1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
|
00476{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"memcached.cap","alias":"nDPId-test","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"generic-max-idle-time":600000,"icmp-max-idle-time":30000,"udp-max-idle-time":180000,"tcp-max-idle-time":7440000,"tcp-max-post-end-flow-time":120000,"max-packets-per-flow-to-send":15,"max-packets-per-flow-to-process":255}
00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"memcached.cap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1534343745954,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":59604,"dst_port":11211,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00437{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"memcached.cap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534343745,"pkt_ts_usec":954071,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AAAAAAAAAAAAAAAACABFAAA8pT5AAEAGl3t\/AAABfwAAAejUK8sskd7QAAAAAKACqqr+MAAAAgT\/1wQCCAopIHvuAAAAAAEDAwc="}
00437{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"memcached.cap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534343745,"pkt_ts_usec":954090,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AAAAAAAAAAAAAAAACABFAAA8AABAAEAGPLp\/AAABfwAAASvL6NTLJnx6LJHe0aASqqr+MAAAAgT\/1wQCCAopIHvuKSB77gEDAwc="}
00424{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"memcached.cap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534343745,"pkt_ts_usec":954104,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AAAAAAAAAAAAAAAACABFAAA0pT9AAEAGl4J\/AAABfwAAAejUK8sskd7RyyZ8e4AQAVb+KAAAAQEICikge+4pIHvu"}
00436{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"memcached.cap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534343745,"pkt_ts_usec":954230,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"pkt":"AAAAAAAAAAAAAAAACABFAAA7pUBAAEAGl3p\/AAABfwAAAejUK8sskd7RyyZ8e4AYAVb+LwAAAQEICikge+4pIHvuc3RhdHMNCg=="}
00424{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"memcached.cap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534343745,"pkt_ts_usec":954238,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AAAAAAAAAAAAAAAACABFAAA0B5VAAEAGNS1\/AAABfwAAASvL6NTLJnx7LJHe2IAQAVb+KAAAAQEICikge+4pIHvu"}
01802{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"memcached.cap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534343745,"pkt_ts_usec":954346,"pkt_caplen":1094,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1094,"pkt_l4_len":1060,"pkt":"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"}
00533{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":6,"source":"memcached.cap","alias":"nDPId-test","flow_id":1,"flow_packet_id":6,"flow_first_seen":1534343745954,"flow_last_seen":1534343745954,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1028,"flow_tot_l4_payload_len":1035,"flow_avg_l4_payload_len":172,"midstream":0,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":59604,"dst_port":11211,"l4_proto":"tcp","ndpi": {"proto":"Memcached","breed":"Acceptable","category":"Network"}}
00424{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"memcached.cap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534343745,"pkt_ts_usec":954387,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AAAAAAAAAAAAAAAACABFAAA0pUFAAEAGl4B\/AAABfwAAAejUK8sskd7YyyaAf4AQAWb+KAAAAQEICikge+4pIHvu"}
00424{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"memcached.cap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534343745,"pkt_ts_usec":954689,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AAAAAAAAAAAAAAAACABFAAA0pUJAAEAGl39\/AAABfwAAAejUK8sskd7YyyaAf4ARAWb+KAAAAQEICikge+4pIHvu"}
00425{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"memcached.cap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534343745,"pkt_ts_usec":954737,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AAAAAAAAAAAAAAAACABFAAA0B5dAAEAGNSt\/AAABfwAAASvL6NTLJoB\/LJHe2YARAVb+KAAAAQEICikge+4pIHvu"}
00426{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"memcached.cap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534343745,"pkt_ts_usec":954749,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AAAAAAAAAAAAAAAACABFAAA0pUNAAEAGl35\/AAABfwAAAejUK8sskd7ZyyaAgIAQAWb+KAAAAQEICikge+4pIHvu"}
00498{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":10,"source":"memcached.cap","alias":"nDPId-test","flow_id":1,"flow_packet_id":10,"flow_first_seen":1534343745954,"flow_last_seen":1534343745954,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1028,"flow_tot_l4_payload_len":1035,"flow_avg_l4_payload_len":103,"midstream":0,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":59604,"dst_port":11211,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00128{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":10,"source":"memcached.cap","alias":"nDPId-test"}
~~~~~~~~~~~~~~~~~~~~ SUMMARY ~~~~~~~~~~~~~~~~~~~~
~~ packets captured/processed: 10/10
~~ skipped flows.............: 0
~~ total layer4 data length..: 1371 bytes
~~ total detected protocols..: 1
~~ total active/idle flows...: 1/1
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~ total memory allocated....: 4822413 bytes
~~ total memory freed........: 4822413 bytes
~~ total allocations/frees...: 58369/58369
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|