344,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":23,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946763527783000,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":776,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":776,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":776,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946763527783000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.227","src_port":10500,"dst_port":500,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00571{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":345,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":2,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"thread_ts_usec":946763527783000,"pkt":"YDjgxTWgeJS0JASgCABFAABQy0gAAPcRC3dt7bvjwKgCZAH0KQQAPOj3xPeugZRTkDEAAAAAAAAAACkgIiAAAAAAAAAANAAAABgAAEAGAAE1IEHINlsQhrJ2YmIIdA=="}
01574{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":346,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":3,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":842,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":842,"pkt_l4_len":808,"thread_ts_usec":946763527783000,"pkt":"eJS0JASgYDjgxTWgCABFAAM8qPJAAD8RouHAqAJkbe274ykEAfQDKINyxPeugZRTkDEAAAAAAAAAACkgIggAAAAAAAADICEAABgAAEAGAAE1IEHINlsQhrJ2YmIIdCIAAggCAABQAQEACAMAAAwBAAAMgA4AgAMAAAwBAAAMgA4BAAMAAAgDAAACAwAACAMAAAwDAAAIAgAAAgMAAAgCAAAFAwAACAQAAAIAAAAIBAAABQAAAbQCAQAuAwAACAEAAAMDAAAMAQAADIAOAIADAAAMAQAADIAOAMADAAAMAQAADIAOAQADAAAMAQAADYAOAIADAAAMAQAADYAOAMADAAAMAQAADYAOAQADAAAMAQAAEoAOAIADAAAMAQAAEoAOAMADAAAMAQAAEoAOAQADAAAMAQAAE4AOAIADAAAMAQAAE4AOAMADAAAMAQAAE4AOAQADAAAMAQAAFIAOAIADAAAMAQAAFIAOAMADAAAMAQAAFIAOAQADAAAIAwAAAQMAAAgDAAACAwAACAMAAAUDAAAIAwAADAMAAAgDAAANAwAACAMAAA4DAAAIAgAAAQMAAAgCAAACAwAACAIAAAQDAAAIAgAABQMAAAgCAAAGAwAACAIAAAcDAAAIBAAAAgMAAAgEAAAFAwAACAQAAA4DAAAIBAAADwMAAAgEAAAQAwAACAQAABIDAAAIBAAAEwMAAAgEAAAUAwAACAQAABUDAAAIBAAAFgMAAAgEAAAXAwAACAQAABgDAAAIBAAAGQMAAAgEAAAaAwAACAQAABsDAAAIBAAAHAMAAAgEAAAdAAAACAQAAB4oAACIAAIAALaCq\/QqzbUl4TfVDbWtcIRhWbw1c7xzhe471e2uourx4gK4yu\/qx\/GMXpPCmq+AfIfCRxyfNb4eRtQdBek4+utR7rvvK74A9iefLvlsEBGQs3U+sNqUk9a13Hk+LhSeZopenNjNGBCXlMHDJtGZQCjGlhOR9N57RZan1wqNSI8CKQAAJK7\/+nXDLTKRQBD8OLeC6WRl3oX4ocuiIUqLdUtxFTBTKQAAHAAAQASCMP3w8Pive3ai2x+IuNuOWp8BpgAAABwAAEAFhhuQtn334e4kKy6crkOBRJ7fU3o="}
00769{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":348,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":24,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946763527783000,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":816,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":816,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":816,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946763527783000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.227","src_port":14500,"dst_port":4500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3}
01607{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":348,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":858,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":858,"pkt_l4_len":824,"thread_ts_usec":946763527783000,"pkt":"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"}
00865{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":348,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":24,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946763527783000,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":816,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":816,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":816,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946763527783000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.227","src_port":14500,"dst_port":4500,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00784{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":349,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":2,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":250,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":250,"pkt_l4_len":216,"thread_ts_usec":946763527783000,"pkt":"YDjgxTWgeJS0JASgCABFAADsy5UAAPcRCo5t7bvjwKgCZBGUOKQA2N2eAAAAAMT3roGUU5AxVDreTwHgKMguICMgAAAAAQAAAMwkAACw3+hDUjEFQ6MgpqAEcApKvn9uh3qVHzhAobzzdsLHNL0cE0MCy6hqRcHq2zyFYxqKUvV9qpSoUCOXzZX8acXWksJkwcZvlj3pHUnomqGBUy7YKx8\/BoUpsdZ+YJ66Urw6XFHoKHyVFJYrxhfDTA96A3GMtNoZk+CLmvMZh9uGXGXGb9zoZqBq9vHjZRx\/MplOtNEvpcXqGaCwVYcGtrGfedPqueJGKjXMXpyHhw=="}
00655{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":350,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":3,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":154,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":154,"pkt_l4_len":120,"thread_ts_usec":946763527783000,"pkt":"eJS0JASgYDjgxTWgCABFAACMqXpAAD8RpQnAqAJkbe274zikEZQAeOw1AAAAAMT3roGUU5AxVDreTwHgKMguICMIAAAAAgAAAGwwAABQp3zPqAaPZdCtSbotjrN0irXGcY7JpOGxC6pjgSY\/TZB8lMPX2DP1QKzYFMuSni2xVCT2eLDFep09w0XbtiWVOI2z82MP7LPt5iJg1A=="}
01302{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":383,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":24,"flow_state":"finished","flow_src_packets_processed":15,"flow_dst_packets_processed":17,"flow_first_seen":946763527783000,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":96,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1332,"flow_dst_max_l4_payload_len":1028,"flow_src_tot_l4_payload_len":10256,"flow_dst_tot_l4_payload_len":4624,"midstream":0,"thread_ts_usec":946763527783000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.227","src_port":14500,"dst_port":4500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"data_analysis": {"iat": {"flow_min":0,"flow_avg":0.0,"flow_max":0,"flow_stddev":0.0,"c_to_s_min":0,"c_to_s_avg":0.0,"c_to_s_max":0,"c_to_s_stddev":0.0,"s_to_c_min":0,"s_to_c_avg":0.0,"s_to_c_max":0,"s_to_c_stddev":0.0},"pktlen": {"c_to_s_min":138,"c_to_s_avg":725.7,"c_to_s_max":1374,"c_to_s_stddev":502.0,"s_to_c_min":122,"s_to_c_avg":314.0,"s_to_c_max":1070,"s_to_c_stddev":293.2}},"ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
01296{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":465,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":23,"flow_state":"finished","flow_src_packets_processed":16,"flow_dst_packets_processed":16,"flow_first_seen":946763527783000,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":776,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":800,"flow_dst_max_l4_payload_len":288,"flow_src_tot_l4_payload_len":12608,"flow_dst_tot_l4_payload_len":2720,"midstream":0,"thread_ts_usec":946763527783000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.227","src_port":10500,"dst_port":500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"data_analysis": {"iat": {"flow_min":0,"flow_avg":0.0,"flow_max":0,"flow_stddev":0.0,"c_to_s_min":0,"c_to_s_avg":0.0,"c_to_s_max":0,"c_to_s_stddev":0.0,"s_to_c_min":0,"s_to_c_avg":0.0,"s_to_c_max":0,"s_to_c_stddev":0.0},"pktlen": {"c_to_s_min":818,"c_to_s_avg":830.0,"c_to_s_max":842,"c_to_s_stddev":12.0,"s_to_c_min":94,"s_to_c_avg":212.0,"s_to_c_max":330,"s_to_c_stddev":118.0}},"ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00768{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":466,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":25,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946763527783000,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":776,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":776,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":776,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946763527783000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.226","src_port":10500,"dst_port":500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3}
01540{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":466,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":1,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":818,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":818,"pkt_l4_len":784,"thread_ts_usec":946763527783000,"pkt":"eJS0JASgYDjgxTWgCABFAAMkUT5AAD8R+q7AqAJkbe274ikEAfQDENNXqwswX1pdWlQAAAAAAAAAACEgIggAAAAAAAADCCIAAggCAABQAQEACAMAAAwBAAAMgA4AgAMAAAwBAAAMgA4BAAMAAAgDAAACAwAACAMAAAwDAAAIAgAAAgMAAAgCAAAFAwAACAQAAAIAAAAIBAAABQAAAbQCAQAuAwAACAEAAAMDAAAMAQAADIAOAIADAAAMAQAADIAOAMADAAAMAQAADIAOAQADAAAMAQAADYAOAIADAAAMAQAADYAOAMADAAAMAQAADYAOAQADAAAMAQAAEoAOAIADAAAMAQAAEoAOAMADAAAMAQAAEoAOAQADAAAMAQAAE4AOAIADAAAMAQAAE4AOAMADAAAMAQAAE4AOAQADAAAMAQAAFIAOAIADAAAMAQAAFIAOAMADAAAMAQAAFIAOAQADAAAIAwAAAQMAAAgDAAACAwAACAMAAAUDAAAIAwAADAMAAAgDAAANAwAACAMAAA4DAAAIAgAAAQMAAAgCAAACAwAACAIAAAQDAAAIAgAABQMAAAgCAAAGAwAACAIAAAcDAAAIBAAAAgMAAAgEAAAFAwAACAQAAA4DAAAIBAAADwMAAAgEAAAQAwAACAQAABIDAAAIBAAAEwMAAAgEAAAUAwAACAQAABUDAAAIBAAAFgMAAAgEAAAXAwAACAQAABgDAAAIBAAAGQMAAAgEAAAaAwAACAQAABsDAAAIBAAAHAMAAAgEAAAdAAAACAQAAB4oAACIAAIAANisWYZIjej7n3HtY6YrUGG6ju3JyAgfXaIbqQqsCk6WamsA3yJowbMrsQiavjlYliQ8\/bmnkd4oik6yfXzF2nnT5++MrBWp59hXjvpQG7CUKBYM2qK1rCYScGFGvoCH+VaOstA9qnbA93UZ+lGrf8oiyLKNCUx8EmTjNr1npSw0KQAAJEdv70J9iweqoyFFLnrl4Zzojnhs5HDATx3IKPlr2BaOKQAAHAAAQASxGcGDddgOxJ\/uFM4nQfEOTHdh1AAAABwAAEAFw3IlZSVVICry3JG3pa18XmliW9c="}
00864{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":466,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":25,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946763527783000,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":776,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":776,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":776,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946763527783000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.226","src_port":10500,"dst_port":500,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00571{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":467,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":2,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"thread_ts_usec":946763527783000,"pkt":"YDjgxTWgeJS0JASgCABFAABQEZ0AAPcRxSNt7bviwKgCZAH0KQQAPGsMqwswX1pdWlQAAAAAAAAAACkgIiAAAAAAAAAANAAAABgAAEAGAAE1KWcIrU8y8ddQ+ocSmg=="}
01572{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":468,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":3,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":842,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":842,"pkt_l4_len":808,"thread_ts_usec":946763527783000,"pkt":"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"}
00769{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":470,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":26,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946763527783000,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":816,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":816,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":816,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946763527783000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.226","src_port":14500,"dst_port":4500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3}
01604{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":470,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":1,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":858,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":858,"pkt_l4_len":824,"thread_ts_usec":946763527783000,"pkt":"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"}
00865{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":470,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":26,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946763527783000,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":816,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":816,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":816,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946763527783000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.226","src_port":14500,"dst_port":4500,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00789{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":471,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":2,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":250,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":250,"pkt_l4_len":216,"thread_ts_usec":946763527783000,"pkt":"YDjgxTWgeJS0JASgCABFAADsEjkAAPcRw+tt7bviwKgCZBGUOKQA2NOBAAAAAKsLMF9aXVpU8rNpjARABmguICMgAAAAAQAAAMwkAACwlJd8WVcVfeBQmkN5fuj2YUx6tDxIVbQvy2JQRd\/BtL4hXpKJzs\/swh9hLZeQKsbMp\/sy\/av\/bbUA1jEWVrhNWIPQTh6mM4lKY0bMGYNJnwKWMpvDypsZQVORgQLb\/inT5fJkB85cKyuZ+OpfJNkxWxJ8xlgnHQZNmWhknOe41lnZLuRVg3w85pw0ONcgDXn5tgFkGuxKxNyj8Xr3SY\/nJqVuAzK+TYqBB8TmXQ=="}
00656{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":472,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":3,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":154,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":154,"pkt_l4_len":120,"thread_ts_usec":946763527783000,"pkt":"eJS0JASgYDjgxTWgCABFAACMUeNAAD8R\/KHAqAJkbe274jikEZQAeP5qAAAAAKsLMF9aXVpU8rNpjARABmguICMIAAAAAgAAAGwwAABQ0MVvdAw+LEqFA+nmF6i+XI58eiVp1GRV\/rWe4MnVHMpW8WwgWN8kiN6DP4sWq+W6GDQg7Lq8MyuzO0xwSZTAHDjDg8bbx5JyeewH2w=="}
00768{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":654,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":27,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946763527783000,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":776,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":776,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":776,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946763527783000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.130","src_port":10500,"dst_port":500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3}
01542{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":654,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":1,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":818,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":818,"pkt_l4_len":784,"thread_ts_usec":946763527783000,"pkt":"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"}
00864{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":654,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":27,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946763527783000,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":776,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":776,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":776,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946763527783000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.130","src_port":10500,"dst_port":500,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00571{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":655,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":2,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"thread_ts_usec":946763527783000,"pkt":"YDjgxTWgeJS0JASgCABFAABQkyoAAPYRRPZt7buCwKgCZAH0KQQAPF4QzXuuLUv9pz4AAAAAAAAAACkgIiAAAAAAAAAANAAAABgAAEAGAABq0Q7n6QjJnJsuTER7qA=="}
01574{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":656,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":3,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":842,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":842,"pkt_l4_len":808,"thread_ts_usec":946763527783000,"pkt":"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"}
00769{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":658,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":28,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946763527783000,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":816,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":816,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":816,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946763527783000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.130","src_port":14500,"dst_port":4500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3}
01607{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":658,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":1,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":858,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":858,"pkt_l4_len":824,"thread_ts_usec":946763527783000,"pkt":"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"}
00865{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":658,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":28,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946763527783000,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":816,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":816,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":816,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946763527783000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.130","src_port":14500,"dst_port":4500,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00789{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":659,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":2,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":250,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":250,"pkt_l4_len":216,"thread_ts_usec":946763527783000,"pkt":"YDjgxTWgeJS0JASgCABFAADsk6IAAPYRQ+Jt7buCwKgCZBGUOKQA2IekAAAAAM17ri1L\/ac+HEFGvwEgEbUuICMgAAAAAQAAAMwkAACwnjHnEXtSQ9YBTsYWhNWWL2lb3zCSVGmtTzEvh47BEs\/bjLyBXTJjuCqg7wWeV74OlRvZj2lbuv2HF8N25vmjxy2gOj3GTSIkrJ81O5xBYrk\/DO\/U3vnDhNrRnxnnbUAcri8CK4colHYFHy00rAAnAiq\/J3y\/4Psn7O2YNdeQxTN+FVKTTs+PkcU9iJQYjyeso5yATeFNdg3Yo2REPpR\/v53srr2DXIiU+rV2BA=="}
00657{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":660,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":3,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":154,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":154,"pkt_l4_len":120,"thread_ts_usec":946763527783000,"pkt":"eJS0JASgYDjgxTWgCABFAACMfEZAAD8R0p7AqAJkbe27gjikEZQAeEKcAAAAAM17ri1L\/ac+HEFGvwEgEbUuICMIAAAAAgAAAGwwAABQ4uWpvKvs0+Grd38C+Ik2kAU8jJda\/\/ZCHQQBPzJXFKXfyLyFjecJewBE8lyFFdf5WHr93Xl19FueaRtvNm5eWTihSgwraMBcuUWyzQ=="}
01302{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":697,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":28,"flow_state":"finished","flow_src_packets_processed":13,"flow_dst_packets_processed":19,"flow_first_seen":946763527783000,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":96,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1332,"flow_dst_max_l4_payload_len":1332,"flow_src_tot_l4_payload_len":7848,"flow_dst_tot_l4_payload_len":12096,"midstream":0,"thread_ts_usec":946763527783000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.130","src_port":14500,"dst_port":4500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"data_analysis": {"iat": {"flow_min":0,"flow_avg":0.0,"flow_max":0,"flow_stddev":0.0,"c_to_s_min":0,"c_to_s_avg":0.0,"c_to_s_max":0,"c_to_s_stddev":0.0,"s_to_c_min":0,"s_to_c_avg":0.0,"s_to_c_max":0,"s_to_c_stddev":0.0},"pktlen": {"c_to_s_min":138,"c_to_s_avg":645.7,"c_to_s_max":1374,"c_to_s_stddev":480.4,"s_to_c_min":122,"s_to_c_avg":678.6,"s_to_c_max":1374,"s_to_c_stddev":531.4}},"ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00769{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":768,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":29,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946763527783000,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":416,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":416,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":416,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946763527783000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.193","src_port":42593,"dst_port":4500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3}
01065{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":768,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":1,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":458,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":458,"pkt_l4_len":424,"thread_ts_usec":946763527783000,"pkt":"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"}
00865{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":768,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":29,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946763527783000,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":416,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":416,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":416,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946763527783000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.193","src_port":42593,"dst_port":4500,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00785{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":769,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":2,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":250,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":250,"pkt_l4_len":216,"thread_ts_usec":946763527783000,"pkt":"YDjgxTWgeJS0JASgCABFAADsDNQAAPcRyXFt7bvBwKgCZBGUpmEA2LFTAAAAABcjot1R1L2v9VP\/ZQPMlAYuICMgAAAAAQAAAMwkAACwt8DrlJ+m2al2nqC6R0IPssF2L9y4SqKRlJmL3oRcq8RKQ2ObMHo4zQyEslOWTLC32j2ahp4JmnhkcJsAT1Ry5ttL3i23NLV5nDm5L7NCBAUkcaeumkXhzzHIEE7JLNBFfwKX9ajX1xrYBwFX63nezSYk14HlosNo\/wudM5KsK1FFycc\/dtaMmPuiBcgAypmEGH8GzTU8DwauD7bD0L3m78gqkvO5SOE4lAbfug=="}
00656{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":770,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":3,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":154,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":154,"pkt_l4_len":120,"thread_ts_usec":946763527783000,"pkt":"eJS0JASgYDjgxTWgCABFAACMAUVAAP0Rj2DAqAJkbe27waZhEZQAeI5AAAAAABcjot1R1L2v9VP\/ZQPMlAYuICMIAAAAAgAAAGwwAABQFzlsP7YgimBjfIhMJEPhZfNKbhKkUop45dKn+ZaQvlBgZFipb1gl3b\/yGDnUYTjHBXhpSa2HaEtAKP+u9gU0mUFlekP9JG9k5fmbAw=="}
00768{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":802,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":30,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946763527783000,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":336,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":336,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":336,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946763527783000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.193","src_port":42593,"dst_port":500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3}
00953{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":802,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":1,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":378,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":378,"pkt_l4_len":344,"thread_ts_usec":946763527783000,"pkt":"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"}
00864{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":802,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":30,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946763527783000,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":336,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":336,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":336,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946763527783000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.193","src_port":42593,"dst_port":500,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00573{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":803,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":2,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"thread_ts_usec":946763527783000,"pkt":"YDjgxTWgeJS0JASgCABFAABQCh8AAPcRzMJt7bvBwKgCZAH0pmEAPMlxeYM\/SkK01zcAAAAAAAAAACkgIiAAAAAAAAAANAAAABgAAEAGAAFWNOkd\/egKWX5A4HacWg=="}
00986{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":804,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":3,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":402,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":402,"pkt_l4_len":368,"thread_ts_usec":946763527783000,"pkt":"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"}
00768{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":898,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":31,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946763527783000,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":776,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":776,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":776,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946763527783000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.194","src_port":10500,"dst_port":500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3}
01544{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":898,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":1,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":818,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":818,"pkt_l4_len":784,"thread_ts_usec":946763527783000,"pkt":"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"}
00864{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":898,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":31,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946763527783000,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":776,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":776,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":776,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946763527783000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.194","src_port":10500,"dst_port":500,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00571{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":899,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":2,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"thread_ts_usec":946763527783000,"pkt":"YDjgxTWgeJS0JASgCABFAABQIF8AAPcRtoFt7bvCwKgCZAH0KQQAPB4RKPIIUorA8+QAAAAAAAAAACkgIiAAAAAAAAAANAAAABgAAEAGAAFWSaC4DsICzoX86f4Vpg=="}
01575{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":900,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":3,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":842,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":842,"pkt_l4_len":808,"thread_ts_usec":946763527783000,"pkt":"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"}
00769{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":902,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":32,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946763527783000,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":816,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":816,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":816,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946763527783000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.194","src_port":14500,"dst_port":4500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3}
01608{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":902,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":1,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":858,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":858,"pkt_l4_len":824,"thread_ts_usec":946763527783000,"pkt":"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"}
00865{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":902,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":32,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946763527783000,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":816,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":816,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":816,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946763527783000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.194","src_port":14500,"dst_port":4500,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00788{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":903,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":2,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":250,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":250,"pkt_l4_len":216,"thread_ts_usec":946763527783000,"pkt":"YDjgxTWgeJS0JASgCABFAADsIdQAAPcRtHBt7bvCwKgCZBGUOKQA2IOhAAAAACjyCFKKwPPkEtTszwKEz4IuICMgAAAAAQAAAMwkAACwPfbHDUoskxSE5gSUwdfwN6znE\/N7RTjtK44\/DHvn\/\/wwexFQR+bVEpZtp0gTHsHNqUIlLIKHA\/jLWQUdr39M6fjLR9bEnM8bZDOpQoG1FAcUSplJnPky0MftH5FxtXAehv64FgvOmL6ZyUgZev9MgFt3Az+PptEJz6VuLX9fAIliBAE6dzplUiTUzxnJwEflrSTBoQjIhF\/lTF73bdS664b4qJIcOOLwwqHWuQ=="}
00656{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":904,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":3,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":154,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":154,"pkt_l4_len":120,"thread_ts_usec":946763527783000,"pkt":"eJS0JASgYDjgxTWgCABFAACMK0BAAD8RI2XAqAJkbe27wjikEZQAeGpmAAAAACjyCFKKwPPkEtTszwKEz4IuICMIAAAAAgAAAGwwAABQaLfgxnYqNgq2qxmD+Hya19TPQcBLhoYD2BdkF4EMrXTi21s3PaExuSQZpbAyQi70XIBl8RNR\/wXOMFYcsm\/GKhZRmEeJiOHHY9bmSQ=="}
00769{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":917,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":33,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946763527783000,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":432,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":432,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":432,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946763527783000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.194","src_port":41618,"dst_port":4500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3}
01085{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":917,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":1,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":474,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":474,"pkt_l4_len":440,"thread_ts_usec":946763527783000,"pkt":"eJS0JASgYDjgxTWgCABFAAHMAv1AAP0RjGfAqAJkbe27wqKSEZQBuF26AAAAAA0wAwLs3PExCE8kgQKA2sMuICMIAAAAAQAAAawjAAGQhVi3P8yzTfHmuI+q40jjfulhmdzYtghBgvrDfHSgYMHGAg2XU9i\/iOgQjyoTY0TYwfvwlijcEIjIzvAbmCqFJUGCB7uzk8JYV1tb1\/YeDhlRfxzft7yHQO3Ef6p28zkuy8rFdFHF7cET9dB0T9UH4lrmMn7TnQw9oUo1fE2lfQyfnpiGB9uSMq+5XNwegEiW7Nw1hb7cs3Be1fS9wwjgXaN2fWfGFNwZF4Bt6ctrjJbmJtMZtXFW9oJ68+mOel2Tq98ZCnnxPX1WsHWoVKSoa0mFFCVz12Zv+T2SRqM1XDU2D\/uzP5EkyXj5wBuUeWYas7JM+IsPF3WZiUzkRkRsF8mzmAEYcS5DjYBLnA1yeNjf2ou1C4A2+9xs8FiE9d5nKnZdo8S\/uRCxBLHweET4Z8rlH5y\/wPttmRjEJXclMVHwSGXStxNWhbQ8yequ3Oj\/iUJV059Ua27OpFQlxw6eychcRPl6ukaA7Loq37Dk+iYqh3xE\/eBHDu5spJ4iZwuTzGEFjIIJjEgu7Fci"}
00865{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":917,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":33,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946763527783000,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":432,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":432,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":432,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946763527783000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.194","src_port":41618,"dst_port":4500,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00785{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":918,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":2,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":250,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":250,"pkt_l4_len":216,"thread_ts_usec":946763527783000,"pkt":"YDjgxTWgeJS0JASgCABFAADsj4QAAPcRRsBt7bvCwKgCZBGUopIA2HVRAAAAAA0wAwLs3PExCE8kgQKA2sMuICMgAAAAAQAAAMwkAACwquU718u5VhZfSwZUPwqxrsfVvbXtg9ycFAzdkanxQ4ZdmhxID0tgHCAM8ZrGCNxZG+FMVTvTdhGn6q1TuemOvZE4\/LhT+0r5el9vMdASwlSSx0gJzmvmxrcB0dt7mxOTFIpkAfSwW5dBG6ONvXmn\/eLVkHomLxSYvgisw8c17eZNpBSLv1WfsJICYvDpJiGKxg9eRd1+NHW\/k+OQLS1krJhN0Ro1DTGeveCqAg=="}
00658{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":919,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":3,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":154,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":154,"pkt_l4_len":120,"thread_ts_usec":946763527783000,"pkt":"eJS0JASgYDjgxTWgCABFAACMAv5AAP0RjabAqAJkbe27wqKSEZQAeEmQAAAAAA0wAwLs3PExCE8kgQKA2sMuICMIAAAAAgAAAGwwAABQhVi3P8yzTfHmuI+q40jjfvXXeLkn\/P4\/Guol\/mo4SQDG6v9jAVAtKweO\/8NZOJnwHxQSgEjTe1ProSx0L5Q8GD20Y8a7kPdCB4+4WA=="}
00769{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":932,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":34,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946763527783000,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":816,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":816,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":816,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946763527783000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.195","src_port":14500,"dst_port":4500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3}
01604{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":932,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":1,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":858,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":858,"pkt_l4_len":824,"thread_ts_usec":946763527783000,"pkt":"eJS0JASgYDjgxTWgCABFAANMyhBAAD8RgdPAqAJkbe27wzikEZQDOBN4AAAAAIetJ3eFzqOBsYTP+wFs9UMuICMIAAAAAQAAAywjAAMQDxOwAsdF5DcmouqZ3qIIPX2dL17Sxwthytf35vX8VepVzCyasejxBabYcg1eZCOCXo7wibJ+5Ox19FZZ6WA8o\/FtirT1unp5\/KbKnXJj\/jdAwsC5Cmk+0nKvvIVGEa9qjOK1riRUBOLg3AgiPD1b0MEFCXVy4tktzPSYyIT8FCvxETxIN6UD6Cy0KYjRB1oZX0kS66ppXYIIhSpZkY1xn5UMgaZMfKIHRiIv7woIJ2+2jQ73aaZIyotOsyvuBpCcaZZtBWDFsbxm1+cgUkifeDRJjisc\/P6P1jHCx3Z8vmdJyRKNeCtsnStiUyoS1VGy5753yy5XlcqyN1B55mmx4GRa\/HHN4mxvBeQitpdQLQOqc6vSA0zhTHgBD7SqScWn+dc6+bWmJ+j4cfy7mqr12cjpoTIadqdkZ7jJFgUvViPa2cgUSiM3DiCGDwLwi5JltLqmhOCF0oMk1nr3YuvM6ljvscdIRoBP4lidxy72BTx2UZlMkO+gzCPcHOW65ARx8Q3rhw639NUizpwmTbUkhokOYA3JgJkVwbeWLn3lqwv6Ss6NJIdQEqhXHRExkAJxbLRtBylO+3j+muHjVwbAq75LBJzf\/i1UAstHQcg9qDTT\/ZGnKR7Ty8pWWhioaHffJyRRi+h7sK9zbkiOiBD2zt27yYltBBHPMaDytJghkfxYshxtNEjP7DDk9JsIuFz31CRxvyTYCQUiXHMZzbvXZcN82ro0WR0fgq1043ibbzHUg7FzuXDctY\/SwA7NZ6qxwtvg+\/psiPeUB1hzEtF8wdnYUlNalOdh0Yc76GQbrhWCoStkQi0Ydfl4xegAN22+a1lTlBg\/JUSrqLehByai4h1B4NwNJGynTPFzUMsATeVNbTFpe3jxVZt7P0vWrNnVT5BSaGfJDb7gcqxWmVTROLUQN0E2hcEUz38Y8e\/5eatZL+yHIrAcKK3EtVCpKFtumiow9ZZ6GvGizVBzhM2NnzoVEntamjmvJQIYNFqpe\/oZhY0wNJUxF\/\/qeQzJrYJ1oz4Qh6UIgPZ5y5Hy"}
00865{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":932,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":34,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946763527783000,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":816,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":816,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":816,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946763527783000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.195","src_port":14500,"dst_port":4500,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00785{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":933,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":2,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":250,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":250,"pkt_l4_len":216,"thread_ts_usec":946763527783000,"pkt":"YDjgxTWgeJS0JASgCABFAADsxPAAAPcREVNt7bvDwKgCZBGUOKQA2JZNAAAAAIetJ3eFzqOBsYTP+wFs9UMuICMgAAAAAQAAAMwkAACwMr0OAkWijHaDvVGx2cRd0BpnFxS9yWmk6USjwA1\/uw1HQpBxwIy+M+R8Al6F3b36KkUGMX1VKR6k1QkDbK7wUf6D75B3WW4+ESdgDyReOoS2h1kZn2iRJm0Fo9teEurdyI4sprk4gzmd0gpIbHjeDxKa9imZvZ3qtI3GQJ3qHIAJc5ObsHzpll\/5YtnVtIGJqMEfyVkFO5ycBlEymK2bZ\/IKDHFsKs137Rdruw=="}
00655{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":934,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":3,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":154,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":154,"pkt_l4_len":120,"thread_ts_usec":946763527783000,"pkt":"eJS0JASgYDjgxTWgCABFAACMyldAAD8RhEzAqAJkbe27wzikEZQAeNzZAAAAAIetJ3eFzqOBsYTP+wFs9UMuICMIAAAAAgAAAGwwAABQNF9O8PSFPDdTA7ru1rW4e\/OgLqcWU5nzNhiXwaf5BsfwxiuanodxWmR58JZG78eli1reIYIhuG8qOBQ5mrxafVbmCl4feN4SYilPrw=="}
00768{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":947,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":35,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946763527783000,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":336,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":336,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":336,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946763527783000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.194","src_port":41618,"dst_port":500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3}
00952{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":947,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":1,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":378,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":378,"pkt_l4_len":344,"thread_ts_usec":946763527783000,"pkt":"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"}
00864{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":947,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":35,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946763527783000,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":336,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":336,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":336,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946763527783000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.194","src_port":41618,"dst_port":500,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00571{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":948,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":2,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"thread_ts_usec":946763527783000,"pkt":"YDjgxTWgeJS0JASgCABFAABQjVEAAPcRSY9t7bvCwKgCZAH0opIAPIoL2W94XiRTTxcAAAAAAAAAACkgIiAAAAAAAAAANAAAABgAAEAGAAFWSdZrX4ccCgpHyIoYQw=="}
00984{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":949,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":3,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":402,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":402,"pkt_l4_len":368,"thread_ts_usec":946763527783000,"pkt":"eJS0JASgYDjgxTWgCABFAAGEAvpAAP0RjLLAqAJkbe27wqKSAfQBcOGu2W94XiRTTxcAAAAAAAAAACkgIggAAAAAAAABaCEAABgAAEAGAAFWSdZrX4ccCgpHyIoYQyIAAFwAAABYAQEACQMAAAwBAAAMgA4AgAMAAAwBAAAMgA4BAAMAAAgDAAACAwAACAMAAAwDAAAIAgAAAgMAAAgCAAAFAwAACAQAAAIDAAAIBAAABQAAAAgEAAAOKAAAiAACAACx++sTkIAWw+R7uHiEwXIocXunucKDvQ5WSJ7oK89SHVsCi3vgdk4CV3hQZ6lLDvwsftNwzYqzFzZyIXPkR15xXGy4j\/8RE04AqF3L6rnl4kSFK8ao0Ashh\/3kXMb9tCb5RitTqZrxo1fBcVb7A7oPwAwOnJNHigc5D1k2OVhjzSkAABgEvd5QXYxmcM3GjeZtcZGvHLA3lSkAABwAAEAEq1KQqOfFPfZ6rmfMr0R1F4jORZkAAAAcAABABfY+rBnlsnnwA5bb6lPTmpcNo5hy"}
00768{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":955,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":36,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946763527783000,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":776,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":776,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":776,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946763527783000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.195","src_port":10500,"dst_port":500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3}
01540{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":955,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":1,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":818,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":818,"pkt_l4_len":784,"thread_ts_usec":946763527783000,"pkt":"eJS0JASgYDjgxTWgCABFAAMkyf9AAD8RggzAqAJkbe27wykEAfQDED50h60nd4XOo4EAAAAAAAAAACEgIggAAAAAAAADCCIAAggCAABQAQEACAMAAAwBAAAMgA4AgAMAAAwBAAAMgA4BAAMAAAgDAAACAwAACAMAAAwDAAAIAgAAAgMAAAgCAAAFAwAACAQAAAIAAAAIBAAABQAAAbQCAQAuAwAACAEAAAMDAAAMAQAADIAOAIADAAAMAQAADIAOAMADAAAMAQAADIAOAQADAAAMAQAADYAOAIADAAAMAQAADYAOAMADAAAMAQAADYAOAQADAAAMAQAAEoAOAIADAAAMAQAAEoAOAMADAAAMAQAAEoAOAQADAAAMAQAAE4AOAIADAAAMAQAAE4AOAMADAAAMAQAAE4AOAQADAAAMAQAAFIAOAIADAAAMAQAAFIAOAMADAAAMAQAAFIAOAQADAAAIAwAAAQMAAAgDAAACAwAACAMAAAUDAAAIAwAADAMAAAgDAAANAwAACAMAAA4DAAAIAgAAAQMAAAgCAAACAwAACAIAAAQDAAAIAgAABQMAAAgCAAAGAwAACAIAAAcDAAAIBAAAAgMAAAgEAAAFAwAACAQAAA4DAAAIBAAADwMAAAgEAAAQAwAACAQAABIDAAAIBAAAEwMAAAgEAAAUAwAACAQAABUDAAAIBAAAFgMAAAgEAAAXAwAACAQAABgDAAAIBAAAGQMAAAgEAAAaAwAACAQAABsDAAAIBAAAHAMAAAgEAAAdAAAACAQAAB4oAACIAAIAAEnKegIkLOmW4KZNcOCo7ZOC4licZ2A51HwGaEIiqoXRPN6FcRoNRdAJs+VA4OoEhdOX8Fx4+MU+pUH2RMi10WP9fW5dlYg6Cr9HTfi+4X5mNAA6iu7R0SUnBzU7WFhgJmUeZ23\/+YRhQU1yMpmQB5bWydw9ZfvTkPXAog0gKlZ1KQAAJIVS0Rg+btu6BkuEgsgaurW3aJ4eaYYGQ6VjkOvvz6QMKQAAHAAAQASo5HDOkRKoIfuPc\/+LezYZYFoAhAAAABwAAEAFi9H7SlG8iBMVMxjPqyusPgxIUYI="}
00864{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":955,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":36,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946763527783000,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":776,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":776,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":776,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946763527783000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.195","src_port":10500,"dst_port":500,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00572{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":956,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":2,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"thread_ts_usec":946763527783000,"pkt":"YDjgxTWgeJS0JASgCABFAABQw\/QAAPcREutt7bvDwKgCZAH0KQQAPDt0h60nd4XOo4EAAAAAAAAAACkgIiAAAAAAAAAANAAAABgAAEAGAAFWSjMix2hDw5Uoh9iWqg=="}
01572{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":957,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":3,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":842,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":842,"pkt_l4_len":808,"thread_ts_usec":946763527783000,"pkt":"eJS0JASgYDjgxTWgCABFAAM8ygVAAD8Rge7AqAJkbe27wykEAfQDKIzIh60nd4XOo4EAAAAAAAAAACkgIggAAAAAAAADICEAABgAAEAGAAFWSjMix2hDw5Uoh9iWqiIAAggCAABQAQEACAMAAAwBAAAMgA4AgAMAAAwBAAAMgA4BAAMAAAgDAAACAwAACAMAAAwDAAAIAgAAAgMAAAgCAAAFAwAACAQAAAIAAAAIBAAABQAAAbQCAQAuAwAACAEAAAMDAAAMAQAADIAOAIADAAAMAQAADIAOAMADAAAMAQAADIAOAQADAAAMAQAADYAOAIADAAAMAQAADYAOAMADAAAMAQAADYAOAQADAAAMAQAAEoAOAIADAAAMAQAAEoAOAMADAAAMAQAAEoAOAQADAAAMAQAAE4AOAIADAAAMAQAAE4AOAMADAAAMAQAAE4AOAQADAAAMAQAAFIAOAIADAAAMAQAAFIAOAMADAAAMAQAAFIAOAQADAAAIAwAAAQMAAAgDAAACAwAACAMAAAUDAAAIAwAADAMAAAgDAAANAwAACAMAAA4DAAAIAgAAAQMAAAgCAAACAwAACAIAAAQDAAAIAgAABQMAAAgCAAAGAwAACAIAAAcDAAAIBAAAAgMAAAgEAAAFAwAACAQAAA4DAAAIBAAADwMAAAgEAAAQAwAACAQAABIDAAAIBAAAEwMAAAgEAAAUAwAACAQAABUDAAAIBAAAFgMAAAgEAAAXAwAACAQAABgDAAAIBAAAGQMAAAgEAAAaAwAACAQAABsDAAAIBAAAHAMAAAgEAAAdAAAACAQAAB4oAACIAAIAAEnKegIkLOmW4KZNcOCo7ZOC4licZ2A51HwGaEIiqoXRPN6FcRoNRdAJs+VA4OoEhdOX8Fx4+MU+pUH2RMi10WP9fW5dlYg6Cr9HTfi+4X5mNAA6iu7R0SUnBzU7WFhgJmUeZ23\/+YRhQU1yMpmQB5bWydw9ZfvTkPXAog0gKlZ1KQAAJIVS0Rg+btu6BkuEgsgaurW3aJ4eaYYGQ6VjkOvvz6QMKQAAHAAAQASo5HDOkRKoIfuPc\/+LezYZYFoAhAAAABwAAEAFi9H7SlG8iBMVMxjPqyusPgxIUYI="}
01302{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":983,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":34,"flow_state":"finished","flow_src_packets_processed":15,"flow_dst_packets_processed":17,"flow_first_seen":946763527783000,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":96,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1332,"flow_dst_max_l4_payload_len":1332,"flow_src_tot_l4_payload_len":10224,"flow_dst_tot_l4_payload_len":7128,"midstream":0,"thread_ts_usec":946763527783000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.195","src_port":14500,"dst_port":4500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"data_analysis": {"iat": {"flow_min":0,"flow_avg":0.0,"flow_max":0,"flow_stddev":0.0,"c_to_s_min":0,"c_to_s_avg":0.0,"c_to_s_max":0,"c_to_s_stddev":0.0,"s_to_c_min":0,"s_to_c_avg":0.0,"s_to_c_max":0,"s_to_c_stddev":0.0},"pktlen": {"c_to_s_min":138,"c_to_s_avg":723.6,"c_to_s_max":1374,"c_to_s_stddev":501.1,"s_to_c_min":122,"s_to_c_avg":461.3,"s_to_c_max":1374,"s_to_c_stddev":438.3}},"ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
01303{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":1048,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":18,"flow_state":"finished","flow_src_packets_processed":15,"flow_dst_packets_processed":17,"flow_first_seen":946763527783000,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":96,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1332,"flow_dst_max_l4_payload_len":1332,"flow_src_tot_l4_payload_len":10240,"flow_dst_tot_l4_payload_len":5876,"midstream":0,"thread_ts_usec":946763527783000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.225","src_port":14500,"dst_port":4500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"data_analysis": {"iat": {"flow_min":0,"flow_avg":0.0,"flow_max":0,"flow_stddev":0.0,"c_to_s_min":0,"c_to_s_avg":0.0,"c_to_s_max":0,"c_to_s_stddev":0.0,"s_to_c_min":0,"s_to_c_avg":0.0,"s_to_c_max":0,"s_to_c_stddev":0.0},"pktlen": {"c_to_s_min":138,"c_to_s_avg":724.7,"c_to_s_max":1374,"c_to_s_stddev":501.6,"s_to_c_min":122,"s_to_c_avg":387.6,"s_to_c_max":1374,"s_to_c_stddev":380.1}},"ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00916{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1080,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":28,"flow_state":"finished","flow_src_packets_processed":37,"flow_dst_packets_processed":53,"flow_first_seen":946763527783000,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":96,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1332,"flow_dst_max_l4_payload_len":1332,"flow_src_tot_l4_payload_len":21676,"flow_dst_tot_l4_payload_len":34636,"midstream":0,"thread_ts_usec":946763527783000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.130","src_port":14500,"dst_port":4500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00912{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1080,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":20,"flow_state":"finished","flow_src_packets_processed":7,"flow_dst_packets_processed":8,"flow_first_seen":946763527783000,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":96,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1332,"flow_dst_max_l4_payload_len":1028,"flow_src_tot_l4_payload_len":4720,"flow_dst_tot_l4_payload_len":2208,"midstream":0,"thread_ts_usec":946763527783000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.131","src_port":14500,"dst_port":4500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00912{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1080,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":26,"flow_state":"finished","flow_src_packets_processed":7,"flow_dst_packets_processed":8,"flow_first_seen":946763527783000,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":96,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1332,"flow_dst_max_l4_payload_len":1028,"flow_src_tot_l4_payload_len":4720,"flow_dst_tot_l4_payload_len":2208,"midstream":0,"thread_ts_usec":946763527783000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.226","src_port":14500,"dst_port":4500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00918{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1080,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":24,"flow_state":"finished","flow_src_packets_processed":133,"flow_dst_packets_processed":158,"flow_first_seen":946763527783000,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":80,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1332,"flow_dst_max_l4_payload_len":1332,"flow_src_tot_l4_payload_len":84488,"flow_dst_tot_l4_payload_len":54924,"midstream":0,"thread_ts_usec":946763527783000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.227","src_port":14500,"dst_port":4500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00916{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1080,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":34,"flow_state":"finished","flow_src_packets_processed":28,"flow_dst_packets_processed":32,"flow_first_seen":946763527783000,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":96,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1332,"flow_dst_max_l4_payload_len":1332,"flow_src_tot_l4_payload_len":18816,"flow_dst_tot_l4_payload_len":15040,"midstream":0,"thread_ts_usec":946763527783000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.195","src_port":14500,"dst_port":4500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00912{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1080,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":32,"flow_state":"finished","flow_src_packets_processed":7,"flow_dst_packets_processed":8,"flow_first_seen":946763527783000,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":96,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1332,"flow_dst_max_l4_payload_len":1332,"flow_src_tot_l4_payload_len":4704,"flow_dst_tot_l4_payload_len":3460,"midstream":0,"thread_ts_usec":946763527783000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.194","src_port":14500,"dst_port":4500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00912{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1080,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":22,"flow_state":"finished","flow_src_packets_processed":7,"flow_dst_packets_processed":8,"flow_first_seen":946763527783000,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":96,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1332,"flow_dst_max_l4_payload_len":1028,"flow_src_tot_l4_payload_len":4720,"flow_dst_tot_l4_payload_len":2208,"midstream":0,"thread_ts_usec":946763527783000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.193","src_port":14500,"dst_port":4500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00916{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1080,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":18,"flow_state":"finished","flow_src_packets_processed":27,"flow_dst_packets_processed":33,"flow_first_seen":946763527783000,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":96,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1332,"flow_dst_max_l4_payload_len":1332,"flow_src_tot_l4_payload_len":18700,"flow_dst_tot_l4_payload_len":13920,"midstream":0,"thread_ts_usec":946763527783000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.225","src_port":14500,"dst_port":4500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00912{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1080,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":16,"flow_state":"finished","flow_src_packets_processed":7,"flow_dst_packets_processed":8,"flow_first_seen":946763512920000,"flow_src_last_pkt_time":946763514604000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":96,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1332,"flow_dst_max_l4_payload_len":1028,"flow_src_tot_l4_payload_len":4720,"flow_dst_tot_l4_payload_len":2208,"midstream":0,"thread_ts_usec":946763527783000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.129","src_port":14500,"dst_port":4500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00912{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1080,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":27,"flow_state":"finished","flow_src_packets_processed":12,"flow_dst_packets_processed":12,"flow_first_seen":946763527783000,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":776,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":800,"flow_dst_max_l4_payload_len":288,"flow_src_tot_l4_payload_len":9456,"flow_dst_tot_l4_payload_len":2040,"midstream":0,"thread_ts_usec":946763527783000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.130","src_port":10500,"dst_port":500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00909{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1080,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":19,"flow_state":"finished","flow_src_packets_processed":2,"flow_dst_packets_processed":2,"flow_first_seen":946763527783000,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":776,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":800,"flow_dst_max_l4_payload_len":288,"flow_src_tot_l4_payload_len":1576,"flow_dst_tot_l4_payload_len":340,"midstream":0,"thread_ts_usec":946763527783000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.131","src_port":10500,"dst_port":500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00909{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1080,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":25,"flow_state":"finished","flow_src_packets_processed":2,"flow_dst_packets_processed":2,"flow_first_seen":946763527783000,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":776,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":800,"flow_dst_max_l4_payload_len":288,"flow_src_tot_l4_payload_len":1576,"flow_dst_tot_l4_payload_len":340,"midstream":0,"thread_ts_usec":946763527783000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.226","src_port":10500,"dst_port":500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00913{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1080,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":23,"flow_state":"finished","flow_src_packets_processed":54,"flow_dst_packets_processed":53,"flow_first_seen":946763527783000,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":776,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":800,"flow_dst_max_l4_payload_len":288,"flow_src_tot_l4_payload_len":42552,"flow_dst_tot_l4_payload_len":8892,"midstream":0,"thread_ts_usec":946763527783000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.227","src_port":10500,"dst_port":500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00912{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1080,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":36,"flow_state":"finished","flow_src_packets_processed":12,"flow_dst_packets_processed":12,"flow_first_seen":946763527783000,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":776,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":800,"flow_dst_max_l4_payload_len":288,"flow_src_tot_l4_payload_len":9456,"flow_dst_tot_l4_payload_len":2040,"midstream":0,"thread_ts_usec":946763527783000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.195","src_port":10500,"dst_port":500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00909{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1080,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":31,"flow_state":"finished","flow_src_packets_processed":2,"flow_dst_packets_processed":2,"flow_first_seen":946763527783000,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":776,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":800,"flow_dst_max_l4_payload_len":288,"flow_src_tot_l4_payload_len":1576,"flow_dst_tot_l4_payload_len":340,"midstream":0,"thread_ts_usec":946763527783000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.194","src_port":10500,"dst_port":500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00909{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1080,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":21,"flow_state":"finished","flow_src_packets_processed":2,"flow_dst_packets_processed":2,"flow_first_seen":946763527783000,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":776,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":800,"flow_dst_max_l4_payload_len":288,"flow_src_tot_l4_payload_len":1576,"flow_dst_tot_l4_payload_len":340,"midstream":0,"thread_ts_usec":946763527783000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.193","src_port":10500,"dst_port":500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00910{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1080,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":17,"flow_state":"finished","flow_src_packets_processed":8,"flow_dst_packets_processed":8,"flow_first_seen":946763527783000,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":776,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":800,"flow_dst_max_l4_payload_len":288,"flow_src_tot_l4_payload_len":6304,"flow_dst_tot_l4_payload_len":1360,"midstream":0,"thread_ts_usec":946763527783000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.225","src_port":10500,"dst_port":500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00909{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1080,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":15,"flow_state":"finished","flow_src_packets_processed":2,"flow_dst_packets_processed":2,"flow_first_seen":946763512822000,"flow_src_last_pkt_time":946763512859000,"flow_dst_last_pkt_time":946763512882000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":776,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":800,"flow_dst_max_l4_payload_len":288,"flow_src_tot_l4_payload_len":1576,"flow_dst_tot_l4_payload_len":340,"midstream":0,"thread_ts_usec":946763527783000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.129","src_port":10500,"dst_port":500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00912{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1080,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":33,"flow_state":"finished","flow_src_packets_processed":7,"flow_dst_packets_processed":8,"flow_first_seen":946763527783000,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":96,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1108,"flow_dst_max_l4_payload_len":1108,"flow_src_tot_l4_payload_len":3376,"flow_dst_tot_l4_payload_len":3316,"midstream":0,"thread_ts_usec":946763527783000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.194","src_port":41618,"dst_port":4500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00909{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1080,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":35,"flow_state":"finished","flow_src_packets_processed":4,"flow_dst_packets_processed":4,"flow_first_seen":946763527783000,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":336,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":488,"flow_dst_max_l4_payload_len":416,"flow_src_tot_l4_payload_len":1648,"flow_dst_tot_l4_payload_len":558,"midstream":0,"thread_ts_usec":946763527783000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.194","src_port":41618,"dst_port":500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00912{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1080,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":29,"flow_state":"finished","flow_src_packets_processed":6,"flow_dst_packets_processed":9,"flow_first_seen":946763527783000,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":96,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1156,"flow_dst_max_l4_payload_len":1156,"flow_src_tot_l4_payload_len":3212,"flow_dst_tot_l4_payload_len":5544,"midstream":0,"thread_ts_usec":946763527783000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.193","src_port":42593,"dst_port":4500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00909{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1080,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","flow_id":30,"flow_state":"finished","flow_src_packets_processed":4,"flow_dst_packets_processed":4,"flow_first_seen":946763527783000,"flow_src_last_pkt_time":946763527783000,"flow_dst_last_pkt_time":946763527783000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":336,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":488,"flow_dst_max_l4_payload_len":416,"flow_src_tot_l4_payload_len":1648,"flow_dst_tot_l4_payload_len":558,"midstream":0,"thread_ts_usec":946763527783000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"109.237.187.193","src_port":42593,"dst_port":500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"IPSec","proto_id":"79","encrypted":1,"breed":"Safe","category_id":2,"category":"VPN"}}
00580{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":1080,"source":"ipsec_isakmp_esp.pcap","alias":"nDPId-test","packets-captured":1080,"packets-processed":1080,"total-skipped-flows":0,"total-l4-payload-len":535322,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":36,"total-detection-updates":0,"total-updates":12,"current-active-flows":0,"total-active-flows":36,"total-idle-flows":36,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":247,"global_ts_usec":946763527783000}
~~~~~~~~~~~~~~~~~~~~ SUMMARY ~~~~~~~~~~~~~~~~~~~~
~~ packets captured/processed: 1080/1080
~~ skipped flows.............: 0
~~ total layer4 data length..: 535322 bytes
~~ total detected protocols..: 36
~~ total active/idle flows...: 36/36
~~ total timeout flows.......: 0
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~ total memory allocated....: 6136097 bytes
~~ total memory freed........: 6136097 bytes
~~ total allocations/frees...: 122919/122919
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~ json string min len.......: 487 chars
~~ json string max len.......: 1619 chars
~~ json string avg len.......: 1053 chars
|