1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
|
00474{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"no_sni.pcap","alias":"nDPId-test","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"generic-max-idle-time":600000,"icmp-max-idle-time":30000,"udp-max-idle-time":180000,"tcp-max-idle-time":7440000,"tcp-max-post-end-flow-time":120000,"max-packets-per-flow-to-send":15,"max-packets-per-flow-to-process":255}
00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"no_sni.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1604822444474,"flow_last_seen":0,"flow_min_l4_payload_len":39,"flow_max_l4_payload_len":39,"flow_tot_l4_payload_len":39,"flow_avg_l4_payload_len":39,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.16.249.249","src_port":51331,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00459{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822444,"pkt_ts_usec":474923,"pkt_caplen":93,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":93,"pkt_l4_len":59,"pkt":"EBMxuRBeeDHBvV4kCABFAABPAABAAEAGFoDAqAF3aBD5+ciDAbvkc0fPNh\/971AYEABWfwAAFwMDACKpSo7n5l1NtXHPvYJ17DEID+iXo6vcSBPbb4QBvLt6N\/RR"}
00440{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822444,"pkt_ts_usec":475424,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMxuRBeeDHBvV4kCABFAABAAABAAEAGFo\/AqAF3aBD5+ciDAbvkc0f2Nh\/971AYEAB\/fAAAFwMDABPsQXLhLYpNcnxO3uEm2chWzCNj"}
00406{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822444,"pkt_ts_usec":475512,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMxuRBeeDHBvV4kCABFAAAoAABAAEAGFqfAqAF3aBD5+ciDAbvkc0gONh\/971AREABQ2gAA"}
00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4,"source":"no_sni.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1604822444486,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.16.249.249","src_port":51606,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00441{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822444,"pkt_ts_usec":486731,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMxuRBeeDHBvV4kCABFAABAAABAAEAGFo\/AqAF3aBD5+cmWAbsdU0ZpAAAAALAC\/\/\/IBQAAAgQFtAEDAwYBAQgKKlLxbAAAAAAEAgAA"}
00414{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822444,"pkt_ts_usec":593192,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"eDHBvV4kEBMxuRBeCABFAAAoz19AADkGTkdoEPn5wKgBdwG7yIM2H\/3v5HNIDlAQAERglwAAAAAAAAAA"}
00414{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822444,"pkt_ts_usec":594798,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"eDHBvV4kEBMxuRBeCABFAAAoz2BAADkGTkZoEPn5wKgBdwG7yIM2H\/3v5HNIDlARAERglgAAAAAAAAAA"}
00406{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822444,"pkt_ts_usec":594879,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMxuRBeeDHBvV4kCABFAAAoAABAAEAGFqfAqAF3aBD5+ciDAbvkc0gONh\/98FAREABQ2QAA"}
00414{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822444,"pkt_ts_usec":595017,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"eDHBvV4kEBMxuRBeCABFAAAoz2FAADkGTkVoEPn5wKgBdwG7yIM2H\/3w5HNID1AQAERglQAAAAAAAAAA"}
00423{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822444,"pkt_ts_usec":624675,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eDHBvV4kEBMxuRBeCABFAAA0AABAADkGHZtoEPn5wKgBdwG7yZbnV+zfHVNGaoAS\/\/9HygAAAgQFeAEBBAIBAwMK"}
00406{"flow_id":2,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822444,"pkt_ts_usec":624753,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMxuRBeeDHBvV4kCABFAAAoAABAAEAGFqfAqAF3aBD5+cmWAbsdU0Zq51fs4FAQEAB4YwAA"}
01236{"flow_id":2,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822444,"pkt_ts_usec":629426,"pkt_caplen":670,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":670,"pkt_l4_len":636,"pkt":"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"}
00790{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":11,"source":"no_sni.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":4,"flow_first_seen":1604822444486,"flow_last_seen":1604822444629,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":616,"flow_tot_l4_payload_len":616,"flow_avg_l4_payload_len":154,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.16.249.249","src_port":51606,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mozilla.cloudflare-dns.com","ja3":"5dd472f5a4060141b8cfd05eecf10d11","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}}
00414{"flow_id":2,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822444,"pkt_ts_usec":629706,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"EBMxuRBeeDHBvV4kCABFAAAuAABAAEAGFqHAqAF3aBD5+cmWAbsdU0jS51fs4FAYEABd6QAAFAMDAAEB"}
00647{"flow_id":2,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822444,"pkt_ts_usec":629799,"pkt_caplen":224,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":224,"pkt_l4_len":190,"pkt":"EBMxuRBeeDHBvV4kCABFAADSAABAAEAGFf3AqAF3aBD5+cmWAbsdU0jY51fs4FAYEACjfwAAFwMDAKW4k2EWcWuc6xL3buCNlVs5ZLZz6Z4Of8vW\/Q3EhCGwprLV2IWTE\/rCr6y\/6WWQf7EsmFisp2W5sIg2Ja\/AdtGmdrmDYN\/dTEF0Ao\/T059mWW6gmzlGAzI++2c8A\/65sCD9UX9YZhdiK9773tvHv\/5XG\/DZJ9HN6hdZyxOazZunT8x9BvEroY\/LUwlfJLcnB0BdL4Gf5SHC06tsrntHkmTkJhKpwgQ="}
00414{"flow_id":2,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822444,"pkt_ts_usec":804936,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"eDHBvV4kEBMxuRBeCABFAAAoPGhAADkG4T5oEPn5wKgBdwG7yZbnV+zgHVNI0lAQAEKFuQAAAAAAAAAA"}
01334{"flow_id":2,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822444,"pkt_ts_usec":807971,"pkt_caplen":736,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":736,"pkt_l4_len":702,"pkt":"eDHBvV4kEBMxuRBeCABFAALSPGlAADkG3pNoEPn5wKgBdwG7yZbnV+zgHVNI0lAYAEJUoAAAFgMDAIACAAB8AwP0YW7203r+Mm6u9JuQcKUrHPm7Ob25qh5y5y0+bI755CCS0jgQR8zClHgewuqoUAH32VWvHW5IuO5vXWulcb1skBMBAAA0ACkAAgAAADMAJAAdACCF5jDS3VDb1X1PUhsMwtkQHZjuhfco\/pqKiHwCKcAbbAArAAIDBBQDAwABARcDAwBIioYN\/KO5cBS51lMZ6wA1JGbPI\/NgW+2QyEq5HcY7dXZQ0i5A0e95kfPS7KS+h\/gWPPhCAfBT\/E6035TpylC7fbJlIZhexFu1FwMDAc100YCNWyKi5AEeWT++1AwsTA5HFW+IBkrOk4Sv2Lyj4HgeOtvKmDHNZ8zLZCnM3cXwO2teIQwTddn+2ZPI5jqCLJz36xkXDO\/6mf6BYRuXNsp5pFY\/ierT34M2lqLNOCHl0Km0eZJMPbJothcsYtc1anhepVw1Sy\/ULyWmYGackQZHh5xP7O1bq0I+P5OUvaCKC2yFVRkB7ufEFqRZKdo+uYO921\/CGu+dWl\/J+wKyEWLXtCfyKLCiyt8W018wBBkhIOM0s54TqFSJko1lKtgtFNtEbx9U\/yXQowwskoK7Ic5GFJ\/\/cOPmtKkIncc0N1jTq74XFfh+B6MKApU1kr8m6AaBOFKgCGasjXa3G6KEP+GjFbfceOoEc7uPfvtLITbm65QWBfKLrNm9q6pioIqc1n1Gq6IHLthhX8SZ7qKK4s9BRel+KIndvcfMP8OYc+47ybWAuw4JdBsVnby5JdkVKfZKdED9HqzQNo+ixNJhXeYq78cKM+jKKpMYrWmBd1IkqbGpB+GnRISWxfQpi164PTfIyt6DMniqmxH4ZnDIzItwl5hZ0hUtC0DTR7TiX+HExsOIiZuJJO4gmmdtHSeL6EGeC9NsAsbxYMI91Q=="}
00830{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":15,"source":"no_sni.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":8,"flow_first_seen":1604822444486,"flow_last_seen":1604822444807,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":682,"flow_tot_l4_payload_len":1474,"flow_avg_l4_payload_len":184,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.16.249.249","src_port":51606,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.3","client_requested_server_name":"mozilla.cloudflare-dns.com","ja3":"5dd472f5a4060141b8cfd05eecf10d11","ja3s":"2b0648ab686ee45e0e7c35fcfb0eea7e","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}}
00407{"flow_id":2,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822444,"pkt_ts_usec":808041,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMxuRBeeDHBvV4kCABFAAAoAABAAEAGFqfAqAF3aBD5+cmWAbsdU0mC51fvilAQD\/VyrAAA"}
00494{"flow_id":2,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822444,"pkt_ts_usec":808127,"pkt_caplen":116,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":116,"pkt_l4_len":82,"pkt":"eDHBvV4kEBMxuRBeCABFAABmPGpAADkG4P5oEPn5wKgBdwG7yZbnV++KHVNI0lAYAEIA3gAAFwMDADn2aYj+B\/dXPxUno4kNcPEtkFzqj3LyZFhFk9xNRtVgYgSHAakE2pabNM6LB2JauqyxaikRdlEnoUA="}
00416{"flow_id":2,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822444,"pkt_ts_usec":808131,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"eDHBvV4kEBMxuRBeCABFAAAoPGtAADkG4TtoEPn5wKgBdwG7yZbnV+\/IHVNI2FAQAEKCywAAAAAAAAAA"}
00408{"flow_id":2,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822444,"pkt_ts_usec":808182,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMxuRBeeDHBvV4kCABFAAAoAABAAEAGFqfAqAF3aBD5+cmWAbsdU0mC51fvyFAQD\/RybwAA"}
00523{"flow_id":2,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822444,"pkt_ts_usec":810516,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"EBMxuRBeeDHBvV4kCABFAAB8AABAAEAGFlPAqAF3aBD5+cmWAbsdU0mC51fvyFAYD\/fHUQAAFwMDABVqsaEaWbGiD2hE9eNcKIuJuz+m8k0XAwMANcLgJIApZ4awhY0t9Na9EJgjOzFaDNzQBmzZ8s2kSdoPolqS90HDQsAnKyxNMOmP1r9hxlkm"}
00416{"flow_id":2,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822444,"pkt_ts_usec":814526,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"eDHBvV4kEBMxuRBeCABFAAAoPGxAADkG4TpoEPn5wKgBdwG7yZbnV+\/IHVNJglAQAEOCIAAAAAAAAAAA"}
00452{"flow_id":2,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822444,"pkt_ts_usec":815943,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"eDHBvV4kEBMxuRBeCABFAABHPG1AADkG4RpoEPn5wKgBdwG7yZbnV+\/IHVNJglAYAENyQAAAFwMDABqjFXpPjKZYFjKJigkOmBTtUDrQaTxYIYlVHA=="}
00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":36,"source":"no_sni.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1604822444913,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.16.124.96","src_port":51612,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00441{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822444,"pkt_ts_usec":913120,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMxuRBeeDHBvV4kCABFAABAAABAAEAGlCjAqAF3aBB8YMmcAbs\/DuN6AAAAALAC\/\/+FPgAAAgQFtAEDAwYBAQgKKlLy+gAAAAAEAgAA"}
00424{"flow_id":3,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822445,"pkt_ts_usec":34293,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eDHBvV4kEBMxuRBeCABFAAA0AABAADkGmzRoEHxgwKgBdwG7yZyEa\/jPPw7je4AS\/\/9djQAAAgQFeAEBBAIBAwMK"}
00406{"flow_id":3,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822445,"pkt_ts_usec":34393,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMxuRBeeDHBvV4kCABFAAAoAABAAEAGlEDAqAF3aBB8YMmcAbs\/DuN7hGv40FAQEACOJgAA"}
01691{"flow_id":3,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822445,"pkt_ts_usec":39824,"pkt_caplen":1001,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1001,"pkt_l4_len":967,"pkt":"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"}
00769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":45,"source":"no_sni.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":4,"flow_first_seen":1604822444913,"flow_last_seen":1604822445039,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":947,"flow_tot_l4_payload_len":947,"flow_avg_l4_payload_len":236,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.16.124.96","src_port":51612,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Cloudflare","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"","ja3":"398991c398d60bfa0e3f00f8782dafc9","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}}
00415{"flow_id":3,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822445,"pkt_ts_usec":134722,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"eDHBvV4kEBMxuRBeCABFAAAo0tZAADkGyGloEHxgwKgBdwG7yZyEa\/jQPw7nLlAQAEKaMQAAAAAAAAAA"}
00726{"flow_id":3,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822445,"pkt_ts_usec":135087,"pkt_caplen":286,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":286,"pkt_l4_len":252,"pkt":"eDHBvV4kEBMxuRBeCABFAAEQ0tdAADkGx4BoEHxgwKgBdwG7yZyEa\/jQPw7nLlAYAEJOTwAAFgMDAIACAAB8AwMPxMHsKBsXvES1IjShtU3FIaPaV3fodKFl182Oe4PZoSDkSSMrT+G4DHKylGZE+9t1xT9Bwk1il4gkdGKmixfHxRMBAAA0ACkAAgAAADMAJAAdACC\/+Us5ZodNdZF2v1icha31caTzrjEo6ocsJu9v6PULSQArAAIDBBQDAwABARcDAwBYTWADwDiPz5haIq\/4ANExQS4rUN8wl\/YZd0kl4RFnF8cEcaXp9PlBN\/35wR8WUVU8aP07eeMzDnxs0HLL7+7teEMfhQPIt4cLWgXltUI2LeR8t5GUBjBrhA=="}
00809{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":47,"source":"no_sni.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":6,"flow_first_seen":1604822444913,"flow_last_seen":1604822445135,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":947,"flow_tot_l4_payload_len":1179,"flow_avg_l4_payload_len":196,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.16.124.96","src_port":51612,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Cloudflare","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"","ja3":"398991c398d60bfa0e3f00f8782dafc9","ja3s":"2b0648ab686ee45e0e7c35fcfb0eea7e","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}}
00408{"flow_id":3,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822445,"pkt_ts_usec":135156,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMxuRBeeDHBvV4kCABFAAAoAABAAEAGlEDAqAF3aBB8YMmcAbs\/DucuhGv5uFAQD\/yJjwAA"}
00498{"flow_id":3,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822445,"pkt_ts_usec":136113,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"EBMxuRBeeDHBvV4kCABFAABoAABAAEAGlADAqAF3aBB8YMmcAbs\/DucuhGv5uFAYEABdSQAAFAMDAAEBFwMDADXp5plQAx+zPTYbgfadISqs3V5dZWGPL9F5D\/MmxOtwb9vpa1mthxbGN5C5qk3DeuGuWzrOHQ=="}
00641{"flow_id":3,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822445,"pkt_ts_usec":140863,"pkt_caplen":224,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":224,"pkt_l4_len":190,"pkt":"EBMxuRBeeDHBvV4kCABFAADSAABAAEAGk5bAqAF3aBB8YMmcAbs\/DuduhGv5uFAYEACXEwAAFwMDAKW0Ld72I4gnpFKbYksb5ZnY3X86o5vc4TAnm6Lnvl28lBTOl\/1ciEJE0tzuICFQLYqLiQAGAvp4JxS8UJbI\/Y8Gf\/7CUY718mdQscYFW3gY3DzMteK+i+683zwJiKyze880SzM9VH3mbqPGbsI6lE3ao5xq8Eld4x669Eu3xp0r7+T29AquWsMi0oz0pA8FQvxoqQ6mNLHE1TJJx9kvHZbBLxdz1ZY="}
01585{"flow_id":3,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822445,"pkt_ts_usec":140983,"pkt_caplen":917,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":917,"pkt_l4_len":883,"pkt":"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"}
00416{"flow_id":3,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822445,"pkt_ts_usec":212155,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"eDHBvV4kEBMxuRBeCABFAAAo0thAADkGyGdoEHxgwKgBdwG7yZyEa\/m4Pw7nblAQAEKZCQAAAAAAAAAA"}
01111{"flow_id":3,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822445,"pkt_ts_usec":212688,"pkt_caplen":566,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":566,"pkt_l4_len":532,"pkt":"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"}
00409{"flow_id":3,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":54,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822445,"pkt_ts_usec":212757,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMxuRBeeDHBvV4kCABFAAAoAABAAEAGlEDAqAF3aBB8YMmcAbs\/Dut3hGv7uFAQD\/iDSgAA"}
00416{"flow_id":3,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":55,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822445,"pkt_ts_usec":212870,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"eDHBvV4kEBMxuRBeCABFAAAo0tpAADkGyGVoEHxgwKgBdwG7yZyEa\/u4Pw7oGFAQAESWXQAAAAAAAAAA"}
00452{"flow_id":3,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822445,"pkt_ts_usec":213297,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"eDHBvV4kEBMxuRBeCABFAABH0ttAADkGyEVoEHxgwKgBdwG7yZyEa\/u4Pw7oGFAYAER7YQAAFwMDABpGxdUrLYCuTorkmz+QUVhSrRE535QMtYaa2g=="}
00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":778,"source":"no_sni.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1604822447227,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.17.198.37","src_port":51635,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00441{"flow_id":4,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":778,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":227531,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMxuRBeeDHBvV4kCABFAABAAABAAEAGSmLAqAF3aBHGJcmzAbtjbUROAAAAALAC\/\/+t4gAAAgQFtAEDAwYBAQgKKlL7RgAAAAAEAgAA"}
00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":789,"source":"no_sni.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1604822447249,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.17.198.37","src_port":51636,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00442{"flow_id":5,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":789,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":249969,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMxuRBeeDHBvV4kCABFAABAAABAAEAGSmLAqAF3aBHGJcm0AbsYxEgFAAAAALAC\/\/\/0wAAAAgQFtAEDAwYBAQgKKlL7WQAAAAAEAgAA"}
00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":805,"source":"no_sni.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1604822447287,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.22.72.170","src_port":51637,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00441{"flow_id":6,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":805,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":287011,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMxuRBeeDHBvV4kCABFAABAAABAAEAGx9jAqAF3aBZIqsm1AbvwpFrxAAAAALAC\/\/+HSQAAAgQFtAEDAwYBAQgKKlL7eQAAAAAEAgAA"}
00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":806,"source":"no_sni.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1604822447287,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.22.72.170","src_port":51638,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00442{"flow_id":7,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":806,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":287254,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMxuRBeeDHBvV4kCABFAABAAABAAEAGx9jAqAF3aBZIqsm2AbtLPosXAAAAALAC\/\/\/8iAAAAgQFtAEDAwYBAQgKKlL7eQAAAAAEAgAA"}
00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":807,"source":"no_sni.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1604822447287,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.22.72.170","src_port":51639,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00441{"flow_id":8,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":807,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":287617,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMxuRBeeDHBvV4kCABFAABAAABAAEAGx9jAqAF3aBZIqsm3AbsAL2HpAAAAALAC\/\/9wxQAAAgQFtAEDAwYBAQgKKlL7eQAAAAAEAgAA"}
00426{"flow_id":4,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":809,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":311202,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eDHBvV4kEBMxuRBeCABFAAA0AABAADcGU25oEcYlwKgBdwG7ybNKGfaqY21ET4AS\/\/\/K9AAAAgQFeAEBBAIBAwMK"}
00407{"flow_id":4,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":810,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":311306,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMxuRBeeDHBvV4kCABFAAAoAABAAEAGSnrAqAF3aBHGJcmzAbtjbURPShn2q1AQEAD7jQAA"}
01104{"flow_id":4,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":819,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":321601,"pkt_caplen":571,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":571,"pkt_l4_len":537,"pkt":"EBMxuRBeeDHBvV4kCABFAAItAABAAEAGSHXAqAF3aBHGJcmzAbtjbURPShn2q1AYEABxjAAAFgMBAgABAAH8AwOOdaINkrkni1lkg0EYhB7CXywxYLUEQaB94XZ7swcviyDoXf8Mnld+CWLGSYqiJkQGZZHCItfbHLw5GpALvsX0fwAkEwETAxMCwCvAL8ypzKjALMAwwArACcATwBQAnACdAC8ANQAKAQABjwAAAEIAQAAAPTk1MWM1NThhLTVlMDctNDdjYS1hMGMwLTIyNWRhMWIzMzE2My5pcy1jZi5oZWxwLmV2ZXJ5MWRucy5uZXQAFwAA\/wEAAQAACgAOAAwAHQAXABgAGQEAAQEACwACAQAAIwAAABAADgAMAmgyCGh0dHAvMS4xAAUABQEAAAAAADMAawBpAB0AIOfwyLIVH0Su0me3OGwu5ql9kHcNhOKA2\/oA4t1UmEYWABcAQQQbVWVY2y3r6Noo9p6qd3fGD31lfhwkBleOSQVZR94Q2uMqa3NtF3kY1er0qJelDJ3SvS5bjVDkBqwPJYfE80afACsABQQDBAMDAA0AGAAWBAMFAwYDCAQIBQgGBAEFAQYBAgMCAQAtAAIBAQAcAAJAAQAVAGUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="}
00831{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":819,"source":"no_sni.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":4,"flow_first_seen":1604822447227,"flow_last_seen":1604822447321,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":517,"flow_tot_l4_payload_len":517,"flow_avg_l4_payload_len":129,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.17.198.37","src_port":51635,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Cloudflare","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"951c558a-5e07-47ca-a0c0-225da1b33163.is-cf.help.every1dns.net","ja3":"1fd36067223570569bbf156fece40978","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}}
00425{"flow_id":5,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":820,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":325440,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eDHBvV4kEBMxuRBeCABFAAA0AABAADcGU25oEcYlwKgBdwG7ybQgqbhsGMRIBoAS\/\/95lAAAAgQFeAEBBAIBAwMK"}
00407{"flow_id":5,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":821,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":325515,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMxuRBeeDHBvV4kCABFAAAoAABAAEAGSnrAqAF3aBHGJcm0AbsYxEgGIKm4bVAQEACqLQAA"}
01104{"flow_id":5,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":822,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":330671,"pkt_caplen":571,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":571,"pkt_l4_len":537,"pkt":"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"}
00832{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":822,"source":"no_sni.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":4,"flow_first_seen":1604822447249,"flow_last_seen":1604822447330,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":517,"flow_tot_l4_payload_len":517,"flow_avg_l4_payload_len":129,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.17.198.37","src_port":51636,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Cloudflare","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"951c558a-5e07-47ca-a0c0-225da1b33163.is-doh.help.every1dns.net","ja3":"1fd36067223570569bbf156fece40978","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}}
00425{"flow_id":6,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":823,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":368937,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eDHBvV4kEBMxuRBeCABFAAA0AABAADQG0+RoFkiqwKgBdwG7ybVDiAdt8KRa8oAS\/\/+aXQAAAgQFeAEBBAIBAwMK"}
00408{"flow_id":6,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":824,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":369036,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMxuRBeeDHBvV4kCABFAAAoAABAAEAGx\/DAqAF3aBZIqsm1AbvwpFryQ4gHblAQEADK9gAA"}
00425{"flow_id":7,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":825,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":370587,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eDHBvV4kEBMxuRBeCABFAAA0AABAADQG0+RoFkiqwKgBdwG7ybbraGnySz6LGIAS\/\/8FNwAAAgQFeAEBBAIBAwMK"}
00408{"flow_id":7,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":826,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":370657,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMxuRBeeDHBvV4kCABFAAAoAABAAEAGx\/DAqAF3aBZIqsm2AbtLPosY62hp81AQEAA10AAA"}
00426{"flow_id":8,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":827,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":373226,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eDHBvV4kEBMxuRBeCABFAAA0AABAADQG0+RoFkiqwKgBdwG7ybcBQwC0AC9h6oAS\/\/\/M1wAAAgQFeAEBBAIBAwMK"}
00408{"flow_id":8,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":828,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":373287,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMxuRBeeDHBvV4kCABFAAAoAABAAEAGx\/DAqAF3aBZIqsm3AbsAL2HqAUMAtVAQEAD9cAAA"}
01378{"flow_id":6,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":829,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":374307,"pkt_caplen":766,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":766,"pkt_l4_len":732,"pkt":"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"}
00770{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":829,"source":"no_sni.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":4,"flow_first_seen":1604822447287,"flow_last_seen":1604822447374,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":712,"flow_tot_l4_payload_len":712,"flow_avg_l4_payload_len":178,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.22.72.170","src_port":51637,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Cloudflare","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"","ja3":"16fcce72c01e54fab4ddabce048c0f5b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}}
01377{"flow_id":8,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":840,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":380742,"pkt_caplen":766,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":766,"pkt_l4_len":732,"pkt":"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"}
00770{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":840,"source":"no_sni.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":4,"flow_first_seen":1604822447287,"flow_last_seen":1604822447380,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":712,"flow_tot_l4_payload_len":712,"flow_avg_l4_payload_len":178,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.22.72.170","src_port":51639,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Cloudflare","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"","ja3":"16fcce72c01e54fab4ddabce048c0f5b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}}
01375{"flow_id":7,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":841,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":386869,"pkt_caplen":766,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":766,"pkt_l4_len":732,"pkt":"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"}
00770{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":841,"source":"no_sni.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":4,"flow_first_seen":1604822447287,"flow_last_seen":1604822447386,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":712,"flow_tot_l4_payload_len":712,"flow_avg_l4_payload_len":178,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.22.72.170","src_port":51638,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Cloudflare","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"","ja3":"16fcce72c01e54fab4ddabce048c0f5b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}}
00415{"flow_id":4,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":842,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":410183,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"eDHBvV4kEBMxuRBeCABFAAAo1yZAADcGfFNoEcYlwKgBdwG7ybNKGfarY21GVFAQAEIJRwAAAAAAAAAA"}
02395{"flow_id":4,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":843,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":412088,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"}
00872{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":843,"source":"no_sni.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":6,"flow_first_seen":1604822447227,"flow_last_seen":1604822447412,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1460,"flow_tot_l4_payload_len":1977,"flow_avg_l4_payload_len":329,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.17.198.37","src_port":51635,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Cloudflare","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"951c558a-5e07-47ca-a0c0-225da1b33163.is-cf.help.every1dns.net","ja3":"1fd36067223570569bbf156fece40978","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}}
02047{"flow_id":4,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":844,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":413124,"pkt_caplen":1263,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1263,"pkt_l4_len":1229,"pkt":"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"}
00407{"flow_id":4,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":845,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":413200,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMxuRBeeDHBvV4kCABFAAAoAABAAEAGSnrAqAF3aBHGJcmzAbtjbUZUShoBGFAQD9jvQwAA"}
00498{"flow_id":4,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":846,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":419237,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"EBMxuRBeeDHBvV4kCABFAABoAABAAEAGSjrAqAF3aBHGJcmzAbtjbUZUShoBGFAYEABl3AAAFAMDAAEBFwMDADUZqwsLW1MkWOtGmKUtw8ZXCceoyCV0DTl4iQE73N2jzB8KcE69+NyCK\/3rgG9EB0B1hfuvyw=="}
00642{"flow_id":4,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":847,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":419891,"pkt_caplen":224,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":224,"pkt_l4_len":190,"pkt":"EBMxuRBeeDHBvV4kCABFAADSAABAAEAGSdDAqAF3aBHGJcmzAbtjbUaUShoBGFAYEADLSwAAFwMDAKUYyGk0zcfPiUzkI09Rstvy204oDYTqLT\/0hS9EL1gRuUwZL2uYc3oQEM\/bH8L9P9Yt5PcO\/JtsU6o8KkHsvNl2hWhL0nTr4fZLkMCqNClumKtPvnWOcpce02j77IduStu6pJz3Qwjw2dEjhHiusQdfUdjmZUsjxtrM2XLh14qCSKJsiKY6zwFdsFL5hUhr2MZQ6W5gNAymy71PZbh3v5LiNT4kIYc="}
00865{"flow_id":4,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":848,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":419947,"pkt_caplen":385,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":385,"pkt_l4_len":351,"pkt":"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"}
00415{"flow_id":5,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":859,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":437859,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"eDHBvV4kEBMxuRBeCABFAAAo2NFAADcGeqhoEcYlwKgBdwG7ybQgqbhtGMRKC1AQAEK35gAAAAAAAAAA"}
02385{"flow_id":5,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":882,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":447323,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"eDHBvV4kEBMxuRBeCABFAAXc2NJAADcGdPNoEcYlwKgBdwG7ybQgqbhtGMRKC1AQAEI5TwAAFgMDAHoCAAB2AwN+twpEuBVBrLJlbS7VN0KVhH8xDmdMoENCh8FDMf9VfSBtnXms51StvlcYPwUtQJ3a2Aae1RGCTFOxqXrJXOFBFBMBAAAuADMAJAAdACDq6FTxJNpkez\/Ya9YUkqOVbU6SuHI9Pnugtii\/AsPfVAArAAIDBBQDAwABARcDAwni9b2Q+awCZLhpvq6rx0GBoqGR3hcbfiwVCVXoR7vOc7EQih2E7Gn+P0+y03zVWWWtTzs+EleCa0kqAAjlVKwVDXSMGxRFY1DiifKwL6cwqd+r8BEyw6J40QdGFir5oY0\/2+Z92HybGi7SYNCcLYT9QXUZ48wvM0HPB8VGZqqAYJGS+Ayeo3Gnn+BkkJ85G+otxzotOaKKLxfpKuAyR72prCBaP4e6vs3GO2wcv0HUFluExF3vkikUaYk0BLKIYKe0HwJe9AJQBqmjIhg0IX0M9hh9+27MNkwRinQUkFOstQyGtAmL5UAyINuGWFWdYpijxLXm4xlFD6kNWpZOT8qWmyP07VuP\/B4sSdhaMr3\/cMTTa4++fUfBMwgixReIgF7twT1aX9bPOh6oQiMTMafhG2MDDsavT2ybMYOrQI4maBQ5GJPSaNutg7o7zdYMVgp5WpS14Yk\/jlQjf6hVcnfT5ndI8HUoKm+7o9lZi0CSoqQ6pBphGuzYlkT0+BJgDItbccwYMIpIAh24FEvCEibPdqCERy2hyHXCOEVhFyzx6RI+uUCcruc7d5lgI4GEsfE8cXkW8ELlzIqcbtChRimY+R\/Xt37L9cjdu7CW0KXqtOgBsFfzLWBW\/N3qJEsbp3V\/WeTvxV9fV0KDpFZsDR8PUAztfYyxMP9cno8iDwO2kFMOYcyDjn7igj1l120sD8tIRna946zzGjnRb7v9qxDUhpk+6y2AQRl\/a4WLo6iu1ZaKwxsa\/A6rMebceQRn9quTtEwRvxU+UN1zm71n4oaqoUhfNNp3Kt4dhupCaarybs8m\/sNWTQppIvxpJptWAawUrGPqCttzsEpDF0clBMy\/RZmAJQXX3LPt2pkIso3ZLic4dgzJol269WK58oWKNBXqIvVBqVZD1U6gd6ObTUD3GnZQLVrj85gloQ975ywMo8DXWuzoIaj+SzYB+SVrYps7IpHEV1sb3kO48CpSrHrWZ1eEA8SOkmNDO9if23bqY\/xsO5l2nd1AWTCjzv7n\/1gCjCfwkGNosweBvOrsE626qDGGdy527VxJ5+6TJUwg2xbDCpFUG0T0t+7PlI7BZQmuq5U+gia5McTvv36kvi5FVPVQnQ0+UaxM1BJME9QcpRMogGVXZSKsnVu657nBtqhSsSbqVWWLuIA80c+D+ijvxFW2v6MgFU6SVWyfm2SefK0waSZ6\/WHderdsxFzlSxKpqnNNxHdA9I9WXsAfpACp+EAxlDq86N+iWS05ntTWZGLMApucPBXosrfWy7S+FURs0hCvH8iahssuTq0cI8b1S\/5FulOzpBKcgdzsIgNaV77OKrnAPLIoRKphF+JGKEHBzWNGeb+VZGbmzysGcZyFjcg+Ha99lJ3j0qApEkzjH2wTjVuHeqPJC3Va3PrT8XmRQaGK8kfPEk7CbAFWQevHVi1wAq2Ob2F9fGca5UiMqPg5nTg997CmWuQ6zm443iwiTDXV+s+h\/vZa1iMrhsyOBFFpCZ\/qxSTcb4u9Ll++occs3p07m9mAgDVy2\/fbJEwnkmTf7RrA3smPGrjkopVc0yBnuAezpNSYWUXnN4z\/pxbXlYmpWAQaanC0haKXKpVlzGV2ybBABN3wjqVHOfmrD3A9U038GrWUFXr5P7e7hvqDdhUtR4mUBz7\/VRegW5s8RH1z1EGIhuhk1SVVqk50spv7n3smOmhmiR3GA7mGskcvlctTRGQ8jbkwNYpKd1HF\/rfnSYe4FM8LKl35MH7o\/C47hOIUgojPzOY="}
00873{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":882,"source":"no_sni.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":6,"flow_first_seen":1604822447249,"flow_last_seen":1604822447447,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1460,"flow_tot_l4_payload_len":1977,"flow_avg_l4_payload_len":329,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.17.198.37","src_port":51636,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Cloudflare","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"951c558a-5e07-47ca-a0c0-225da1b33163.is-doh.help.every1dns.net","ja3":"1fd36067223570569bbf156fece40978","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}}
02046{"flow_id":5,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":883,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":447877,"pkt_caplen":1262,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1262,"pkt_l4_len":1228,"pkt":"eDHBvV4kEBMxuRBeCABFAATg2NNAADcGde5oEcYlwKgBdwG7ybQgqb4hGMRKC1AYAEJ0OgAAWzl5kO9BIXBvC41eaDfdG\/GykLbuGlHEboftcLbdOxDqiBq5aOI3Ijy+fRG6TOTuNC9FBclXUCZmf\/xPuJl4EpijMT\/qyEjxeKvDK9YNaZqIQWs\/XskKqeVzJzh6PhzzQIpu2Tg0dAz6Kel+shW4DDqhItRgsqZ+YAneBWU35XpB5bA5jDMoIUUVvHuK5Sr+7hOXPlt+G\/ATnSyOgdiaRUSvOlGRSipMs4r4dpPvwlSCPzzgSSEQfRssZl+szudeu8i1gzIpRI\/5kPZtjq3+YX4vX3REU1t92UNUB23GUdu0tgIGnMQWYOyJZCwztDYwOPJewFefNpIeDeFZl811+88K7Nee3rX5LZ7Yg2gyl8mpEyCyzCjWqpPB+dVLrUN04DCkhHrfiSkMVQvAew0XtLNsk7e+Pv+PRze21KZ1QQGP9PhD6EID+NAOrSZP+lT9+AGiUNvhp6tLYJoq3z01aHM637giPloxE9RipOMp3mnGHh6tNqwnxccHptW5rp8gbkx1CEAk0ak4em7tZ8sA67HzckjGeFXu1Qo\/S2T88PnmCU5z8HRYxo593y1JWCp7q+TKHtk3ose93EypXg+nAMJmiayn9jvFPsucCyRpcsqHlmC2I9tKi0fVq00RQ5bLUV6mad1AWOQ5Vy\/7OTpemVfg2YMODhcDFZEK6CHz9HqU+YnT\/vanI\/OfrTWkcoPpb8zte8wxLGE205j4CyPQQixzTPHOOvo6qBfzdzWxKbRn+eGH\/hICJ3BEGD8Sj+EBOrP3ElWDqidjrpPxim1eZvQuTbzzZyUHn2Y58nE8\/VCzQOC766Wy7KYRSj1zQ39Y14LmiK8PFA3yd5yA0XzavbjpeXghZNbX52zg9XkmXYSPT11nrXRwsJiaW52LSAzxZQXCH69TayX5Z5AkgeWJHMnzQANtdDxP1TDmknOzhKfMTG37A8Hjov20Gg\/+lZK5F\/NBAOO2usabZduNYvT7vKb6jENxja9QcZEiYaOtrfPkH86LMGS6Je\/YeoOG0RqarIBzyxMRqdJ+POOwigEXUr64cAQBlOBUUi4yKt03uvf5uUhs3+Y7Ovp5dA5A08KlEddDIif5akZWDdyI5FaxhfTww\/reuytyr1hqbsJSfkKDMngUxLeNwQAbvo6y9YNcgg1V1vZ5Kz4XZuRSgLkUxanDF8PYsGxEOXU1Xjq5dNfsn4nDLJZzAR0coBOtbrxoTgMupFDgo13Di4VbKAyJMTn17RUNlMFnn4Wi8DwihLArqtaCGXzH3JabdbNRqJ7fRyM2tKFj71t6J1YEch9UdBYPGb7DJpiUe6+Ib5XEHvKnalLheZ2CgZFpFtJbDZkl\/H6wZwhtRFcU\/OhSSEcHdKt+3KM6hKJB9tw6eFyGluFqSahGsP7cEEXV4MRjS6WwV5xkpt5HtYMGftka22mO1zI3rw9A+4J78FoDnfO3vMB2kVtSnJIxM42x8db\/XJJ6mSKsttWCRp\/5vBTV1XkJf2eRwjq4uf0IpBctAi44G1gKb9b7FKbdcedOsCXYG4VpWIGlg1z4vsp564HVr9huvv2cOBEBcXOesyhiNq8GEksf20XcC+yUVcw4elFS8mlM6\/3cUMvyP0g="}
00407{"flow_id":5,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":884,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":447990,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMxuRBeeDHBvV4kCABFAAAoAABAAEAGSnrAqAF3aBHGJcm0AbsYxEoLIKnC2VAQD9ad5gAA"}
00500{"flow_id":5,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":903,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":457175,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"EBMxuRBeeDHBvV4kCABFAABoAABAAEAGSjrAqAF3aBHGJcm0AbsYxEoLIKnC2VAYEAD\/PgAAFAMDAAEBFwMDADVYttBPRczgJAloPBpUJv43CLzx2C6zt4Xiqf2J\/YhsPWHk0Thg\/pVwROSjKdfU9vq9bsa9uA=="}
00640{"flow_id":5,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":906,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":457930,"pkt_caplen":224,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":224,"pkt_l4_len":190,"pkt":"EBMxuRBeeDHBvV4kCABFAADSAABAAEAGSdDAqAF3aBHGJcm0AbsYxEpLIKnC2VAYEACD8gAAFwMDAKU7ts+bpvRBRuGHt5ewY669+kmmgJnXw5TC1+1BLlfIY+NdTt5Cuw4Y5rP5GVA3URuXUFAf69U\/UwBj4UaI4lGD5grTUDVOO70KDaKHDZ2gbt3FAh5h0vVa+aFfLxdaSUx0jc0yHT0Edh5Oq4QW9M5zjDg4Op3s7K50vgHZ1XRZIqgW+ms6crNBK0meos+WbqRBAfj03LsqOHCc0XTIAESjCambhSc="}
00866{"flow_id":5,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":907,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":457980,"pkt_caplen":386,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":386,"pkt_l4_len":352,"pkt":"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"}
00415{"flow_id":6,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":943,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":498308,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"eDHBvV4kEBMxuRBeCABFAAAoH25AADQGtIJoFkiqwKgBdwG7ybVDiAdu8KRdulAQAELX7AAAAAAAAAAA"}
02389{"flow_id":6,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":944,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":500011,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"}
00811{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":944,"source":"no_sni.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":6,"flow_first_seen":1604822447287,"flow_last_seen":1604822447500,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1460,"flow_tot_l4_payload_len":2172,"flow_avg_l4_payload_len":362,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.22.72.170","src_port":51637,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Cloudflare","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"","ja3":"16fcce72c01e54fab4ddabce048c0f5b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}}
02214{"flow_id":6,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":945,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":500684,"pkt_caplen":1385,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1385,"pkt_l4_len":1351,"pkt":"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"}
00408{"flow_id":6,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":946,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":500750,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMxuRBeeDHBvV4kCABFAAAoAABAAEAGx\/DAqAF3aBZIqsm1AbvwpF26Q4gSVVAQD9S9cwAA"}
00415{"flow_id":8,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":947,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":502334,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"eDHBvV4kEBMxuRBeCABFAAAofoRAADQGVWxoFkiqwKgBdwG7ybcBQwC1AC9kslAQAEIKZwAAAAAAAAAA"}
02395{"flow_id":8,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":948,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":506495,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"}
00811{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":948,"source":"no_sni.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":6,"flow_first_seen":1604822447287,"flow_last_seen":1604822447506,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1460,"flow_tot_l4_payload_len":2172,"flow_avg_l4_payload_len":362,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.22.72.170","src_port":51639,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Cloudflare","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"","ja3":"16fcce72c01e54fab4ddabce048c0f5b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}}
02216{"flow_id":8,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":949,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":507385,"pkt_caplen":1384,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1384,"pkt_l4_len":1350,"pkt":"eDHBvV4kEBMxuRBeCABFAAVafoZAADQGUDhoFkiqwKgBdwG7ybcBQwZpAC9kslAYAELvfgAAu2FTAFEKX74Ye1T7NrDbkSJkx5dq\/qk3FRI2briTHDsRZH800dalqhGHLpFEGIOLL\/U0ROBh9xY8KL2qAd2AXfdPQZorFk0wte6hl8K+BMde179\/iGf2EiuOvIhkFkCS1g2v3pVK6ZLrJG94tXNXRj4pCp3j73bwco2zBTvYGLM9QwNGNRQlSKe1vxw+HNVv8ONVAVuzu3qY1rHAZVFxWOWpytSI5rwyUKqHRRoED2maDLoezhkGjPvzET\/\/p+cQEg7VvujrXYZJQ0ap+7avrMwj\/C0wo4k0gmSJ\/PKem51T9rVii0vfC0LKsFQvS2mXZHxRk3PmorF8Q9IiHjKh7rqI7vrAibOXp8RtV6mNOg83T5SHUcNaoUESsvtlScZlio\/9AQlnA6B5UAMkuMhqrELSgjtd8UAxvwxLlZCpfZMij+Bdj7pphUJmUXYGVoGOL\/nwR10ouxcmQrXhv3yUtEfvRksiGbvQ7ob+j8YO1Xj65cK2xw6pTXOu0AwLq\/g+9PmflgMpNOfG1FVT3daJBGddMkOS3y1ug249dLrjovOmFj4CnkRjAo5RdBgZESzEHiPhGlp82aEnzAGQ3tcfLr0q8r+jpToIooIVpTWhW4OUzqbTLcqZzA66nPzl9nswNq7m+qEOyjyriwiIO1NTT0QlmrIx81EtFNiIBTKG1WXcMVDn9L9bD5a4FizAm+6Bnl\/PUDLkzVHoTSq\/mVdC\/RVA3RbQ4n3MM7LhkvEZ76IiBEHk9yBuU\/8d56kphGD2AV55EgLfk9F8wTxydKsOoY0WKAj2+yupKaDaHMDeKU0WtMg68tZefaM0bwmx1FqXqVFLnSo61PWW8P8TZn3ktv12MHdpimqxamQ8AqsjtTpRooVJDZgv+vzdkmDN6tbZFYo5BETpHGSB7pcG4ealL3VZ8zlXcvMLX04uqvd6LRb++dsdiEysAzlEWgaZM\/q2Yml7pktkjX9lksV6mopO3xPMGEjirL9Qo8RXjDq+2Z+3enwqaUF0q7RzMIIiXuB1JNd38S1BG+gmtNkLnfyqF6ik7Vb2qjWH9HciujZiPsVEj2GYinTuttZYYjcZxvUCKLCcTie9IdUrju0ucATPLam4WhBtYZKVqZ+etgbmt9Vh2mZXHLOHYzaG8zRemgJv1zg3a33kdMOd16AxUsXdnDCIphS+e5akrtMfbvoqcogN8SL\/W8h7olA0MSE8pTf3rVzva2scpFOMuKXAf4fwRFuG6ajTGcGyS61AUV2IMYdWNhN5fWKVwIM1U0TnuWL3wr22SP9APaMDAcf0p30spFRLAs1mfETmVwx69qOJlssiXOuBdVX0p0LTIX0EDPhGN\/Lg1JHw\/owZdZUxW4WW7aHT1hjIa\/zeY983cqEBOELxxBou+hflTDgKy0IiF3oP319hA47jyDKuNEqjOHyu\/KhjAhY33pJB994wIsD0Jaf4M19Pm9oklSAVzWbPdtW1qSIRRfF2I0sog1BBRDo1AXW\/+5HE1bPyOr2roYoqEDxn1aVdL4ZakP\/TDunCjY+rp3a4XF5J+3oUpD7GcmhMW9E\/00EV\/+ZSR9zqGwWvsjUUlLIWU3S76ZodRArU+YqOJeuMHjg\/rRvoJQf5zSBnjkF6C3bZ4qxzl0cn6WRdjn3sg7zCPczzMslNdd5Xig1VdoARk9OkwH0bzR2pVItWWYRJ4BL1wSYvJ\/j2Vgnsj+59u19FVDPBP9j03jPNWNVukLJam0h5z1gnOc\/HSekHBQevoQEJQ5+onw8NiM2XDNHqPA=="}
00408{"flow_id":8,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":950,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":507455,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMxuRBeeDHBvV4kCABFAAAoAABAAEAGx\/DAqAF3aBZIqsm3AbsAL2SyAUMLm1AQD9Tv7gAA"}
00415{"flow_id":7,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":951,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":513175,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"eDHBvV4kEBMxuRBeCABFAAAoowNAADQGMO1oFkiqwKgBdwG7ybbraGnzSz6N4FAQAEJCxgAAAAAAAAAA"}
02385{"flow_id":7,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":952,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":515088,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"}
00811{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":952,"source":"no_sni.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":6,"flow_first_seen":1604822447287,"flow_last_seen":1604822447515,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1460,"flow_tot_l4_payload_len":2172,"flow_avg_l4_payload_len":362,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.22.72.170","src_port":51638,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Cloudflare","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"","ja3":"16fcce72c01e54fab4ddabce048c0f5b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}}
02222{"flow_id":7,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":953,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":516237,"pkt_caplen":1384,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1384,"pkt_l4_len":1350,"pkt":"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"}
00408{"flow_id":7,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":954,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":516305,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMxuRBeeDHBvV4kCABFAAAoAABAAEAGx\/DAqAF3aBZIqsm2AbtLPo3g62h02VAQD9QoTgAA"}
00416{"flow_id":4,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":955,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":526571,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"eDHBvV4kEBMxuRBeCABFAAAo1ylAADcGfFBoEcYlwKgBdwG7ybNKGgEYY21GlFAQAEL+mQAAAAAAAAAA"}
01105{"flow_id":4,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":956,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":527273,"pkt_caplen":566,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":566,"pkt_l4_len":532,"pkt":"eDHBvV4kEBMxuRBeCABFAAIo1ypAADcGek9oEcYlwKgBdwG7ybNKGgEYY21GlFAYAEJI6wAAFwMDAb2AZ6nwOXmZ5NIHQL9Be94biuJD2p\/HAgoysn8s9Tb8DO\/MwVEymM7RcVYk3fPi1aCxovdTWmd7Fafg6DoWbYVyvcqT44EutY4w9lmgunUhqowLRnpTydcdJYwi\/rr6q4NEprynQOfec1LTZKvrZm4WmTA31BRp0i7kOvJSXjdPzwR+wB6loc8kqxq2SCHvO7hizwUPQ3VoisLxfyk\/RHxiIUO6XC6QYQGGfdJwlx2HyT16ROfz6qnCZ6lCCOILJLXTOTFp4+bEPPedzyJwLQN38iHaWyMPeQwIcQBwcyv5XkU7QJ9ie+UTeUrIUv7ZGwAdjZbaf4xaTIs07tZv4dGUaHksfWoy4p1QQrIhdDJ5Bq9ualI0fnI4RgDXQv5xYvxF\/KZm35Ja2DqXLxf\/SsMBkrE2DsMANYulURSNIT6M+6pz8NE7\/Nc4KVEMbpUgHPMxwkjswbS+ZjgeESb+8Yv57xjdIHUQgXaSKJ2bmOI058IyuTcRgannOseMA3eVE6qiDQUuTg5LxosE7aIAqTrO+AUsA4yGN1mGtoEXCjrfrp7I\/OUEtWFo48hzvDKgK1pHA7U\/i60sc1gHBRQ1FwMDADnbUUB1ziOszQpaPebe+I\/9CLvKwhJbeiVP0p5ETMrCDEpPGpgVlKRmDOgkq0zuYUzoXAj80vIUnRU="}
00409{"flow_id":4,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":957,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":527343,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMxuRBeeDHBvV4kCABFAAAoAABAAEAGSnrAqAF3aBHGJcmzAbtjbUiJShoDGFAQD\/jq7gAA"}
00416{"flow_id":4,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":958,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":534068,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"eDHBvV4kEBMxuRBeCABFAAAo1ytAADcGfE5oEcYlwKgBdwG7ybNKGgMYY21HPlAQAEP77gAAAAAAAAAA"}
00499{"flow_id":6,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":967,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":564726,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"EBMxuRBeeDHBvV4kCABFAABoAABAAEAGx7DAqAF3aBZIqsm1AbvwpF26Q4gSVVAYEABYzAAAFAMDAAEBFwMDADUYts1avE4O\/xjAg4quC9ocdAptdx\/HZ49h9Z81TsMOdX8JF9asuPVhCsGuKzrtU0LsAfvWJw=="}
00498{"flow_id":8,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":969,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":566713,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"EBMxuRBeeDHBvV4kCABFAABoAABAAEAGx7DAqAF3aBZIqsm3AbsAL2SyAUMLm1AYEABEEQAAFAMDAAEBFwMDADWCyBjGVxPnrEDjv2aTiWaCo2JvpNB9Jjo07CQqab8elob\/YcbymnfmOO4TXuYnjMpClUlZBA=="}
00499{"flow_id":7,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":970,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":567517,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"EBMxuRBeeDHBvV4kCABFAABoAABAAEAGx7DAqAF3aBZIqsm2AbtLPo3g62h02VAYEADi4AAAFAMDAAEBFwMDADVapio6cUkAs\/KE\/6jKgg86AAH4FqT5R3556znkbqMYM5I0lTN7p+rYCs8X8L9rDh9O6TzEBg=="}
00416{"flow_id":5,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":971,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":573617,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"eDHBvV4kEBMxuRBeCABFAAAo2NRAADcGeqVoEcYlwKgBdwG7ybQgqcLZGMRKS1AQAEKtOgAAAAAAAAAA"}
00642{"flow_id":6,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":972,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":573829,"pkt_caplen":224,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":224,"pkt_l4_len":190,"pkt":"EBMxuRBeeDHBvV4kCABFAADSAABAAEAGx0bAqAF3aBZIqsm1AbvwpF36Q4gSVVAYEADLKQAAFwMDAKWUdOfOvDRKbBedbxzURM+WJgtLdotDKNlHlGabIod7Psyofz1RLc5HTF\/7sdnoirr0fqFpw8YW\/6d9eYQu3iwYpHgEj3szBxfkAqcTlMLLvLcXYlwBDlsUtq77Hc2GmouJ7AXexXi32woCmLSLsM4i2Haefn7lI2W\/iw64xcxrVKQN1BJGXkf+mswPA5yDMnLvUko81B1OMqb3ZjzN+saPlbxJJOA="}
00855{"flow_id":6,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":973,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":573977,"pkt_caplen":380,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":380,"pkt_l4_len":346,"pkt":"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"}
01103{"flow_id":5,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":977,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":574937,"pkt_caplen":566,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":566,"pkt_l4_len":532,"pkt":"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"}
00409{"flow_id":5,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":978,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":575028,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMxuRBeeDHBvV4kCABFAAAoAABAAEAGSnrAqAF3aBHGJcm0AbsYxExBIKnE2VAQD\/iZjgAA"}
00667{"flow_id":8,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":979,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":575231,"pkt_caplen":241,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":241,"pkt_l4_len":207,"pkt":"EBMxuRBeeDHBvV4kCABFAADjAABAAEAGxzXAqAF3aBZIqsm3AbsAL2TyAUMLm1AYEAADYAAAFwMDALbXiiwjhSis778XCo1IJT5r3YdPbjlGiGnzW0nyaQIdWbV5Z2OvgUN11bveBAzwphDxChHcg4IEB\/c7cD+cfft0tBGgudKCUVD3dxENXyaSUMDcvIBBEyJ2GyXelJbkYrb3b4TBbGaC\/CoYGZYQnBvlFhuyqOoFvhUgdCtTHM1\/I+raBTgG41daGPiB1WJ5meug2a\/OIKdG4FRA7x7ALfMVq4v8CttaAld1aX7P+LLWThhPXhFU8Q=="}
00663{"flow_id":7,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":980,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":575503,"pkt_caplen":241,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":241,"pkt_l4_len":207,"pkt":"EBMxuRBeeDHBvV4kCABFAADjAABAAEAGxzXAqAF3aBZIqsm2AbtLPo4g62h02VAYEABSPAAAFwMDALa6Yi0n012UiaqF2nPtJkxybN6GOKC9Q7H+MtsaeRaDGXuJfIIZ6SpI4jWtrSrkQJvo95EZGurJNir63Td8Xv28qpQhHmupEqosR9fA4vVztAfcNWommZq2jDZGFmcb2EValAJL0RyA7Bz8wYRCA5EGeFXF3ojN2WUqc27JvLNnXp4dPqO2zoUWNCUQPG6ZXPO7NsKng4YIlnc+yF6x56j5ycr8KrtKrwfHbQscEfWEKDB0KwPXQQ=="}
00416{"flow_id":5,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":981,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":580362,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"eDHBvV4kEBMxuRBeCABFAAAo2NZAADcGeqNoEcYlwKgBdwG7ybQgqcTZGMRK9VAQAEOqjwAAAAAAAAAA"}
00512{"flow_id":6,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":984,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":585873,"pkt_caplen":129,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":129,"pkt_l4_len":95,"pkt":"EBMxuRBeeDHBvV4kCABFAABzAABAAEAGx6XAqAF3aBZIqsm1AbvwpF\/qQ4gSVVAYEADJQAAAFwMDAEYKWen4fxYX9Oc1dff3jGq9v+9GCQeOmHE\/MR2PaU25X42zBGQLo+zebmXfiPpdmzSQsuKXcL4kSgrnyVHopl8BfX4qVtYz"}
00510{"flow_id":6,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":986,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":587454,"pkt_caplen":129,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":129,"pkt_l4_len":95,"pkt":"EBMxuRBeeDHBvV4kCABFAABzAABAAEAGx6XAqAF3aBZIqsm1AbvwpGA1Q4gSVVAYEADbUwAAFwMDAEZtJVJU4Uz0INQ50wvUWI7YinTsI0j7fKk8SPBagVlOfc4T+IKNs0TrM9PEzMPOizoPq6fgYv6QxQNbvFZR+glaqvfjohSa"}
02215{"flow_id":6,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":995,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":644426,"pkt_caplen":1385,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1385,"pkt_l4_len":1351,"pkt":"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"}
00424{"flow_id":6,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":996,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":644510,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMxuRBeeDHBvV4kCABFAAA0AABAAEAGx+TAqAF3aBZIqsm1AbvwpGCAQ4gSVYAQEADd4gAAAQEFCkOIDSJDiBJV"}
00418{"flow_id":8,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1001,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":729557,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"eDHBvV4kEBMxuRBeCABFAAAofodAADQGVWloFkiqwKgBdwG7ybcBQwubAC9k8lAQAEL\/QAAAAAAAAAAA"}
01106{"flow_id":8,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1002,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":730612,"pkt_caplen":566,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":566,"pkt_l4_len":532,"pkt":"eDHBvV4kEBMxuRBeCABFAAIofohAADQGU2hoFkiqwKgBdwG7ybcBQwubAC9k8lAYAEL0JAAAFwMDAb0k4WFYBIr7s1QFkD1o1eqA9bqB7neBT1u7+\/VDDoaFUM+O+V2fQwrfpzxcqPgYn59NP9r22zW7QAfP6hGwt0FIIEdt7tgMqTFC2g\/JAPbIMhDL62QmI21n9eh4UZySH1xG4A9NehaigRxHt63lgw5cgYCQsU2KzxzdBXtQB8SR9ei50iSAr3P4Eew2uCdSER25NrcMoLIcMKpva1SaldKH8\/G9g+pEreS44pcA0CxCpjqyvjSinmZLMa4u7IftQeiR+Okz1yAS4gCjQFl\/eGpAj36HG3eRWe8BEmVJtD4yEJeyZ+bwe63zFq\/qqpY+wOYMOcAulzw9Cp\/Cz+s9EHFPDQwzIQEUHmvMbaij0jBWLdvKNq\/d0ay\/DWgdsnXoSK9lbGt9lG598QAuGICckWDC8Dvuw7r766Nyok5EEr3PRZgVK8PxSucR8duF1pRf1EXVXTIXyzNCk6ycmMESGbnIKJVWf3ypzUZ4ws3zoSG0+zEvN9k6CZCqiGlkVybD4pb1sODJRyv7KGKxJuB2PVQz79nXXyNo0Kkvrvol03a2DoJb30VDYOMLvIA9upQD\/sXQdg4DxVdXjFabkR6NFwMDADk1nR2rhHzzHruMFDyUUm2LGfvysBfchedL2p7PPMmaN\/wgggSxw+jlIZ5h7xQQz1UKYRzkFvCZggw="}
00411{"flow_id":8,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1003,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":730729,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMxuRBeeDHBvV4kCABFAAAoAABAAEAGx\/DAqAF3aBZIqsm3AbsAL2WtAUMNm1AQD\/jszwAA"}
00441{"flow_id":8,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1005,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":732477,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMxuRBeeDHBvV4kCABFAABAAABAAEAGx9jAqAF3aBZIqsm3AbsAL2WtAUMNm1AYEAA54QAAFwMDABN+w9Q0zd2EFlfgFZTbEqhbSrXj"}
00410{"flow_id":8,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1006,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":732478,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMxuRBeeDHBvV4kCABFAAAoAABAAEAGx\/DAqAF3aBZIqsm3AbsAL2XFAUMNm1AREADsrgAA"}
00417{"flow_id":7,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1007,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":732967,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"eDHBvV4kEBMxuRBeCABFAAAoowZAADQGMOpoFkiqwKgBdwG7ybbraHTZSz6OIFAQAEI3oAAAAAAAAAAA"}
01100{"flow_id":7,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1008,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":734300,"pkt_caplen":566,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":566,"pkt_l4_len":532,"pkt":"eDHBvV4kEBMxuRBeCABFAAIoowdAADQGLuloFkiqwKgBdwG7ybbraHTZSz6OIFAYAEJp4AAAFwMDAb0z8Nm4k0AAna4DbfdjXqSlv1Phn+I6rZvifWnPIDJFB5YlsyTIkc9Nlu40IE4Qq+kcViOEkaePqmsfSaCrSkNzD9ptUCkmkwG0YaMhMsuBboARzq13l78B8nrKjlIhflAmqIL0PUTodUOLaUQYOSuRkv+P1AZyZSh6s5emoLwVwSNNkgbs7yIM2cEuxMQHLj1O0sU6TsGMO1vAzf0iNR8QWZ\/t\/m9kDxHimDr0GtBGC4HtF9HKzuY6cCZ4TScngBkQwWHJknEudvloAIpddAShcGYOlswz11IWba7ECiteT\/buoK4xqkV9ImTTaUwOhZ0jnvSazc990JEaGzy6ECnuJhyzeBrZyvsVA0CG\/+E0ObiEqJV8+u+mIJFcgSiRcg4ohMeX2S6pX+MZyc6BNoCtBTUXsnxbl6+Y6TmH1uY7B9Vvk5BX3TQkTlH5QV7aOoSIToTMVNnjfjNpD2U9WazIyWGRqiCesjR3YNquaY9+I7T838IM+nE6iBRVF4aLqHHFgBwb28LQMEWhd58WfqSeOCaoYzm14+NHvnF+bDLoqRPKOKRTtrh5IskR5fmaplGO64mFOtN3yZWNutsCFwMDADkeOyY2Z5X8OFgxtvJH2q5wuTaYNIk6G4+Q4lBNz8C6XzfgBFMx06kARLaSiTgPMfr7cr7slJ6Y5Cs="}
00411{"flow_id":7,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1009,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":734379,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMxuRBeeDHBvV4kCABFAAAoAABAAEAGx\/DAqAF3aBZIqsm2AbtLPo7b62h22VAQD\/glLwAA"}
00442{"flow_id":7,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1010,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":735095,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMxuRBeeDHBvV4kCABFAABAAABAAEAGx9jAqAF3aBZIqsm2AbtLPo7b62h22VAYEAAZDAAAFwMDABNCZtDGQgvXBCNH\/tUJ7EBq2y2E"}
00410{"flow_id":7,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1011,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":735154,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMxuRBeeDHBvV4kCABFAAAoAABAAEAGx\/DAqAF3aBZIqsm2AbtLPo7z62h22VAREAAlDgAA"}
00505{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1185,"source":"no_sni.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":35,"flow_first_seen":1604822447287,"flow_last_seen":1604822447869,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1460,"flow_tot_l4_payload_len":7366,"flow_avg_l4_payload_len":210,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.22.72.170","src_port":51637,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00504{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1185,"source":"no_sni.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":22,"flow_first_seen":1604822447287,"flow_last_seen":1604822447844,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1460,"flow_tot_l4_payload_len":4320,"flow_avg_l4_payload_len":196,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.22.72.170","src_port":51638,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00504{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1185,"source":"no_sni.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":22,"flow_first_seen":1604822447287,"flow_last_seen":1604822447839,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1460,"flow_tot_l4_payload_len":4320,"flow_avg_l4_payload_len":196,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.22.72.170","src_port":51639,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00535{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1185,"source":"no_sni.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":7,"flow_first_seen":1604822444474,"flow_last_seen":1604822444595,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":39,"flow_tot_l4_payload_len":63,"flow_avg_l4_payload_len":9,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.16.249.249","src_port":51331,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Cloudflare","breed":"Acceptable","category":"Web"}}
00498{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1185,"source":"no_sni.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":7,"flow_first_seen":1604822444474,"flow_last_seen":1604822444595,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":39,"flow_tot_l4_payload_len":63,"flow_avg_l4_payload_len":9,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.16.249.249","src_port":51331,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00506{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1185,"source":"no_sni.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":268,"flow_first_seen":1604822444486,"flow_last_seen":1604822448523,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":682,"flow_tot_l4_payload_len":17062,"flow_avg_l4_payload_len":63,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.16.249.249","src_port":51606,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00508{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1185,"source":"no_sni.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":785,"flow_first_seen":1604822444913,"flow_last_seen":1604822448604,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1460,"flow_tot_l4_payload_len":480607,"flow_avg_l4_payload_len":612,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.16.124.96","src_port":51612,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00505{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1185,"source":"no_sni.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":23,"flow_first_seen":1604822447227,"flow_last_seen":1604822447785,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1460,"flow_tot_l4_payload_len":4696,"flow_avg_l4_payload_len":204,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.17.198.37","src_port":51635,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00505{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1185,"source":"no_sni.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":23,"flow_first_seen":1604822447249,"flow_last_seen":1604822447807,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1460,"flow_tot_l4_payload_len":4696,"flow_avg_l4_payload_len":204,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.17.198.37","src_port":51636,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00128{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":1185,"source":"no_sni.pcap","alias":"nDPId-test"}
|