path: root/test/results/reddit.pcap.out

00383{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"reddit.pcap","alias":"nDPId-test","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"tcp-max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15,"max-packets-per-flow-to-process":255}
00509{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"reddit.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1605291684451,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80a::200a","src_port":40028,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00462{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":451133,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gBBqZACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICgAAAAAAACAKnFwBu4Sgd8UAAAAAoAL9IJAlAAACBAWgBAIICtTdYAcAAAAAAQMDBw=="}
00509{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2,"source":"reddit.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1605291684451,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80a::200a","src_port":40030,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00462{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":451247,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gDERGACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICgAAAAAAACAKnF4Bu+Ka2YUAAAAAoAL9INBoAAACBAWgBAIICtTdYAcAAAAAAQMDBw=="}
00503{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3,"source":"reddit.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1605291684452,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56558,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00462{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":452132,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gCYCjACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3O4Bu5iiLjUAAAAAoAL9IMZSAAACBAWgBAIICql037gAAAAAAQMDBw=="}
00463{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":476073,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgKAAAAAAAAIAoqAcsBIEmLB5kd7IUo3\/YpAbucXOWkwh+EoHfGoBJXgJjYAAACBAV4AQMDAwQCCArC1zJs1N1gBw=="}
00450{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":476117,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBBqZACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICgAAAAAAACAKnFwBu4Sgd8blpMIggBAB+xzRAAABAQgK1N1gIMLXMmw="}
01143{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":476610,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"qtsDr8lk5EKm5WPyht1gBBqZAiUGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICgAAAAAAACAKnFwBu4Sgd8blpMIggBgB+\/TpAAABAQgK1N1gIMLXMmwWAwECAAEAAfwDA4uuqSGlaYkrooqTrn+tpuwEFqHXve+KWS5sY0YZYzAtIB8Dy2r0TMEQAKyWvv37U3EEFg7M1cxOcqNinyfcEA7jACDa2hMBEwITA8ArwC\/ALMAwzKnMqMATwBQAnACdAC8ANQEAAZM6OgAAAAAAIAAeAAAbc2FmZWJyb3dzaW5nLmdvb2dsZWFwaXMuY29tABcAAP8BAAEAAAoACgAIKioAHQAXABgACwACAQAAIwAAABAADgAMAmgyCGh0dHAvMS4xAAUABQEAAAAAAA0AEgAQBAMIBAQBBQMIBQUBCAYGAQASAAAAMwArACkqKgABAAAdACDpJ8gfLr7uFkPlmEjT3rwuxn7WZmrRa2l21mCLRvatFwAtAAIBAQArAAsKqqoDBAMDAwIDAQAbAAMCAAJqagABAAAVAMEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"}
00846{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":6,"source":"reddit.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":4,"flow_first_seen":1605291684451,"flow_last_seen":1605291684476,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80a::200a","src_port":40028,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.GoogleServices","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"safebrowsing.googleapis.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
00503{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7,"source":"reddit.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1605291684481,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56560,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00462{"flow_id":4,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":481568,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gB3LfACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PABuxF7CxQAAAAAoAL9IHB8AAACBAWgBAIICql039UAAAAAAQMDBw=="}
00463{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":485305,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgKAAAAAAAAIAoqAcsBIEmLB5kd7IUo3\/YpAbucXoJUF9DimtmGoBJXgOayAAACBAV4AQMDAwQCCArC1zJ11N1gBw=="}
00464{"flow_id":3,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":485306,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc7vvL1mKYoi42oBJXgKSSAAACBAV4AQMDAwQCCArC1zJ1qXTfuA=="}
00451{"flow_id":2,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":485349,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDERGACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICgAAAAAAACAKnF4Bu+Ka2YaCVBfRgBAB+2qiAAABAQgK1N1gKcLXMnU="}
00451{"flow_id":3,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":485374,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCYCjACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3O4Bu5iiLjb7y9ZjgBAB+yiDAAABAQgKqXTf2cLXMnU="}
01145{"flow_id":2,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":485819,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"}
00847{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":12,"source":"reddit.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":4,"flow_first_seen":1605291684451,"flow_last_seen":1605291684485,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80a::200a","src_port":40030,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.GoogleServices","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"safebrowsing.googleapis.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
01146{"flow_id":3,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":486237,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"}
00823{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":13,"source":"reddit.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":4,"flow_first_seen":1605291684452,"flow_last_seen":1605291684486,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56558,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.reddit.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
00465{"flow_id":4,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":551717,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc8HTo0uYRewsVoBJXgNkGAAACBAV4AQMDAwQCCArC1zKKqXTf1Q=="}
00452{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":551719,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgKAAAAAAAAIAoqAcsBIEmLB5kd7IUo3\/YpAbucXOWkwiCEoHnLgBALMBF6AAABAQgKwtcyidTdYCA="}
02093{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":551719,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"}
00888{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":16,"source":"reddit.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":6,"flow_first_seen":1605291684451,"flow_last_seen":1605291684551,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80a::200a","src_port":40028,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.GoogleServices","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"safebrowsing.googleapis.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
02098{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":551720,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"}
01132{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":551721,"pkt_caplen":586,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":586,"pkt_l4_len":532,"pkt":"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"}
00452{"flow_id":2,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":551721,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgKAAAAAAAAIAoqAcsBIEmLB5kd7IUo3\/YpAbucXoJUF9HimtuLgBALMF88AAABAQgKwtcyodTdYCk="}
00451{"flow_id":4,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":551793,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gB3LfACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PABuxF7CxV06NLngBAB+1zSAAABAQgKqXTgG8LXMoo="}
00451{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":551829,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBBqZACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICgAAAAAAACAKnFwBu4SgecvlpMbYgBAB9RWrAAABAQgK1N1ga8LXMpA="}
00452{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":551840,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBBqZACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICgAAAAAAACAKnFwBu4SgecvlpMuQgBAB8hD2AAABAQgK1N1ga8LXMpA="}
00452{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":551851,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBBqZACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICgAAAAAAACAKnFwBu4SgecvlpM2EgBAB7w8FAAABAQgK1N1ga8LXMpA="}
00453{"flow_id":3,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":551898,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc7vvL1mOYojA7gBALMB0aAAABAQgKwtcyo6l039o="}
01860{"flow_id":3,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":551899,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"}
00879{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":25,"source":"reddit.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":6,"flow_first_seen":1605291684452,"flow_last_seen":1605291684551,"flow_tot_l4_data_len":1773,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":295,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56558,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.reddit.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
01871{"flow_id":3,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":551900,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"}
01865{"flow_id":3,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":551901,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABDgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc7vvL3pOYojA7gBgLMM8PAAABAQgKwtcyqKl039qu3Fx+VTEM6DkHpNe+L9MLatKx31\/+V3RTOzWA3a6ORJiznw7T2uDX9Gspq0SnS1iEbZJLgcPac4sSl0iQBEV1Gt03MZeS6M1UDTvkwT85Xi6481x+EI6GQQCNRWZHsKFlzqCqKQlO85fr6C6rD3KnMA76x\/T9FHfDpFsoV8Kz+YL9t0VYmwIDAQABo4IBWjCCAVYwEgYDVR0TAQH\/BAgwBgEB\/wIBADAOBgNVHQ8BAf8EBAMCAYYwNAYIKwYBBQUHAQEEKDAmMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wewYDVR0fBHQwcjA3oDWgM4YxaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0R2xvYmFsUm9vdENBLmNybDA3oDWgM4YxaHR0cDovL2NybDQuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0R2xvYmFsUm9vdENBLmNybDA9BgNVHSAENjA0MDIGBFUdIAAwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAdBgNVHQ4EFgQUD4BhHIIxYdUvKOeNRji0LOHG2eIwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUwDQYJKoZIhvcNAQELBQADggEBACM+30vSMUKltn5CXBpEzGnRaLRdS+AEIWxL4m3MseCXj6ZTCc2qKmXlOU8eg6VuXJiiJCbm+6Htk8cuAsZNSr+wQt942rOo+W3\/IYVTNmBMds7sONzWUYDwxdbl1E0nZKubxz5x+0iXuDNtyRMH7paiGxgV9lxMQO2zwuz\/ccHjR\/\/UuQC0N0LaIMnqboruFAaufaJZmIioG28t9PLJFF8mzyyNfu03wKnVObmCvxkM6jSvACFo+K1z4sky2jglC1XTmh3waIbtLkE073ylUB2\/OvnTwQgM5u0eilgl5Lh3rS1u9VLdtHSPq0kunTuTNCgfeM6U6se908ltHN5cMvMWAwMB3xYAAdsBAAHXMIIB0woBAKCCAcwwggHIBgkrBgEFBQcwAQEEggG5MIIBtTCBnqIWBBQPgGEcgjFh1S8o541GOLQs4cbZ4hgPMjAyMDExMDgwMjAyNTFaMHMwcTBJMAkGBSsOAwIaBQAEFBBfpnqACJ21J581zoMLQ4ieo8cNBBQPgGEcgjFh1S8o541GOLQs4cbZ4gIQDR33xPAIHf0NQOujujRTcYAAGA8yMDIwMTEwODAyMDI1MVqgERgPMjAyMDExMTUwMTE3NTFaMA0GCSqGSIb3DQEBCwUAA4IBAQBY+1SnH0u3ho+Y8niHMzRj8wWXBoT45DsNzWXZsZidgbnEjA4\/L6gnKwvitI4d+SX6Al6xofYE"}
01147{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":27,"source":"reddit.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":8,"flow_first_seen":1605291684452,"flow_last_seen":1605291684551,"flow_tot_l4_data_len":3933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":491,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56558,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.reddit.com","server_names":"reddit.com,*.reddit.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Reddit Inc., CN=*.reddit.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"DB:E9:D5:FE:EB:EF:68:34:55:FD:62:BA:C9:BB:04:D4:E3:22:18:81"}}
01152{"flow_id":3,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":551902,"pkt_caplen":601,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":601,"pkt_l4_len":547,"pkt":"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"}
02094{"flow_id":2,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":551902,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"}
00888{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":29,"source":"reddit.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":6,"flow_first_seen":1605291684451,"flow_last_seen":1605291684551,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80a::200a","src_port":40030,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.GoogleServices","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"safebrowsing.googleapis.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
02102{"flow_id":2,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":551903,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"}
01136{"flow_id":2,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":551904,"pkt_caplen":587,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":587,"pkt_l4_len":533,"pkt":"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"}
00452{"flow_id":3,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":551915,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCYCjACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3O4Bu5iiMDv7y9p7gBAB9SH3AAABAQgKqXTgG8LXMqg="}
00452{"flow_id":3,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":551926,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCYCjACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3O4Bu5iiMDv7y96TgBAB8x3hAAABAQgKqXTgG8LXMqg="}
00452{"flow_id":3,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":551935,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCYCjACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3O4Bu5iiMDv7y+KrgBAB7RnPAAABAQgKqXTgG8LXMqg="}
00452{"flow_id":3,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":551941,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCYCjACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3O4Bu5iiMDv7y+SugBAB6RfQAAABAQgKqXTgG8LXMqg="}
00451{"flow_id":2,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":551948,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDERGACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICgAAAAAAACAKnF4Bu+Ka24uCVByJgBAB9WN1AAABAQgK1N1ga8LXMqk="}
00452{"flow_id":2,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":551956,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDERGACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICgAAAAAAACAKnF4Bu+Ka24uCVCFBgBAB8l7AAAABAQgK1N1ga8LXMqk="}
00452{"flow_id":2,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":551964,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDERGACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICgAAAAAAACAKnF4Bu+Ka24uCVCM2gBAB71zOAAABAQgK1N1ga8LXMqk="}
01145{"flow_id":4,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":552325,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"}
00823{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":39,"source":"reddit.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":4,"flow_first_seen":1605291684481,"flow_last_seen":1605291684552,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56560,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.reddit.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
00538{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":560628,"pkt_caplen":150,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":150,"pkt_l4_len":96,"pkt":"qtsDr8lk5EKm5WPyht1gBBqZAGAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICgAAAAAAACAKnFwBu4SgecvlpM2EgBgB9UkkAAABAQgK1N1gdMLXMpAUAwMAAQEXAwMANcqXWVSmzEyECPE8WpHXySUT8FrR0ganY2UOLc0YplHZnp5O+ckAO073diJltWHpbAIjMJ0I"}
00539{"flow_id":2,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":562938,"pkt_caplen":150,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":150,"pkt_l4_len":96,"pkt":"qtsDr8lk5EKm5WPyht1gDERGAGAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICgAAAAAAACAKnF4Bu+Ka24uCVCM2gBgB9cE1AAABAQgK1N1gdsLXMqkUAwMAAQEXAwMANf\/NSaUukGHnTscXkQgZCZuAMgmA1XRF5gtJMX2dCABEH+DW4SffxztoT8vHs4Yz6EIwoYiC"}
00580{"flow_id":3,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":565144,"pkt_caplen":179,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":179,"pkt_l4_len":125,"pkt":"qtsDr8lk5EKm5WPyht1gCYCjAH0GQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3O4Bu5iiMDv7y+SugBgB9TMxAAABAQgKqXTgKcLXMqgWAwMAJRAAACEgb44jejT1SBb\/bvRTAPQylKfYT1DbYwYMDvmmfnJPbAUUAwMAAQEWAwMAKAAAAAAAAAAAL7fQQfxjOogXK9MM2ISbQ5Kw2RaljMRvG38yXhUWUus="}
00452{"flow_id":2,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":565433,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDERGACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICgAAAAAAACAKnF4Bu+Ka28uCVCM2gBEB9Vx5AAABAQgK1N1gecLXMqk="}
00583{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":565603,"pkt_caplen":178,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":178,"pkt_l4_len":124,"pkt":"qtsDr8lk5EKm5WPyht1gBBqZAHwGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICgAAAAAAACAKnFwBu4SgegvlpM2EgBgB9YyOAAABAQgK1N1gecLXMpAXAwMAVzM3BREzuuCAKO\/DzI7SDpnFJNGDllSoOywgOaHEmdtDtVTC9z08j2RIqDEJO\/C\/PWbEpz6ZeM0RXx7eo08wkjLvyJnEue8OdvoPD4Y33jWj3jEp6evn\/w=="}
00590{"flow_id":3,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":565856,"pkt_caplen":185,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":185,"pkt_l4_len":131,"pkt":"qtsDr8lk5EKm5WPyht1gCYCjAIMGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3O4Bu5iiMJj7y+SugBgB9SvNAAABAQgKqXTgKcLXMqgXAwMAXgAAAAAAAAABuLyVXtc7Den4BNy9hXTB79r9hslNhamiYbFRZL\/oA4QLXT\/0uRT0RJvuihB57ZtApvVZgbZJL1ET7hEkFq8jATpbeW0qU+JSm3DJX\/n6QCjC8L2+pdo="}
01572{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":566185,"pkt_caplen":910,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":910,"pkt_l4_len":856,"pkt":"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"}
01319{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":566926,"pkt_caplen":724,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":724,"pkt_l4_len":670,"pkt":"qtsDr8lk5EKm5WPyht1gBBqZAp4GQCoBywEgSYsHmR3shSjf9ikqABRQQAcICgAAAAAAACAKnFwBu4SgfZ\/lpM2EgBgB9YYkAAABAQgK1N1gesLXMpAXAwMCed3xYr6W3PwNHFgN5K8ENvFfRHDNFjQtaGhYj\/JV74\/rKEgmlvrS403jxVae3R1yhXWncfF9rLnlsZL4Vzq23SInK18y6pqMc2Q5jRFau+OFMX\/jb5RjwookIyL+0uqmfAXHLkTUpfGoBIUHH+HB\/vHTGsGF6Use0Wj7+cdpl1kpGXMZKPlBM6YELCrndaAWJdcLGj7OULgH4muJIFKA5GxOSusGPVoZp6SEFzS+RqFVOZtFVTFIJ\/GyCfeZ4HnSYtXyC+ifPZaHo7VwqfxdN5fz1gKK5IoPClPDXeEjEn7Hpdcv3hotnVjZPI52qtwj\/mLeT1MrkKi3AZMyeK+6D2yyfkvhwouCpStSm4iID1pDOplCDTXzK27TqrPSGjpbtpJzlAR25RZ+5StxZ5WjflrAC8XjrtAJCirFRF6Zmsy8CLNv\/3xozm9YVIDMDdpOjuEqRgtekWAthFMt2T9IamGSKPUpBZldW07kxMKys0jBo1Pye0RfzQkb4I1+d6R8mcfd6B8HRKblDJBqsd0SIm7tRfWYsLK88mMS8gnchiDcCUej33Esf+JHq6tKJpEV5eDfQcpzIJjhNReNTNlRm7okmTgQSXb7JevAgpdSdwgNhkJxGDc3VWTD2kV1d68bt2cYlfvFHc1HOdCluRrlpBss+U8+EwlPEcn4HUsI2poBb9y\/pvlDBywK\/gUb48ZJlWyKtMAO5ORxzh4P7epouEDeIfv+QTTYsmNXZhZ4YgvsC3ME+SyV\/rM2zP\/KhA1NV+V2qMm6Xtcph1AUBH1lYHyxTtS517xjyYNB1fhadoucIyCkpiwAmOagU5HcMetKbdFsCWctAMNUpA=="}
00453{"flow_id":4,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":589289,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc8HTo0ucRew0agBALMFFEAAABAQgKwtcy3al04Bw="}
00453{"flow_id":2,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":589657,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgKAAAAAAAAIAoqAcsBIEmLB5kd7IUo3\/YpAbucXoJUIzbimtvLgBALOFMGAAABAQgKwtcy3dTdYHY="}
00453{"flow_id":2,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":589658,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgKAAAAAAAAIAoqAcsBIEmLB5kd7IUo3\/YpAbucXoJUIzbimtvMgBALOFMCAAABAQgKwtcy3dTdYHk="}
01860{"flow_id":4,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":592780,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABDgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc8HTo0ucRew0agBgLMJgkAAABAQgKwtcy36l04BwWAwMAUgIAAE4DA53x3nWSjMa1g47mirx7vPuqX52\/rKihQPtzIOJD+aCaAMAvAAAm\/wEAAQAAAAAAAAsABAMAAQIAIwAAAAUAAAAQAAUAAwJoMgAXAAAWAwMK0QsACs0ACsoABiwwggYoMIIFEKADAgECAhANHffE8Agd\/Q1A66O6NFNxMA0GCSqGSIb3DQEBCwUAME0xCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIgU2VjdXJlIFNlcnZlciBDQTAeFw0yMDA4MjYwMDAwMDBaFw0yMTAyMjIxMjAwMDBaMGcxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpDYWxpZm9ybmlhMRYwFAYDVQQHEw1TYW4gRnJhbmNpc2NvMRQwEgYDVQQKEwtSZWRkaXQgSW5jLjEVMBMGA1UEAwwMKi5yZWRkaXQuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+maVKOkGuIpLUWBcrOoi0zOK7ui1z2eaWzzMtForAMdGnBV+IZaQtyQ5++Gfv1TbOrAOKUntMp6luNeClruZSCzltfkOpk9eHJ9XWEUPrpFFCLbBVu91sl0EYvdWsplUlEgilO1zdDXr0UiyU0ptz14arWfA79ESEjl3EMIcCgfAumn5d9uOQEkbOWAogF0Ed53rsoVVQoW+HVFVqdUlQ0boiQBdec9lKKDB8DbAEfdCC45zVjGzA8Hhw4fmx1l4AlDqP2tLE2qNm2GhXjctrmexVjFG2t4nyihXllf92wvsEEGRZ8X9pxVJTd\/tfteIXPbe+u5DIE1ApPYcpfCBwIDAQABo4IC6DCCAuQwHwYDVR0jBBgwFoAUD4BhHIIxYdUvKOeNRji0LOHG2eIwHQYDVR0OBBYEFHHgUNHngFL7IxRlnUOnjTGqVmkmMCMGA1UdEQQcMBqCCnJlZGRpdC5jb22CDCoucmVkZGl0LmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMGsGA1UdHwRkMGIwL6AtoCuGKWh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9zc2NhLXNoYTItZzYuY3JsMC+gLaArhilodHRwOi8vY3JsNC5kaWdpY2VydC5jb20vc3NjYS1zaGEyLWc2LmNybDBMBgNVHSAERTBDMDcGCWCGSAGG\/WwBATAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMAgGBmeBDAECAjB8BggrBgEFBQcBAQRwMG4wJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2lj"}
00879{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":56,"source":"reddit.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":6,"flow_first_seen":1605291684481,"flow_last_seen":1605291684592,"flow_tot_l4_data_len":1773,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":295,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56560,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.reddit.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
01871{"flow_id":4,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":57,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":592781,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABDgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc8HTo1v8Rew0agBgLMIq3AAABAQgKwtcy36l04BxlcnQuY29tMEYGCCsGAQUFBzAChjpodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRTSEEyU2VjdXJlU2VydmVyQ0EuY3J0MAwGA1UdEwEB\/wQCMAAwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdgD2XJQv0XcwIhRUGAgwlFaO400TGTO\/3wwvIAvMTvFk4wAAAXQrSzGvAAAEAwBHMEUCIA4cEDk5PHlewpHzj26HOiQYpOqP2omD5+Ok3XvOGjvLAiEAscSe5jGq7+A1eA9CosURVXiFG10O2uG7a3d0exugn8YAdwBc3EOS\/uarRUSxXprUVuYQN\/vV+kfcoXOUsl7m9scOygAAAXQrSzHWAAAEAwBIMEYCIQCxbG96NckU2JDBIgJPBbdq8isaryVs6CFbEIVpmICYFgIhAK4\/cwv3QOvL6\/r1eBSuNjH8ea1wkWPPafYHa\/T2zS4cMA0GCSqGSIb3DQEBCwUAA4IBAQDJdKHctElcuqyCkmp8mpTUGkGnB3LVzx6AlsMpQm1P2E\/FO7nlknf9cCDmw9zsWs4Vwy0WyWm2VITQHFibHvPRL9Dqdq57g8bbFomQLOayWwM4ymsEk1sOwkg9GmGUttJoxtFhWMTaKNgiwa1KzMnOenD0aOCisNjqYwuAwjXNR4prj\/NaGsDOdAIquq\/5ysyZ9ZTflWiVnQbilOt4e\/blGzRhaSd4gTYdYkgV\/84UmKwjSekYiL2ioVV1mVoDRtSfMV9CdwjyekkC849Oi21tKfCnsyl+9Ipp3oESKGdNZ5966KOZhQo0yght\/ROeeRQR8c5vS0fKeKnkHGBz240cAASYMIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBhMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBDQTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIgU2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANyuWJBNwcQwFZA1W248ghX1LFy949v\/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83nf36QYSvx6+M\/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bdKpPDkC55gIDvEwRqFDu1m5K+wgdlTvza\/P96"}
00452{"flow_id":4,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":61,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":592908,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gB3LfACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PABuxF7DRp06Nb\/gBAB9VY9AAABAQgKqXTgRMLXMt8="}
00451{"flow_id":4,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":592921,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gB3LfACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PABuxF7DRp06NsXgBAB7VItAAABAQgKqXTgRMLXMt8="}
01866{"flow_id":4,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":593083,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"}
01148{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":63,"source":"reddit.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":10,"flow_first_seen":1605291684481,"flow_last_seen":1605291684593,"flow_tot_l4_data_len":3997,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":399,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56560,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.reddit.com","server_names":"reddit.com,*.reddit.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Reddit Inc., CN=*.reddit.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"DB:E9:D5:FE:EB:EF:68:34:55:FD:62:BA:C9:BB:04:D4:E3:22:18:81"}}
01153{"flow_id":4,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":593086,"pkt_caplen":601,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":601,"pkt_l4_len":547,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAiMGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc8HTo3y8Rew0agBgLMEp3AAABAQgKwtcy36l04ByMeNOajMtxBxZ+LVRuvUxmRODoEmjzZpUwTQHXVXdAaqEqvizNUSG+LT4vLrN7\/K4TwkEU6rRjdvl7TGJTrtCTMr2vchF3+WWRcRrbCxS19I7FpLOu0+uRp0eAJTMGW1sjp2Tl1N1sPVLUR76tvsG1UZjWq6EozImj5ue5\/NjN5pIuabHxZABwArW3iblcTRJthPe\/eXEt+vWXP7bK6pfiHfdKhr+WbtteQ+gSEhA1KkKMKnmBC2LheG29uhxtvvQ3X+xQV+7F9j4WAwMBLAwAASgDAB0g6VrN\/S322rgYZ5yHqLO3+y7qv6+tbXE1eDijdVsDmi0IBAEAaTTRefij3djMnO7xsayTw9QxDTguuqktQM1w1SQOpPtuuIiGWRGD0TsI8Mah2oqxYld7ORzslPmYlUNsc3vufXw7YBmDG0VIx6qBAcNZNK9WspF+9IsVLonjyjHDbMY4giUHwDanubqtRmAXYbzn4ycsNcxsNMFLXWr8Gjanu81C4Ptt6UU1LBqbaEBkheeQYzM9+zTahkvzmfeApRGkxcs6npQjvKiW\/Kay8+Z2hHmK+aD1NebHozbpudcTtJquatolSbn2PMihTI0n\/XFUK1ZtJOYVcAu9sPh\/Zhfrs3F1d3VSktlEeYsh5mXdA\/4gcFjg9NhrdJnW+luLHAodvBYDAwAEDgAAAA=="}
00452{"flow_id":4,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":65,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":593105,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gB3LfACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PABuxF7DRp06N8vgBAB5U4cAAABAQgKqXTgRcLXMt8="}
00452{"flow_id":4,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":593136,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gB3LfACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PABuxF7DRp06OEygBAB4UwdAAABAQgKqXTgRcLXMt8="}
00581{"flow_id":4,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":76,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":595476,"pkt_caplen":179,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":179,"pkt_l4_len":125,"pkt":"qtsDr8lk5EKm5WPyht1gB3LfAH0GQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PABuxF7DRp06OEygBgB9U4+AAABAQgKqXTgR8LXMt8WAwMAJRAAACEgLCeuk0qqi\/GOnYAOAtlcQKOyjvGtBdId5ZCzGhWhjkkUAwMAAQEWAwMAKAAAAAAAAAAASNVaMONVPNQkwi1QNatfiTayCgn\/ib7d+PoSyIjqcPA="}
00455{"flow_id":4,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":94,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":654505,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc8HTo4TIRew13gBALPEI\/AAABAQgKwtczA6l04Ec="}
00505{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":279,"source":"reddit.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1605291686035,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56562,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00463{"flow_id":5,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":279,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":35717,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gDzZzACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PIBu+DxzH8AAAAAoAL9INmFAAACBAWgBAIICql05ecAAAAAAQMDBw=="}
00505{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":280,"source":"reddit.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1605291686035,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56564,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00464{"flow_id":6,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":280,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":35769,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gCjLcACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PQBu\/EwLy4AAAAAoAL9IGaWAAACBAWgBAIICql05ecAAAAAAQMDBw=="}
00505{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":281,"source":"reddit.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1605291686035,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56566,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00463{"flow_id":7,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":281,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":35788,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gAChDACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PYBu+yXuQoAAAAAoAL9IOFQAAACBAWgBAIICql05ecAAAAAAQMDBw=="}
00505{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":282,"source":"reddit.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1605291686035,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56568,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00463{"flow_id":8,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":282,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":35808,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gCVbzACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PgBu3BHTUsAAAAAoAL9IMleAAACBAWgBAIICql05ecAAAAAAQMDBw=="}
00505{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":283,"source":"reddit.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1605291686035,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56570,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00465{"flow_id":9,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":283,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":35833,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gB\/ybACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PoBu\/q4YysAAAAAoAL9ICkLAAACBAWgBAIICql05ecAAAAAAQMDBw=="}
00506{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":284,"source":"reddit.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1605291686035,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56572,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00464{"flow_id":10,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":284,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":35852,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gAreKACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PwBu8WSVasAAAAAoAL9IGuvAAACBAWgBAIICql05ecAAAAAAQMDBw=="}
00506{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":417,"source":"reddit.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1605291686060,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56574,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00464{"flow_id":11,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":417,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":60608,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gBKPwACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3P4Bu+9x1NYAAAAAoAL9IMKJAAACBAWgBAIICql05gAAAAAAAQMDBw=="}
00506{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":418,"source":"reddit.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1605291686060,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56576,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00464{"flow_id":12,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":418,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":60634,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gDoxGACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QABu3ytfXMAAAAAoAL9IIyvAAACBAWgBAIICql05gAAAAAAAQMDBw=="}
00506{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":419,"source":"reddit.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":1605291686060,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56578,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00464{"flow_id":13,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":419,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":60652,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gBLbYACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QIBuwaOmx4AAAAAoAL9IOUhAAACBAWgBAIICql05gAAAAAAAQMDBw=="}
00506{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":420,"source":"reddit.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1605291686060,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56580,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00464{"flow_id":14,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":420,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":60669,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gCVnRACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QQBuwBg34wAAAAAoAL9IKbfAAACBAWgBAIICql05gAAAAAAAQMDBw=="}
00506{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":421,"source":"reddit.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1605291686064,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56582,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00464{"flow_id":15,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":421,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":64532,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gBAJCACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QYBu4l3q2EAAAAAoAL9IFHtAAACBAWgBAIICql05gQAAAAAAQMDBw=="}
00506{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":422,"source":"reddit.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_first_seen":1605291686064,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56584,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00464{"flow_id":16,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":422,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":64563,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gAj4aACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QgBuwHFZiEAAAAAoAL9IB7eAAACBAWgBAIICql05gQAAAAAAQMDBw=="}
00506{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":423,"source":"reddit.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_first_seen":1605291686064,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56586,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00465{"flow_id":17,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":423,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":64586,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gCQMdACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QoBuxlyLXsAAAAAoAL9ID\/VAAACBAWgBAIICql05gQAAAAAAQMDBw=="}
00506{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":424,"source":"reddit.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_first_seen":1605291686064,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56588,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00464{"flow_id":18,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":424,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":64604,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gBZ0wACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QwBu2zjowUAAAAAoAL9IHbXAAACBAWgBAIICql05gQAAAAAAQMDBw=="}
00465{"flow_id":6,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":425,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":65673,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc9JWtCtDxMC8voBJXgHBaAAACBAV4AQMDAwQCCArC1ziiqXTl5w=="}
00465{"flow_id":5,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":426,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":65673,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc8oSMMqHg8cyAoBJXgMyZAAACBAV4AQMDAwQCCArC1ziiqXTl5w=="}
00453{"flow_id":6,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":427,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":65686,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCjLcACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PQBu\/EwLy+VrQrRgBAB+\/RNAAABAQgKqXTmBcLXOKI="}
00451{"flow_id":5,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":428,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":65695,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDzZzACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PIBu+DxzICEjDKigBAB+1CNAAABAQgKqXTmBcLXOKI="}
01151{"flow_id":6,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":429,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":65815,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"}
00830{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":429,"source":"reddit.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":4,"flow_first_seen":1605291686035,"flow_last_seen":1605291686065,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56564,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.redditstatic.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
01144{"flow_id":5,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":430,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":65926,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"}
00830{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":430,"source":"reddit.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":4,"flow_first_seen":1605291686035,"flow_last_seen":1605291686065,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56562,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.redditstatic.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
00465{"flow_id":9,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":431,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":71075,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc+p6YTHT6uGMsoBJXgOg4AAACBAV4AQMDAwQCCArC1zipqXTl5w=="}
00465{"flow_id":8,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":432,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":71076,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc+BQBJhBwR01MoBJXgDmIAAACBAV4AQMDAwQCCArC1zipqXTl5w=="}
00465{"flow_id":7,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":433,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":71076,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc9o6MJX7sl7kLoBJXgNeBAAACBAV4AQMDAwQCCArC1zioqXTl5w=="}
00453{"flow_id":9,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":434,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":71087,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gB\/ybACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PoBu\/q4YyyemEx1gBAB+2wmAAABAQgKqXTmC8LXOKk="}
00451{"flow_id":8,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":435,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":71097,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCVbzACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PgBu3BHTUwUASYRgBAB+711AAABAQgKqXTmC8LXOKk="}
00452{"flow_id":7,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":436,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":71101,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gAChDACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PYBu+yXuQuOjCV\/gBAB+1tvAAABAQgKqXTmC8LXOKg="}
01147{"flow_id":9,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":437,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":71202,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"}
00830{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":437,"source":"reddit.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":4,"flow_first_seen":1605291686035,"flow_last_seen":1605291686071,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56570,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.redditstatic.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
01145{"flow_id":8,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":438,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":71324,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"}
00830{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":438,"source":"reddit.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":4,"flow_first_seen":1605291686035,"flow_last_seen":1605291686071,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56568,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.redditstatic.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
01146{"flow_id":7,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":439,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":71421,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"qtsDr8lk5EKm5WPyht1gAChDAiUGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PYBu+yXuQuOjCV\/gBgB+wgeAAABAQgKqXTmC8LXOKgWAwECAAEAAfwDA7XecZSyIi1V1EshjdefUR6Jur4mAK6n2qRyNLgxIyayIElAt3tGSzVAaM4UMvIvnmVZMDtcC3g\/fPa8ngjS2vVAACC6uhMBEwITA8ArwC\/ALMAwzKnMqMATwBQAnACdAC8ANQEAAZMaGgAAAAAAGQAXAAAUd3d3LnJlZGRpdHN0YXRpYy5jb20AFwAA\/wEAAQAACgAKAAjq6gAdABcAGAALAAIBAAAjAAAAEAAOAAwCaDIIaHR0cC8xLjEABQAFAQAAAAAADQASABAEAwgEBAEFAwgFBQEIBgYBABIAAAAzACsAKerqAAEAAB0AIOYGrt0vj7XR6tD8KT6zhU9cFgDxLIaPkqiBK4j7VzFAAC0AAgEBACsACwpqagMEAwMDAgMBABsAAwIAAkpKAAEAABUAyAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"}
00830{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":439,"source":"reddit.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":4,"flow_first_seen":1605291686035,"flow_last_seen":1605291686071,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56566,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.redditstatic.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
00468{"flow_id":10,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":440,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":72675,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc\/KfiS\/LFklWsoBJXgCIUAAACBAV4AQMDAwQCCArC1ziqqXTl5w=="}
00452{"flow_id":10,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":441,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":72685,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gAreKACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PwBu8WSVayn4kvzgBAB+6YAAAABAQgKqXTmDMLXOKo="}
01146{"flow_id":10,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":442,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":72857,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"}
00831{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":442,"source":"reddit.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":4,"flow_first_seen":1605291686035,"flow_last_seen":1605291686072,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56572,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.redditstatic.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
00506{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":443,"source":"reddit.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_first_seen":1605291686084,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56590,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00464{"flow_id":19,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":443,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":84924,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gBTHMACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3Q4Bu5RtgHMAAAAAoAL9IHHJAAACBAWgBAIICql05hgAAAAAAQMDBw=="}
00506{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":444,"source":"reddit.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_first_seen":1605291686084,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56592,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00464{"flow_id":20,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":444,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":84954,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gCcfOACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3RABu9uJgbEAAAAAoAL9ICltAAACBAWgBAIICql05hgAAAAAAQMDBw=="}
00466{"flow_id":13,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":445,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":99352,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdAmJL0EwGjpsfoBJXgFyoAAACBAV4AQMDAwQCCArC1zjFqXTmAA=="}
00466{"flow_id":12,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":446,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":99352,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdABmbR4V8rX10oBJXgNWtAAACBAV4AQMDAwQCCArC1zjFqXTmAA=="}
00467{"flow_id":11,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":447,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":99353,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc\/oyw49PvcdTXoBJXgPwjAAACBAV4AQMDAwQCCArC1zjFqXTmAA=="}
00452{"flow_id":13,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":448,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":99372,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBLbYACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QIBuwaOmx9iS9BNgBAB++CSAAABAQgKqXTmJ8LXOMU="}
00452{"flow_id":12,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":449,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":99405,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDoxGACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QABu3ytfXQZm0eGgBAB+1mYAAABAQgKqXTmJ8LXOMU="}
00452{"flow_id":11,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":450,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":99409,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBKPwACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3P4Bu+9x1NeMsOPUgBAB+4AOAAABAQgKqXTmJ8LXOMU="}
01147{"flow_id":13,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":451,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":99570,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"}
00833{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":451,"source":"reddit.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":4,"flow_first_seen":1605291686060,"flow_last_seen":1605291686099,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56578,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"styles.redditmedia.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
01146{"flow_id":12,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":452,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":99717,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"}
00833{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":452,"source":"reddit.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":4,"flow_first_seen":1605291686060,"flow_last_seen":1605291686099,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56576,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"styles.redditmedia.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
01145{"flow_id":11,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":453,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":99811,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"}
00833{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":453,"source":"reddit.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":4,"flow_first_seen":1605291686060,"flow_last_seen":1605291686099,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56574,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"styles.redditmedia.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
00467{"flow_id":15,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":454,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":100609,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdBugO8IeJd6tioBJXgCN0AAACBAV4AQMDAwQCCArC1zjGqXTmBA=="}
00467{"flow_id":14,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":455,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":100610,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdBGVsk6UAYN+NoBJXgFfrAAACBAV4AQMDAwQCCArC1zjGqXTmAA=="}
00467{"flow_id":16,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":456,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":100610,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdCGPwRcUBxWYioBJXgB9GAAACBAV4AQMDAwQCCArC1zjGqXTmBA=="}
00453{"flow_id":15,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":457,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":100641,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBAJCACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QYBu4l3q2LoDvCIgBAB+6dhAAABAQgKqXTmKMLXOMY="}
00453{"flow_id":14,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":458,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":100651,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCVnRACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QQBuwBg341lbJOmgBAB+9vUAAABAQgKqXTmKMLXOMY="}
00453{"flow_id":16,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":459,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":100655,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gAj4aACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QgBuwHFZiJj8EXGgBAB+6MzAAABAQgKqXTmKMLXOMY="}
00467{"flow_id":17,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":460,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":100692,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdCnzgy8YZci18oBJXgKFLAAACBAV4AQMDAwQCCArC1zjGqXTmBA=="}
00453{"flow_id":17,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":461,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":100697,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCQMdACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QoBuxlyLXx84MvHgBAB+yU5AAABAQgKqXTmKMLXOMY="}
01145{"flow_id":15,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":462,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":100785,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"qtsDr8lk5EKm5WPyht1gBAJCAiUGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QYBu4l3q2LoDvCIgBgB+xTvAAABAQgKqXTmKMLXOMYWAwECAAEAAfwDA+4rEWoD2S7prdk0mAkbCbz9OAUfkZBI4IF9dVBNcGrjII4pXVZ09KrfaYtjFSFfkXaLG3KyMXbQwptYN7z2pKjvACAaGhMBEwITA8ArwC\/ALMAwzKnMqMATwBQAnACdAC8ANQEAAZP6+gAAAAAAFAASAAAPcHJldmlldy5yZWRkLml0ABcAAP8BAAEAAAoACgAICgoAHQAXABgACwACAQAAIwAAABAADgAMAmgyCGh0dHAvMS4xAAUABQEAAAAAAA0AEgAQBAMIBAQBBQMIBQUBCAYGAQASAAAAMwArACkKCgABAAAdACBezRVw29zCPI1rNVsRPhgUYKPeoX8z4m7fd2omUSmBZAAtAAIBAQArAAsKmpoDBAMDAwIDAQAbAAMCAAIqKgABAAAVAM0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"}
00826{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":462,"source":"reddit.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":4,"flow_first_seen":1605291686064,"flow_last_seen":1605291686100,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56582,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"preview.redd.it","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
01149{"flow_id":14,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":463,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":100889,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"}
00833{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":463,"source":"reddit.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":4,"flow_first_seen":1605291686060,"flow_last_seen":1605291686100,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56580,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"styles.redditmedia.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
01150{"flow_id":16,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":464,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":100989,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"}
00826{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":464,"source":"reddit.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":4,"flow_first_seen":1605291686064,"flow_last_seen":1605291686100,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56584,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"preview.redd.it","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
01151{"flow_id":17,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":465,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":101082,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"qtsDr8lk5EKm5WPyht1gCQMdAiUGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QoBuxlyLXx84MvHgBgB+x\/BAAABAQgKqXTmKcLXOMYWAwECAAEAAfwDAz6SDTaBPPoxlu\/6nyTmclibqATJEMVKR2GfYD\/wXr0NIAENzqDXq8Wo2Bu1hnYnue89pYme7\/8\/HVUKT7+0fWNUACBqahMBEwITA8ArwC\/ALMAwzKnMqMATwBQAnACdAC8ANQEAAZPq6gAAAAAAFAASAAAPcHJldmlldy5yZWRkLml0ABcAAP8BAAEAAAoACgAIamoAHQAXABgACwACAQAAIwAAABAADgAMAmgyCGh0dHAvMS4xAAUABQEAAAAAAA0AEgAQBAMIBAQBBQMIBQUBCAYGAQASAAAAMwArAClqagABAAAdACCGO8UoFeFs5DFn8Mr4+C1HHCBuj\/ATUm2KisMDLC1sOgAtAAIBAQArAAsKiooDBAMDAwIDAQAbAAMCAAJKSgABAAAVAM0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"}
00826{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":465,"source":"reddit.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":4,"flow_first_seen":1605291686064,"flow_last_seen":1605291686101,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56586,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"preview.redd.it","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
00468{"flow_id":18,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":466,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":102919,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdDA6Vo\/hs46MGoBJXgG5nAAACBAV4AQMDAwQCCArC1zjGqXTmBA=="}
00454{"flow_id":18,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":467,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":102932,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBZ0wACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QwBu2zjowYOlaP5gBAB+\/JSAAABAQgKqXTmKsLXOMY="}
01148{"flow_id":18,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":468,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":103163,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"}
00826{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":468,"source":"reddit.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":4,"flow_first_seen":1605291686064,"flow_last_seen":1605291686103,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56588,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"preview.redd.it","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
00454{"flow_id":6,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":469,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":103676,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc9JWtCtHxMDE0gBALMOjtAAABAQgKwtc4yKl05gU="}
01861{"flow_id":6,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":470,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":105978,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"}
00886{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":470,"source":"reddit.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":6,"flow_first_seen":1605291686035,"flow_last_seen":1605291686105,"flow_tot_l4_data_len":1773,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":295,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56564,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.redditstatic.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
00454{"flow_id":5,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":471,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":105978,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc8oSMMqLg8c6FgBALMEUrAAABAQgKwtc4yql05gU="}
01875{"flow_id":6,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":472,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":105979,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"}
00453{"flow_id":6,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":473,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":105992,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCjLcACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PQBu\/EwMTSVrQ7pgBAB9e3lAAABAQgKqXTmLcLXOMs="}
00453{"flow_id":6,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":474,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":106037,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCjLcACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PQBu\/EwMTSVrRMBgBAB7enVAAABAQgKqXTmLcLXOMs="}
01867{"flow_id":6,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":475,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":106051,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"}
01160{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":475,"source":"reddit.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":10,"flow_first_seen":1605291686035,"flow_last_seen":1605291686106,"flow_tot_l4_data_len":3997,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":399,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56564,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.redditstatic.com","server_names":"www.redditstatic.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Reddit Inc., CN=www.redditstatic.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"24:BA:A2:05:04:98:6C:4E:72:57:0C:2C:45:25:9D:1F:8E:C3:CC:A8"}}
01161{"flow_id":6,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":476,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":106051,"pkt_caplen":606,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":606,"pkt_l4_len":552,"pkt":"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"}
00454{"flow_id":6,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":477,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":106054,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCjLcACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PQBu\/EwMTSVrRcZgBAB5eXFAAABAQgKqXTmLcLXOMs="}
00454{"flow_id":6,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":478,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":106057,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCjLcACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PQBu\/EwMTSVrRkhgBAB4ePBAAABAQgKqXTmLcLXOMs="}
00581{"flow_id":6,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":479,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":108756,"pkt_caplen":179,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":179,"pkt_l4_len":125,"pkt":"qtsDr8lk5EKm5WPyht1gCjLcAH0GQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PQBu\/EwMTSVrRkhgBgB9a3tAAABAQgKqXTmMMLXOMsWAwMAJRAAACEgfccXoV0OOJneLf+rpWTHrQM5urvnVU23TJoAWgykwTsUAwMAAQEWAwMAKAAAAAAAAAAA0ebRKJwkBmszku7WqU95DRhA0VfugO+WHocBjDjyn94="}
00590{"flow_id":6,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":480,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":108867,"pkt_caplen":185,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":185,"pkt_l4_len":131,"pkt":"qtsDr8lk5EKm5WPyht1gCjLcAIMGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PQBu\/EwMZGVrRkhgBgB9bQ9AAABAQgKqXTmMMLXOMsXAwMAXgAAAAAAAAABpujuixx0xW9GrCk9QTYOyj3yFZulKnjJXZ7SJOb+XYtysJf3f4U+6KzDsvn\/EahAjH57elr7uvMemI9lRgdDJ8lMRedqn0jswH0MULTkNVj6iT49rNg="}
00452{"flow_id":5,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":481,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":108927,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDzZzACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PIBu+DxzoWEjDKigBEB+040AAABAQgKqXTmMMLXOMo="}
00453{"flow_id":7,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":482,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":108978,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gAChDACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PYBu+yXuxCOjCV\/gBEB+1lEAAABAQgKqXTmMMLXOKg="}
00452{"flow_id":8,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":483,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":109012,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCVbzACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PgBu3BHT1EUASYRgBEB+7tKAAABAQgKqXTmMMLXOKk="}
00454{"flow_id":9,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":484,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":109028,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gB\/ybACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PoBu\/q4ZTGemEx1gBEB+2n7AAABAQgKqXTmMMLXOKk="}
00453{"flow_id":10,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":485,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":109044,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gAreKACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PwBu8WSV7Gn4kvzgBEB+6PWAAABAQgKqXTmMMLXOKo="}
01862{"flow_id":5,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":490,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":110087,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"}
00886{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":490,"source":"reddit.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":7,"flow_first_seen":1605291686035,"flow_last_seen":1605291686110,"flow_tot_l4_data_len":1805,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":257,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56562,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.redditstatic.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
01875{"flow_id":5,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":491,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":110087,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"}
01865{"flow_id":5,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":492,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":110088,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABDgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc8oSMOtLg8c6FgBgLMBwmAAABAQgKwtc4zql05gX82vz\/eq7cXH5VMQzoOQek174v0wtq0rHfX\/5XdFM7NYDdro5EmLOfDtPa4Nf0aymrRKdLWIRtkkuBw9pzixKXSJAERXUa3Tcxl5LozVQNO+TBPzleLrjzXH4QjoZBAI1FZkewoWXOoKopCU7zl+voLqsPcqcwDvrH9P0Ud8OkWyhXwrP5gv23RVibAgMBAAGjggFaMIIBVjASBgNVHRMBAf8ECDAGAQH\/AgEAMA4GA1UdDwEB\/wQEAwIBhjA0BggrBgEFBQcBAQQoMCYwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTB7BgNVHR8EdDByMDegNaAzhjFodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRHbG9iYWxSb290Q0EuY3JsMDegNaAzhjFodHRwOi8vY3JsNC5kaWdpY2VydC5jb20vRGlnaUNlcnRHbG9iYWxSb290Q0EuY3JsMD0GA1UdIAQ2MDQwMgYEVR0gADAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMB0GA1UdDgQWBBQPgGEcgjFh1S8o541GOLQs4cbZ4jAfBgNVHSMEGDAWgBQD3lA1VtFMu2bwo+IbG8OXsj3RVTANBgkqhkiG9w0BAQsFAAOCAQEAIz7fS9IxQqW2fkJcGkTMadFotF1L4AQhbEvibcyx4JePplMJzaoqZeU5Tx6DpW5cmKIkJub7oe2Txy4Cxk1Kv7BC33jas6j5bf8hhVM2YEx2zuw43NZRgPDF1uXUTSdkq5vHPnH7SJe4M23JEwfulqIbGBX2XExA7bPC7P9xweNH\/9S5ALQ3Qtogyepuiu4UBq59olmYiKgbby308skUXybPLI1+7TfAqdU5uYK\/GQzqNK8AIWj4rXPiyTLaOCULVdOaHfBohu0uQTTvfKVQHb86+dPBCAzm7R6KWCXkuHetLW71Ut20dI+rSS6dO5M0KB94zpTqx73TyW0c3lwy8xYDAwHfFgAB2wEAAdcwggHTCgEAoIIBzDCCAcgGCSsGAQUFBzABAQSCAbkwggG1MIGeohYEFA+AYRyCMWHVLyjnjUY4tCzhxtniGA8yMDIwMTExMjIxMjA1NFowczBxMEkwCQYFKw4DAhoFAAQUEF+meoAInbUnnzXOgwtDiJ6jxw0EFA+AYRyCMWHVLyjnjUY4tCzhxtniAhAKKFSCcBAsMFQOJUmxyqxYgAAYDzIwMjAxMTEyMjEyMDU0WqARGA8yMDIwMTExOTIwMzU1NFowDQYJKoZIhvcNAQELBQADggEBABeB6JqTyRqpznuNqjuGqK1A1QRem\/bt7r3xHqNn7pAlcMLfp0mKD4Z\/4wWMOz\/68m3Y"}
01159{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":492,"source":"reddit.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":9,"flow_first_seen":1605291686035,"flow_last_seen":1605291686110,"flow_tot_l4_data_len":3965,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":440,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56562,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.redditstatic.com","server_names":"www.redditstatic.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Reddit Inc., CN=www.redditstatic.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"24:BA:A2:05:04:98:6C:4E:72:57:0C:2C:45:25:9D:1F:8E:C3:CC:A8"}}
01158{"flow_id":5,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":493,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":110088,"pkt_caplen":606,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":606,"pkt_l4_len":552,"pkt":"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"}
00437{"flow_id":5,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":494,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":110103,"pkt_caplen":74,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":74,"pkt_l4_len":20,"pkt":"qtsDr8lk5EKm5WPyht1gC3zdABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PIBu+DxzoUAAAAAUAQAAMvJAAA="}
00454{"flow_id":8,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":495,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":117442,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc+BQBJhFwR09RgBALMLIOAAABAQgKwtc41ql05gs="}
00455{"flow_id":9,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":496,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":117442,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc+p6YTHX6uGUxgBALMGC\/AAABAQgKwtc41ql05gs="}
00455{"flow_id":7,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":497,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":117535,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc9o6MJX\/sl7sQgBALMFAHAAABAQgKwtc41ql05gs="}
01862{"flow_id":8,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":498,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":127575,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"}
00886{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":498,"source":"reddit.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":7,"flow_first_seen":1605291686035,"flow_last_seen":1605291686127,"flow_tot_l4_data_len":1805,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":257,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56568,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.redditstatic.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
00436{"flow_id":8,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":499,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":127595,"pkt_caplen":74,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":74,"pkt_l4_len":20,"pkt":"qtsDr8lk5EKm5WPyht1gDDz0ABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PgBu3BHT1EAAAAAUAQAALuiAAA="}
01876{"flow_id":8,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":500,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":128442,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"}
01861{"flow_id":9,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":501,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":128443,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"}
00886{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":501,"source":"reddit.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":7,"flow_first_seen":1605291686035,"flow_last_seen":1605291686128,"flow_tot_l4_data_len":1805,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":257,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56570,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.redditstatic.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
01866{"flow_id":8,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":502,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":128443,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"}
01160{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":502,"source":"reddit.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":10,"flow_first_seen":1605291686035,"flow_last_seen":1605291686128,"flow_tot_l4_data_len":3985,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":398,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56568,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.redditstatic.com","server_names":"www.redditstatic.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Reddit Inc., CN=www.redditstatic.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"24:BA:A2:05:04:98:6C:4E:72:57:0C:2C:45:25:9D:1F:8E:C3:CC:A8"}}
01875{"flow_id":9,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":503,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":128443,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"}
00437{"flow_id":8,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":504,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":128450,"pkt_caplen":74,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":74,"pkt_l4_len":20,"pkt":"qtsDr8lk5EKm5WPyht1gDDz0ABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PgBu3BHT1EAAAAAUAQAALuiAAA="}
00437{"flow_id":9,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":505,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":128460,"pkt_caplen":74,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":74,"pkt_l4_len":20,"pkt":"qtsDr8lk5EKm5WPyht1gCLKYABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PoBu\/q4ZTEAAAAAUAQAABtPAAA="}
00437{"flow_id":8,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":506,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":128462,"pkt_caplen":74,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":74,"pkt_l4_len":20,"pkt":"qtsDr8lk5EKm5WPyht1gDDz0ABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PgBu3BHT1EAAAAAUAQAALuiAAA="}
01159{"flow_id":8,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":507,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":128566,"pkt_caplen":606,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":606,"pkt_l4_len":552,"pkt":"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"}
01866{"flow_id":9,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":508,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":128567,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"}
01160{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":508,"source":"reddit.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":10,"flow_first_seen":1605291686035,"flow_last_seen":1605291686128,"flow_tot_l4_data_len":3985,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":398,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56570,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.redditstatic.com","server_names":"www.redditstatic.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Reddit Inc., CN=www.redditstatic.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"24:BA:A2:05:04:98:6C:4E:72:57:0C:2C:45:25:9D:1F:8E:C3:CC:A8"}}
01156{"flow_id":9,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":509,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":128567,"pkt_caplen":606,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":606,"pkt_l4_len":552,"pkt":"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"}
01864{"flow_id":7,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":510,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":128567,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"}
00886{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":510,"source":"reddit.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":7,"flow_first_seen":1605291686035,"flow_last_seen":1605291686128,"flow_tot_l4_data_len":1805,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":257,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56566,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.redditstatic.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
01875{"flow_id":7,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":511,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":128567,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"}
00437{"flow_id":8,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":512,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":128573,"pkt_caplen":74,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":74,"pkt_l4_len":20,"pkt":"qtsDr8lk5EKm5WPyht1gDDz0ABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PgBu3BHT1EAAAAAUAQAALuiAAA="}
00438{"flow_id":9,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":513,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":128577,"pkt_caplen":74,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":74,"pkt_l4_len":20,"pkt":"qtsDr8lk5EKm5WPyht1gCLKYABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PoBu\/q4ZTEAAAAAUAQAABtPAAA="}
00438{"flow_id":9,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":514,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":128580,"pkt_caplen":74,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":74,"pkt_l4_len":20,"pkt":"qtsDr8lk5EKm5WPyht1gCLKYABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PoBu\/q4ZTEAAAAAUAQAABtPAAA="}
00436{"flow_id":7,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":515,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":128585,"pkt_caplen":74,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":74,"pkt_l4_len":20,"pkt":"qtsDr8lk5EKm5WPyht1gBOdWABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PYBu+yXuxAAAAAAUAQAANOUAAA="}
01867{"flow_id":7,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":516,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":129580,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABDgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc9o6MLa\/sl7sQgBgLMCcEAAABAQgKwtc42Kl05gv82vz\/eq7cXH5VMQzoOQek174v0wtq0rHfX\/5XdFM7NYDdro5EmLOfDtPa4Nf0aymrRKdLWIRtkkuBw9pzixKXSJAERXUa3Tcxl5LozVQNO+TBPzleLrjzXH4QjoZBAI1FZkewoWXOoKopCU7zl+voLqsPcqcwDvrH9P0Ud8OkWyhXwrP5gv23RVibAgMBAAGjggFaMIIBVjASBgNVHRMBAf8ECDAGAQH\/AgEAMA4GA1UdDwEB\/wQEAwIBhjA0BggrBgEFBQcBAQQoMCYwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTB7BgNVHR8EdDByMDegNaAzhjFodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRHbG9iYWxSb290Q0EuY3JsMDegNaAzhjFodHRwOi8vY3JsNC5kaWdpY2VydC5jb20vRGlnaUNlcnRHbG9iYWxSb290Q0EuY3JsMD0GA1UdIAQ2MDQwMgYEVR0gADAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMB0GA1UdDgQWBBQPgGEcgjFh1S8o541GOLQs4cbZ4jAfBgNVHSMEGDAWgBQD3lA1VtFMu2bwo+IbG8OXsj3RVTANBgkqhkiG9w0BAQsFAAOCAQEAIz7fS9IxQqW2fkJcGkTMadFotF1L4AQhbEvibcyx4JePplMJzaoqZeU5Tx6DpW5cmKIkJub7oe2Txy4Cxk1Kv7BC33jas6j5bf8hhVM2YEx2zuw43NZRgPDF1uXUTSdkq5vHPnH7SJe4M23JEwfulqIbGBX2XExA7bPC7P9xweNH\/9S5ALQ3Qtogyepuiu4UBq59olmYiKgbby308skUXybPLI1+7TfAqdU5uYK\/GQzqNK8AIWj4rXPiyTLaOCULVdOaHfBohu0uQTTvfKVQHb86+dPBCAzm7R6KWCXkuHetLW71Ut20dI+rSS6dO5M0KB94zpTqx73TyW0c3lwy8xYDAwHfFgAB2wEAAdcwggHTCgEAoIIBzDCCAcgGCSsGAQUFBzABAQSCAbkwggG1MIGeohYEFA+AYRyCMWHVLyjnjUY4tCzhxtniGA8yMDIwMTExMjIxMjA1NFowczBxMEkwCQYFKw4DAhoFAAQUEF+meoAInbUnnzXOgwtDiJ6jxw0EFA+AYRyCMWHVLyjnjUY4tCzhxtniAhAKKFSCcBAsMFQOJUmxyqxYgAAYDzIwMjAxMTEyMjEyMDU0WqARGA8yMDIwMTExOTIwMzU1NFowDQYJKoZIhvcNAQELBQADggEBABeB6JqTyRqpznuNqjuGqK1A1QRem\/bt7r3xHqNn7pAlcMLfp0mKD4Z\/4wWMOz\/68m3Y"}
01160{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":516,"source":"reddit.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":10,"flow_first_seen":1605291686035,"flow_last_seen":1605291686129,"flow_tot_l4_data_len":3985,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":398,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56566,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.redditstatic.com","server_names":"www.redditstatic.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Reddit Inc., CN=www.redditstatic.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"24:BA:A2:05:04:98:6C:4E:72:57:0C:2C:45:25:9D:1F:8E:C3:CC:A8"}}
01159{"flow_id":7,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":517,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":129581,"pkt_caplen":606,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":606,"pkt_l4_len":552,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAigGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc9o6MMcfsl7sQgBgLMIDoAAABAQgKwtc42Kl05gs0oxSJU7Q1xjHlIjL9scjBhPuAEq0GCjMtFYiE7RJduMg4k0Ct9ZVwlb\/tOfyduWomz4zyeZVSJcuz082cUMYPrFas2XrpIIwdEdRaYS92wFLz1XeFYdwh7zq\/N7Upjur0hrtQfEue4+5ZqhbVR01oJNp4anHrUePIzlEnIT\/kcFsvAfnzhY8sCe6\/eHPlYmFh5NUqF382WuxmyYl4R2jC00MjKyceQCe+GA7mY6N19PTuAOUiLxpJNmIq9pmPNVdOG9Iimp3HvGkitHGB3xYDAwEsDAABKAMAHSC2k7KwcAPsv4fSQ0bc08RiDffNZuoU8t2FrnZlHXVTfQgEAQBpiqGB2Hqu1po6M6HhvzqFp1RVncGzEUi7lwiYcHf8Bs+Gu6A3Wug\/vVauHE905tCWsK1Y7tBpZ118XLT04I0VFCmj38I8tthuxEFn2kJB6OiIqREluj9nhcn0JNaHlxKEA3ZxsJXLGfppgMULPox9OIspGBpeJKWR3CTRvXvvsdh\/xzUec1zSDwQjTEZ2uYUGS\/vpoVpNBm\/B5d1rVpx9WxPiISd8WyUvK1LihqzEj4wf9SPOc9cSFSOscMhkOBSBqoTYexP5KmXd5hciUa0RxJtE6TKMOC0hESh9weV+lFlg8XL8NJFxQVUbVRMHNrO\/NXnCEWW32P9OMkvF5CaCFgMDAAQOAAAA"}
00467{"flow_id":20,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":518,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":129581,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdELkPzEPbiYGyoBJXgE4hAAACBAV4AQMDAwQCCArC1zjcqXTmGA=="}
00467{"flow_id":19,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":519,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":129581,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdDvdaN0mUbYB0oBJXgO0tAAACBAV4AQMDAwQCCArC1zjbqXTmGA=="}
00457{"flow_id":10,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":520,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":129581,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc\/KfiS\/PFklexgBALMJqUAAABAQgKwtc43Kl05gw="}
01866{"flow_id":10,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":521,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":129581,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABDgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc\/KfiS\/PFklexgBgLMARsAAABAQgKwtc43ql05gwWAwMAUgIAAE4DA\/AQIQbrU20HyJyN7PsW9O\/kvAJjS9MziTQJmepzrB6+AMAvAAAm\/wEAAQAAAAAAAAsABAMAAQIAIwAAAAUAAAAQAAUAAwJoMgAXAAAWAwMK1gsACtIACs8ABjEwggYtMIIFFaADAgECAhAKKFSCcBAsMFQOJUmxyqxYMA0GCSqGSIb3DQEBCwUAME0xCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIgU2VjdXJlIFNlcnZlciBDQTAeFw0yMDA4MjYwMDAwMDBaFw0yMTAyMjIxMjAwMDBaMG8xCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpDYWxpZm9ybmlhMRYwFAYDVQQHEw1TYW4gRnJhbmNpc2NvMRQwEgYDVQQKEwtSZWRkaXQgSW5jLjEdMBsGA1UEAxMUd3d3LnJlZGRpdHN0YXRpYy5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6joCtz\/XpIsmJDC1IQp8NmK79cp42u8wGU1+lRLzNGCN3Oih+bKGJg97Ah7p9AbLaWK0tgyBtFZgkMmY7Jo\/G212kqsCOVM9Th2+rA37LRUL0hA1hYOr7ZloEcI3QHvDG3fMi0MJnQEJUwcYp0LD0lHN+nraQIuBRPUCvjIw59jCEP62Zn9JwJpJGvofXIIJTS1EowlPz0+3NaMoHDR7OifayHdEBn2Cno669wEo1cOfeSogRHUJJgRRUIZuKl4av4KEC0nBDWQlUz2ybLpzENnVqWwK1YiWNlZbF1dwm7oBP9Rvj5VUjzV4rIfFfREPsh+BA\/UlEB0RX0AUqnSkLAgMBAAGjggLlMIIC4TAfBgNVHSMEGDAWgBQPgGEcgjFh1S8o541GOLQs4cbZ4jAdBgNVHQ4EFgQUU1Nk92iGK6OQNjntaEa8GWH6n3IwHwYDVR0RBBgwFoIUd3d3LnJlZGRpdHN0YXRpYy5jb20wDgYDVR0PAQH\/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBrBgNVHR8EZDBiMC+gLaArhilodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vc3NjYS1zaGEyLWc2LmNybDAvoC2gK4YpaHR0cDovL2NybDQuZGlnaWNlcnQuY29tL3NzY2Etc2hhMi1nNi5jcmwwTAYDVR0gBEUwQzA3BglghkgBhv1sAQEwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZngQwBAgIwfAYIKwYBBQUHAQEEcDBuMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5k"}
00887{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":521,"source":"reddit.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":7,"flow_first_seen":1605291686035,"flow_last_seen":1605291686129,"flow_tot_l4_data_len":1805,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":257,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56572,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.redditstatic.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
00437{"flow_id":7,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":522,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":129588,"pkt_caplen":74,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":74,"pkt_l4_len":20,"pkt":"qtsDr8lk5EKm5WPyht1gBOdWABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PYBu+yXuxAAAAAAUAQAANOUAAA="}
00437{"flow_id":7,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":523,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":129595,"pkt_caplen":74,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":74,"pkt_l4_len":20,"pkt":"qtsDr8lk5EKm5WPyht1gBOdWABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PYBu+yXuxAAAAAAUAQAANOUAAA="}
00453{"flow_id":20,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":524,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":129607,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCcfOACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3RABu9uJgbK5D8xEgBAB+9IFAAABAQgKqXTmRcLXONw="}
00453{"flow_id":19,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":525,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":129611,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBTHMACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3Q4Bu5RtgHT3WjdKgBAB+3ESAAABAQgKqXTmRcLXONs="}
00437{"flow_id":10,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":526,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":129618,"pkt_caplen":74,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":74,"pkt_l4_len":20,"pkt":"qtsDr8lk5EKm5WPyht1gDKneABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PwBu8WSV7EAAAAAUAQAAF3zAAA="}
01147{"flow_id":20,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":527,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":129954,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"}
00832{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":527,"source":"reddit.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":4,"flow_first_seen":1605291686084,"flow_last_seen":1605291686129,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56592,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"emoji.redditmedia.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
01151{"flow_id":19,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":528,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":130302,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"}
00832{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":528,"source":"reddit.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":4,"flow_first_seen":1605291686084,"flow_last_seen":1605291686130,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56590,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"emoji.redditmedia.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
01877{"flow_id":10,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":529,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":137678,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"}
00455{"flow_id":12,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":530,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":137679,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdABmbR4Z8rX95gBALME5BAAABAQgKwtc44ql05ic="}
00438{"flow_id":10,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":532,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":137695,"pkt_caplen":74,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":74,"pkt_l4_len":20,"pkt":"qtsDr8lk5EKm5WPyht1gDKneABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PwBu8WSV7EAAAAAUAQAAF3zAAA="}
01868{"flow_id":10,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":535,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":137882,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"}
01161{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":535,"source":"reddit.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":11,"flow_first_seen":1605291686035,"flow_last_seen":1605291686137,"flow_tot_l4_data_len":4005,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":364,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56572,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.redditstatic.com","server_names":"www.redditstatic.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Reddit Inc., CN=www.redditstatic.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"24:BA:A2:05:04:98:6C:4E:72:57:0C:2C:45:25:9D:1F:8E:C3:CC:A8"}}
01168{"flow_id":10,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":537,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":137883,"pkt_caplen":606,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":606,"pkt_l4_len":552,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAigGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc\/KfiWDvFklexgBgLMNq4AAABAQgKwtc43ql05gw0oxSJU7Q1xjHlIjL9scjBhPuAEq0GCjMtFYiE7RJduMg4k0Ct9ZVwlb\/tOfyduWomz4zyeZVSJcuz082cUMYPrFas2XrpIIwdEdRaYS92wFLz1XeFYdwh7zq\/N7Upjur0hrtQfEue4+5ZqhbVR01oJNp4anHrUePIzlEnIT\/kcFsvAfnzhY8sCe6\/eHPlYmFh5NUqF382WuxmyYl4R2jC00MjKyceQCe+GA7mY6N19PTuAOUiLxpJNmIq9pmPNVdOG9Iimp3HvGkitHGB3xYDAwEsDAABKAMAHSCKSs4l89bXUCOiAIzy0t\/XLXv+FnPQAIHZbzK6\/b2zPQgEAQBWPvvUKCJhPPl9UaqgkQGRrEPnInqn3AgcWKBdJ\/beNUnh8YiG3BBPpig7fWXGt3faQYJkoxICObedZ\/\/cQR843TMJ\/tFxHeh++mhywQmo7IpKjyH\/cP4tkncFJahFlCiQctlFwQ79rSY9MXmiFUFSBu2Wpus46YvEsiEjcq65kwD7H64LAMJAlLAK\/qICDJYwTqmpVm7OhyWGMqHUmqT4O1IaWg4\/Hvxuqm\/zhHGzTDzqcxuGre\/5e1Yavz6ai+Vs+j6Mdk2hnEzA0diG0ay0njYI+YGULPP2\/6vLFzXax3XhVsBLNckbJzge9vIBu2l3NVdiid+USCvy+MnfiZrnFgMDAAQOAAAA"}
00455{"flow_id":13,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":539,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":137883,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdAmJL0E0Gjp0kgBALMNU7AAABAQgKwtc44ql05ic="}
01864{"flow_id":13,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":541,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":137884,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"}
00889{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":541,"source":"reddit.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":6,"flow_first_seen":1605291686060,"flow_last_seen":1605291686137,"flow_tot_l4_data_len":1773,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":295,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56578,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"styles.redditmedia.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
00438{"flow_id":10,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":543,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":137896,"pkt_caplen":74,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":74,"pkt_l4_len":20,"pkt":"qtsDr8lk5EKm5WPyht1gDKneABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PwBu8WSV7EAAAAAUAQAAF3zAAA="}
00438{"flow_id":10,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":545,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":137902,"pkt_caplen":74,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":74,"pkt_l4_len":20,"pkt":"qtsDr8lk5EKm5WPyht1gDKneABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PwBu8WSV7EAAAAAUAQAAF3zAAA="}
00453{"flow_id":13,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":548,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":137915,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBLbYACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QIBuwaOnSRiS9RlgBAB9do2AAABAQgKqXTmTcLXOOQ="}
01872{"flow_id":13,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":550,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":137925,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"}
00453{"flow_id":13,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":552,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":137929,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBLbYACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QIBuwaOnSRiS9h9gBAB9dYeAAABAQgKqXTmTcLXOOQ="}
01870{"flow_id":13,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":554,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":138254,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"}
01173{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":554,"source":"reddit.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":10,"flow_first_seen":1605291686060,"flow_last_seen":1605291686138,"flow_tot_l4_data_len":3997,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":399,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56578,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"styles.redditmedia.com","server_names":"*.redditmedia.com,redditmedia.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Reddit Inc., CN=*.redditmedia.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"96:A3:77:56:81:79:10:5C:E8:7F:F0:33:D2:7E:1C:45:08:2C:25:85"}}
01180{"flow_id":13,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":556,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":138254,"pkt_caplen":616,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":616,"pkt_l4_len":562,"pkt":"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"}
00454{"flow_id":13,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":562,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":138263,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBLbYACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QIBuwaOnSRiS9yVgBAB9dIFAAABAQgKqXTmTsLXOOQ="}
00455{"flow_id":13,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":564,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":138267,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBLbYACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QIBuwaOnSRiS96ngBAB9c\/zAAABAQgKqXTmTsLXOOQ="}
01865{"flow_id":12,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":571,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":138281,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"}
00889{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":571,"source":"reddit.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":6,"flow_first_seen":1605291686060,"flow_last_seen":1605291686138,"flow_tot_l4_data_len":1773,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":295,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56576,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"styles.redditmedia.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
01872{"flow_id":12,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":572,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":138281,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"}
01869{"flow_id":12,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":573,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":138281,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"}
01172{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":573,"source":"reddit.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":8,"flow_first_seen":1605291686060,"flow_last_seen":1605291686138,"flow_tot_l4_data_len":3933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":491,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56576,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"styles.redditmedia.com","server_names":"*.redditmedia.com,redditmedia.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Reddit Inc., CN=*.redditmedia.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"96:A3:77:56:81:79:10:5C:E8:7F:F0:33:D2:7E:1C:45:08:2C:25:85"}}
01176{"flow_id":12,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":574,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":138282,"pkt_caplen":616,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":616,"pkt_l4_len":562,"pkt":"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"}
00454{"flow_id":12,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":576,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":138287,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDoxGACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QABu3ytf3kZm0uegBAB9VM7AAABAQgKqXTmTsLXOOQ="}
00454{"flow_id":12,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":578,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":138291,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDoxGACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QABu3ytf3kZm0+2gBAB808lAAABAQgKqXTmTsLXOOQ="}
00454{"flow_id":12,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":579,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":138293,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDoxGACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QABu3ytf3kZm1POgBAB7UsTAAABAQgKqXTmTsLXOOQ="}
00454{"flow_id":12,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":580,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":138295,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDoxGACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QABu3ytf3kZm1XggBAB6UkFAAABAQgKqXTmTsLXOOQ="}
00456{"flow_id":11,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":581,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":138302,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc\/oyw49TvcdbcgBALMHS1AAABAQgKwtc45Kl05ic="}
00581{"flow_id":13,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":644,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":140483,"pkt_caplen":179,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":179,"pkt_l4_len":125,"pkt":"qtsDr8lk5EKm5WPyht1gBLbYAH0GQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QIBuwaOnSRiS96ngBgB9TenAAABAQgKqXTmUMLXOOQWAwMAJRAAACEgGhiw9b94f8rz2dJx6nh+9ommAOkvNbCFYxJJRPRrDQMUAwMAAQEWAwMAKAAAAAAAAAAADDiXoMO+wQIDk0GccYULTEY6bkLD8890nYXEqstmLnY="}
01866{"flow_id":11,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":680,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":141552,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"}
00889{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":680,"source":"reddit.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":6,"flow_first_seen":1605291686060,"flow_last_seen":1605291686141,"flow_tot_l4_data_len":1773,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":295,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56574,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"styles.redditmedia.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
00455{"flow_id":14,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":681,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":141552,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdBGVsk6YAYOGSgBALMNB1AAABAQgKwtc466l05ig="}
00453{"flow_id":11,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":684,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":141570,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBKPwACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3P4Bu+9x1tyMsOfsgBAB9XmsAAABAQgKqXTmUcLXOOY="}
00581{"flow_id":12,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":685,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":141660,"pkt_caplen":179,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":179,"pkt_l4_len":125,"pkt":"qtsDr8lk5EKm5WPyht1gDoxGAH0GQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QABu3ytf3kZm1XggBgB9e6bAAABAQgKqXTmUcLXOOQWAwMAJRAAACEgXn0+nl7ibnbnv3X+XE5SsOnr6yCBoTQjDG1qP+zsESMUAwMAAQEWAwMAKAAAAAAAAAAAu1t2RzBpuHFGdpAbDAc+HC8CD+XJPWLxyiIYqaKyz2I="}
01866{"flow_id":14,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":686,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":141731,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"}
00889{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":686,"source":"reddit.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":6,"flow_first_seen":1605291686060,"flow_last_seen":1605291686141,"flow_tot_l4_data_len":1773,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":295,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56580,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"styles.redditmedia.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
01874{"flow_id":11,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":687,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":141731,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"}
01870{"flow_id":11,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":688,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":141731,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"}
01172{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":688,"source":"reddit.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":9,"flow_first_seen":1605291686060,"flow_last_seen":1605291686141,"flow_tot_l4_data_len":3965,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":440,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56574,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"styles.redditmedia.com","server_names":"*.redditmedia.com,redditmedia.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Reddit Inc., CN=*.redditmedia.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"96:A3:77:56:81:79:10:5C:E8:7F:F0:33:D2:7E:1C:45:08:2C:25:85"}}
01179{"flow_id":11,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":689,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":141731,"pkt_caplen":616,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":616,"pkt_l4_len":562,"pkt":"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"}
00453{"flow_id":14,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":690,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":141735,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCVnRACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QQBuwBg4ZJlbJe+gBAB9dVtAAABAQgKqXTmUcLXOO0="}
00454{"flow_id":11,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":691,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":141741,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBKPwACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3P4Bu+9x1tyMsOwEgBAB83WWAAABAQgKqXTmUcLXOOY="}
00454{"flow_id":11,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":692,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":141744,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBKPwACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3P4Bu+9x1tyMsPAcgBAB63GGAAABAQgKqXTmUcLXOOY="}
00454{"flow_id":11,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":693,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":141746,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBKPwACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3P4Bu+9x1tyMsPIugBAB5294AAABAQgKqXTmUcLXOOY="}
00455{"flow_id":15,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":695,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":141909,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdBugO8IiJd61ngBALMJwEAAABAQgKwtc46al05ig="}
01861{"flow_id":15,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":696,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":141910,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"}
00882{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":696,"source":"reddit.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":6,"flow_first_seen":1605291686064,"flow_last_seen":1605291686141,"flow_tot_l4_data_len":1773,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":295,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56582,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"preview.redd.it","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
00453{"flow_id":15,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":697,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":141939,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBAJCACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QYBu4l3rWfoDvSggBAB86D+AAABAQgKqXTmUcLXOOs="}
01875{"flow_id":15,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":698,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":141954,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"}
00453{"flow_id":15,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":699,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":141956,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBAJCACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QYBu4l3rWfoDvi4gBAB65zuAAABAQgKqXTmUcLXOOs="}
01872{"flow_id":15,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":700,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":142640,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"}
01142{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":700,"source":"reddit.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":10,"flow_first_seen":1605291686064,"flow_last_seen":1605291686142,"flow_tot_l4_data_len":3997,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":399,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56582,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"preview.redd.it","server_names":"redd.it,*.redd.it","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Reddit Inc., CN=*.redd.it","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"3D:15:31:F3:94:55:33:92:88:5C:61:40:B0:FD:ED:27:6D:29:3A:12"}}
01141{"flow_id":15,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":701,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":142640,"pkt_caplen":590,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":590,"pkt_l4_len":536,"pkt":"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"}
00454{"flow_id":15,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":702,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":142645,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBAJCACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QYBu4l3rWfoDvzQgBAB45jdAAABAQgKqXTmUsLXOOs="}
00454{"flow_id":15,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":703,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":142650,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBAJCACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QYBu4l3rWfoDv7IgBAB4JboAAABAQgKqXTmUsLXOOs="}
00585{"flow_id":11,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":704,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":142672,"pkt_caplen":179,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":179,"pkt_l4_len":125,"pkt":"qtsDr8lk5EKm5WPyht1gBKPwAH0GQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3P4Bu+9x1tyMsPIugBgB9YFTAAABAQgKqXTmUsLXOOYWAwMAJRAAACEgZJ2fNuxYDkYEAorrSgrC6naxu108X\/vrHejUJ\/bvY20UAwMAAQEWAwMAKAAAAAAAAAAAuxwHWn\/YV7LzrQXx5DCSpCQE8NxK6REGaWrzx+x6k\/A="}
00454{"flow_id":12,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":705,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":143189,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDoxGACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QABu3ytf9YZm1XggBEB9UiWAAABAQgKqXTmU8LXOOQ="}
00454{"flow_id":11,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":706,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":143227,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBKPwACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3P4Bu+9x1zmMsPIugBEB9W8KAAABAQgKqXTmU8LXOOY="}
00592{"flow_id":13,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":707,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":143287,"pkt_caplen":185,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":185,"pkt_l4_len":131,"pkt":"qtsDr8lk5EKm5WPyht1gBLbYAIMGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QIBuwaOnYFiS96ngBgB9bc6AAABAQgKqXTmU8LXOOQXAwMAXgAAAAAAAAABe6gvpK3f09SZmdUeupLeJbR2b43kbwfw5hyBx9bENlHGJC\/\/cx38UO6bl36KpKUr5QIJ1IgXfYt5H0KjwrHbH0js\/3q9ImEFNEjmcNvJjMu0LnW1sYA="}
00453{"flow_id":14,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":708,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":143310,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCVnRACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QQBuwBg4ZJlbJe+gBEB9dVqAAABAQgKqXTmU8LXOO0="}
00455{"flow_id":16,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":711,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":144251,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdCGPwRcYBxWgngBALMJfQAAABAQgKwtc476l05ig="}
01872{"flow_id":14,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":712,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":144252,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"}
01870{"flow_id":14,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":713,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":144252,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"}
01173{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":713,"source":"reddit.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":10,"flow_first_seen":1605291686060,"flow_last_seen":1605291686144,"flow_tot_l4_data_len":3997,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":399,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56580,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"styles.redditmedia.com","server_names":"*.redditmedia.com,redditmedia.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Reddit Inc., CN=*.redditmedia.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"96:A3:77:56:81:79:10:5C:E8:7F:F0:33:D2:7E:1C:45:08:2C:25:85"}}
00455{"flow_id":17,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":714,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":144252,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdCnzgy8cZci+BgBALMBnUAAABAQgKwtc48Kl05ik="}
00438{"flow_id":14,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":715,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":144271,"pkt_caplen":74,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":74,"pkt_l4_len":20,"pkt":"qtsDr8lk5EKm5WPyht1gCPRTABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QQBuwBg4ZIAAAAAUAQAAJk8AAA="}
01177{"flow_id":14,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":716,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":144351,"pkt_caplen":616,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":616,"pkt_l4_len":562,"pkt":"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"}
01861{"flow_id":16,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":717,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":144351,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"}
00882{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":717,"source":"reddit.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":6,"flow_first_seen":1605291686064,"flow_last_seen":1605291686144,"flow_tot_l4_data_len":1773,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":295,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56584,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"preview.redd.it","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
00438{"flow_id":14,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":718,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":144355,"pkt_caplen":74,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":74,"pkt_l4_len":20,"pkt":"qtsDr8lk5EKm5WPyht1gCPRTABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QQBuwBg4ZIAAAAAUAQAAJk8AAA="}
00453{"flow_id":16,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":719,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":144359,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gAj4aACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QgBuwHFaCdj8EnegBAB9ZzFAAABAQgKqXTmVMLXOPE="}
00583{"flow_id":15,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":720,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":144994,"pkt_caplen":179,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":179,"pkt_l4_len":125,"pkt":"qtsDr8lk5EKm5WPyht1gBAJCAH0GQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QYBu4l3rWfoDv7IgBgB9TMgAAABAQgKqXTmVMLXOOsWAwMAJRAAACEgDKhK+fnPfakLEiUGnf24VB8EgC9O2IJ8IfqQjcJ8lQ8UAwMAAQEWAwMAKAAAAAAAAAAAoJxM\/eZ8gECxhU1BRAHdej9eS7fhJ9tLYYhb89Z\/n7s="}
01875{"flow_id":16,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":721,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":145060,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"}
01871{"flow_id":16,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":722,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":145060,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"}
01141{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":722,"source":"reddit.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":9,"flow_first_seen":1605291686064,"flow_last_seen":1605291686145,"flow_tot_l4_data_len":3965,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":440,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56584,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"preview.redd.it","server_names":"redd.it,*.redd.it","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Reddit Inc., CN=*.redd.it","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"3D:15:31:F3:94:55:33:92:88:5C:61:40:B0:FD:ED:27:6D:29:3A:12"}}
01149{"flow_id":16,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":723,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":145061,"pkt_caplen":590,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":590,"pkt_l4_len":536,"pkt":"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"}
00456{"flow_id":18,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":724,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":145061,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdDA6Vo\/ls46ULgBALMObsAAABAQgKwtc48al05is="}
00454{"flow_id":16,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":725,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":145064,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gAj4aACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QgBuwHFaCdj8E32gBAB9ZitAAABAQgKqXTmVMLXOPE="}
00454{"flow_id":16,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":726,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":145068,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gAj4aACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QgBuwHFaCdj8FIOgBAB85SWAAABAQgKqXTmVcLXOPE="}
00454{"flow_id":16,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":727,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":145070,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gAj4aACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QgBuwHFaCdj8FQGgBAB8JKhAAABAQgKqXTmVcLXOPE="}
00582{"flow_id":16,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":728,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":145945,"pkt_caplen":179,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":179,"pkt_l4_len":125,"pkt":"qtsDr8lk5EKm5WPyht1gAj4aAH0GQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QgBuwHFaCdj8FQGgBgB9YdxAAABAQgKqXTmVcLXOPEWAwMAJRAAACEgdmph34K9vZmrea03hofRhLJS5d6gycs\/IbxulMy89A4UAwMAAQEWAwMAKAAAAAAAAAAAhsMpILyScP4uhEQeessUbI3M0EgUPanhQHw9MXz+3wQ="}
00454{"flow_id":16,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":729,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":146055,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gAj4aACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QgBuwHFaIRj8FQGgBEB9ZI+AAABAQgKqXTmVcLXOPE="}
00591{"flow_id":15,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":730,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":146099,"pkt_caplen":185,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":185,"pkt_l4_len":131,"pkt":"qtsDr8lk5EKm5WPyht1gBAJCAIMGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QYBu4l3rcToDv7IgBgB9f79AAABAQgKqXTmVsLXOOsXAwMAXgAAAAAAAAABvEL0yUJOjCdNlCZfyMUAZ1urAkUYudWPz5bof2+QElDF3vfAUfW7axtToeUPNB+Ggkspui9eT0SxHuOnJtzAcGynoCgiZY73+Bwb5R\/vvT5\/Poezr0w="}
00453{"flow_id":17,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":731,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":146132,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCQMdACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QoBuxlyL4F84MvHgBEB+yLbAAABAQgKqXTmVsLXOPA="}
00454{"flow_id":18,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":732,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":146162,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBZ0wACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QwBu2zjpQsOlaP5gBEB++\/1AAABAQgKqXTmVsLXOPE="}
01860{"flow_id":17,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":736,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":146916,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"}
00882{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":736,"source":"reddit.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":7,"flow_first_seen":1605291686064,"flow_last_seen":1605291686146,"flow_tot_l4_data_len":1805,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":257,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56586,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"preview.redd.it","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
01875{"flow_id":17,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":737,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":146918,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABDgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdCnzgz98Zci+BgBgLMOf8AAABAQgKwtc486l05ikGCCsGAQUFBzAChjpodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRTSEEyU2VjdXJlU2VydmVyQ0EuY3J0MAwGA1UdEwEB\/wQCMAAwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdgD2XJQv0XcwIhRUGAgwlFaO400TGTO\/3wwvIAvMTvFk4wAAAXQrSmdiAAAEAwBHMEUCIQD\/04ygSe1MYzrJpdTwrQK9Sjx\/tAOekyn8ZwUHe438MQIgQeoxYr6dp9e0Vi2BfTgg\/tx7yoUBr46n4mPgngP1Cg8AdQBc3EOS\/uarRUSxXprUVuYQN\/vV+kfcoXOUsl7m9scOygAAAXQrSmd+AAAEAwBGMEQCIDQ+4afNmJ6Lq7tcDFhWE5ZRcYt+T8eRVv9HNhRXleMaAiAfvoxXCpDvg3ksn\/DbvlHRhWsdVwta6mdmCm+pp0EQLDANBgkqhkiG9w0BAQsFAAOCAQEAAG3CaPVDekrOfzw6f0I5v2tWlY1xVwLUq3mWKiYqkY13PT0BCSJhi4Wr05nryv4hM2tTgWfXEYy5thizGRFQU2k2\/UwaR1tWB7k6icplfD0Ga+hHuMA1ioLo\/9dpR90j3inuZOlew5NI2+DUxJoSXlo3H8MbyO5DP\/ctl49WhW+y0JaR0mw+Wsni\/W0+ctk2wp4ac\/lpLbD1iXAOjwpg\/HHz0VF8T8dgjOGW64yvr1ftmXr2UumO7tbZmf00WJprBjlf4hclLVDLtjreq8DhsjB3cf\/gLzGIz0xtBET1KwumlL4Vmay44nBXCrqr3Ucoup6L8umjZP\/gUQ4QuW1ijwAEmDCCBJQwggN8oAMCAQICEAH9o+tuynXIiEOLckvPvJEwDQYJKoZIhvcNAQELBQAwYTELMAkGA1UEBhMCVVMxFTATBgNVBAoTDERpZ2lDZXJ0IEluYzEZMBcGA1UECxMQd3d3LmRpZ2ljZXJ0LmNvbTEgMB4GA1UEAxMXRGlnaUNlcnQgR2xvYmFsIFJvb3QgQ0EwHhcNMTMwMzA4MTIwMDAwWhcNMjMwMzA4MTIwMDAwWjBNMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5EaWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcrliQTcHEMBWQNVtuPIIV9SxcvePb\/3FD+mQlgNTuGKJN8GbQCnNuEZg2F2SvN539+kGEr8evjP4ac03PM5eQopaHU4MruaZ1SC0dVjd72jEyGtesqwb0ql1Lt0dG3SqTw5AueYCA7xMEahQ7tZuSvsIHZU782vz\/eq7cXH5VMQzoOQek"}
01872{"flow_id":17,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":738,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":146919,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"}
01141{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":738,"source":"reddit.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":9,"flow_first_seen":1605291686064,"flow_last_seen":1605291686146,"flow_tot_l4_data_len":3965,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":440,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56586,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"preview.redd.it","server_names":"redd.it,*.redd.it","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Reddit Inc., CN=*.redd.it","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"3D:15:31:F3:94:55:33:92:88:5C:61:40:B0:FD:ED:27:6D:29:3A:12"}}
01144{"flow_id":17,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":739,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":146920,"pkt_caplen":590,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":590,"pkt_l4_len":536,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAhgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdCnzg2A8Zci+BgBgLMOmtAAABAQgKwtc486l05ilkRhvz1enisus+n+JtTFh5SwLPqnsNQGg3iOJYoXp+wF91pGTE\/3x+aQOXjrcYJPujSbXof\/sNWsX0Ch+B\/eKgUux4+l+H6D2B4ET1JbSLEEOr9ZWpS3RJvElVNKQUtc6UiHPg\/2caAWll+fY5HO0LlKfS0\/+z66ZGktG+DgAoy7TfLapyN4\/YD\/XHQTfVf+ymrIBkogrdwK2UAhWm9rWt7ALq5xFuJyf0ZlOeEe+6ePGSg5v4hVg3I0eT4d0tFgMDASwMAAEoAwAdIMAYTFYSc9yI6h+RWAOHQL2DNiFuo2zRv1bspQjPAXZ9CAQBADRdqxNAaD1p+EwkU7MgWUtg1aoS5MGeIWcavi56bFpkwGjofuR2tpWGpqB\/SNm7qokuFTNTZtDk3qGzpBw79O6ABUi4GNenNsZoSnIRrypN2VRFyZFDcg91LeIar0RrmwJuvYolcz3K+0XWaqxFRFkUvMDs3+m4aHp8+F9cg632xAU7jXXBVj9B4nDkO3jidxzwkjpxq2yY32nvqHLvvugg0oZ3Re7arE\/R0OqnlFvh5N4iB\/FVf3dZ4F13YLLXmFH9u09USniF+SGcq3M2LFQkx12YHmdCaNE\/GFfFaITTN7Jy1HeLHIb\/2B1qwhlNFtTvVqEkzIE\/XrZurIOWMs0WAwMABA4AAAA="}
00438{"flow_id":17,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":740,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":146974,"pkt_caplen":74,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":74,"pkt_l4_len":20,"pkt":"qtsDr8lk5EKm5WPyht1gAi8TABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QoBuxlyL4EAAAAAUAQAADI2AAA="}
00455{"flow_id":9,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":742,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":147568,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc+p6YWsX6uGUygBALMFIrAAABAQgKwtc49Kl05jA="}
00455{"flow_id":8,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":743,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":147569,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc+BQBNGFwR09SgBALMKN6AAABAQgKwtc49Kl05jA="}
00456{"flow_id":7,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":744,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":147569,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc9o6MM8\/sl7sRgBALMEF0AAABAQgKwtc486l05jA="}
00455{"flow_id":5,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":745,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":147569,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc8oSMQPLg8c6GgBALMDaGAAABAQgKwtc486l05jA="}
00438{"flow_id":9,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":746,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":147580,"pkt_caplen":74,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":74,"pkt_l4_len":20,"pkt":"qtsDr8lk5EKm5WPyht1gCLKYABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PoBu\/q4ZTIAAAAAUAQAABtOAAA="}
00437{"flow_id":7,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":748,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":147586,"pkt_caplen":74,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":74,"pkt_l4_len":20,"pkt":"qtsDr8lk5EKm5WPyht1gBOdWABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PYBu+yXuxEAAAAAUAQAANOTAAA="}
00437{"flow_id":5,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":749,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":147588,"pkt_caplen":74,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":74,"pkt_l4_len":20,"pkt":"qtsDr8lk5EKm5WPyht1gC3zdABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PIBu+DxzoYAAAAAUAQAAMvIAAA="}
01862{"flow_id":18,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":751,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":148836,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"}
00882{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":751,"source":"reddit.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":7,"flow_first_seen":1605291686064,"flow_last_seen":1605291686148,"flow_tot_l4_data_len":1805,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":257,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56588,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"preview.redd.it","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
01875{"flow_id":18,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":752,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":148836,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"}
00455{"flow_id":5,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":753,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":148836,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc8oSMQPLg8c6GgBELMDaEAAABAQgKwtc49Kl05jA="}
01871{"flow_id":18,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":754,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":148836,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"}
01141{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":754,"source":"reddit.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":9,"flow_first_seen":1605291686064,"flow_last_seen":1605291686148,"flow_tot_l4_data_len":3965,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":440,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56588,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"preview.redd.it","server_names":"redd.it,*.redd.it","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Reddit Inc., CN=*.redd.it","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"3D:15:31:F3:94:55:33:92:88:5C:61:40:B0:FD:ED:27:6D:29:3A:12"}}
01144{"flow_id":18,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":755,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":148837,"pkt_caplen":590,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":590,"pkt_l4_len":536,"pkt":"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"}
00438{"flow_id":18,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":759,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":148847,"pkt_caplen":74,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":74,"pkt_l4_len":20,"pkt":"qtsDr8lk5EKm5WPyht1gCsXSABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QwBu2zjpQsAAAAAUAQAAGk4AAA="}
00437{"flow_id":5,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":760,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":148850,"pkt_caplen":74,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":74,"pkt_l4_len":20,"pkt":"qtsDr8lk5EKm5WPyht1gC3zdABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PIBu+DxzoYAAAAAUAQAAMvIAAA="}
00458{"flow_id":10,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":768,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":156143,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc\/KfiWkPFkleygBALMIv+AAABAQgKwtc4\/al05jA="}
00455{"flow_id":20,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":803,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":180561,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdELkPzETbiYO3gBALMMaaAAABAQgKwtc5Dal05kU="}
00455{"flow_id":19,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":805,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":180589,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdDvdaN0qUbYJ5gBALMGWmAAABAQgKwtc5DKl05kY="}
01869{"flow_id":20,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":807,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":182404,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABDgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdELkPzETbiYO3gBgLMIxUAAABAQgKwtc5D6l05kUWAwMAUgIAAE4DAxsH5Gr\/GOMCsJtej1E0tk+78j\/7\/hT\/7PU4cddWmy9\/AMAvAAAm\/wEAAQAAAAAAAAsABAMAAQIAIwAAAAUAAAAQAAUAAwJoMgAXAAAWAwMK4AsACtwACtkABjswggY3MIIFH6ADAgECAhAFIKnDRQdHRLlD27uwkl6dMA0GCSqGSIb3DQEBCwUAME0xCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIgU2VjdXJlIFNlcnZlciBDQTAeFw0yMDA3MjcwMDAwMDBaFw0yMTAxMjMxMjAwMDBaMGwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpDYWxpZm9ybmlhMRYwFAYDVQQHEw1TYW4gRnJhbmNpc2NvMRQwEgYDVQQKEwtSZWRkaXQgSW5jLjEaMBgGA1UEAwwRKi5yZWRkaXRtZWRpYS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUojedwLTSEzrq4UnD96Vw+K+bJzRlpdlGvp1emryD5RL1HNtyibc7bG5WSKWQj4rEXUPCrd7J9KEcoktu\/T\/zKnwBbK1YjqeYT7crnAcYwaOzJK+2WaVgkNLH46oD9ybxNIQiHXSZQ7Ot1nzKMSML5qvJDWE93Oca5W4JzWXBeHxjaWh1pvFML\/h9KONNL2F6v8fl2QkupSKhrdBMUYrUJQ7T7Xayr9QDWUwAYkELYvTZAHxC2NJEKB\/W8Txb\/aVDvxW0ugRtMT23SQiJB3o2exzRkgcVXSsUUyBNZi0HwERQ8wVGtvniGjIdCo1za+WiS39m7ranLPgJ4gJ0ghVtAgMBAAGjggLyMIIC7jAfBgNVHSMEGDAWgBQPgGEcgjFh1S8o541GOLQs4cbZ4jAdBgNVHQ4EFgQUM5hgnYdqs+t4ZIcAf5Oj81X67dYwLQYDVR0RBCYwJIIRKi5yZWRkaXRtZWRpYS5jb22CD3JlZGRpdG1lZGlhLmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMGsGA1UdHwRkMGIwL6AtoCuGKWh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9zc2NhLXNoYTItZzYuY3JsMC+gLaArhilodHRwOi8vY3JsNC5kaWdpY2VydC5jb20vc3NjYS1zaGEyLWc2LmNybDBMBgNVHSAERTBDMDcGCWCGSAGG\/WwBATAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMAgGBmeBDAECAjB8BggrBgEFBQcBAQRwMG4wJAYIKwYBBQUHMAGGGGh0"}
00888{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":807,"source":"reddit.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":6,"flow_first_seen":1605291686084,"flow_last_seen":1605291686182,"flow_tot_l4_data_len":1773,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":295,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56592,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"emoji.redditmedia.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
01872{"flow_id":20,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":808,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":182405,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"}
01869{"flow_id":20,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":809,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":182405,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"}
01171{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":809,"source":"reddit.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":8,"flow_first_seen":1605291686084,"flow_last_seen":1605291686182,"flow_tot_l4_data_len":3933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":491,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56592,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"emoji.redditmedia.com","server_names":"*.redditmedia.com,redditmedia.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Reddit Inc., CN=*.redditmedia.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"96:A3:77:56:81:79:10:5C:E8:7F:F0:33:D2:7E:1C:45:08:2C:25:85"}}
01174{"flow_id":20,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":810,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":182405,"pkt_caplen":616,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":616,"pkt_l4_len":562,"pkt":"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"}
01866{"flow_id":19,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":811,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":182406,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"}
00888{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":811,"source":"reddit.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":6,"flow_first_seen":1605291686084,"flow_last_seen":1605291686182,"flow_tot_l4_data_len":1773,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":295,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56590,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"emoji.redditmedia.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
00454{"flow_id":20,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":812,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":182418,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCcfOACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3RABu9uJg7e5D9BcgBAB9cuGAAABAQgKqXTmesLXOQ8="}
00454{"flow_id":20,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":813,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":182428,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCcfOACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3RABu9uJg7e5D9R0gBAB88dwAAABAQgKqXTmesLXOQ8="}
00454{"flow_id":20,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":814,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":182431,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCcfOACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3RABu9uJg7e5D9iMgBAB7cNeAAABAQgKqXTmesLXOQ8="}
00454{"flow_id":20,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":815,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":182433,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCcfOACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3RABu9uJg7e5D9qegBAB6cFQAAABAQgKqXTmesLXOQ8="}
00453{"flow_id":19,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":816,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":182436,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBTHMACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3Q4Bu5Rtgnn3WjtigBAB82qVAAABAQgKqXTmesLXOQ4="}
01872{"flow_id":19,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":817,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":183889,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"}
01869{"flow_id":19,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":818,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":183890,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"}
01171{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":818,"source":"reddit.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":9,"flow_first_seen":1605291686084,"flow_last_seen":1605291686183,"flow_tot_l4_data_len":3965,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":440,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56590,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"emoji.redditmedia.com","server_names":"*.redditmedia.com,redditmedia.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Reddit Inc., CN=*.redditmedia.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"96:A3:77:56:81:79:10:5C:E8:7F:F0:33:D2:7E:1C:45:08:2C:25:85"}}
01177{"flow_id":19,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":819,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":183891,"pkt_caplen":616,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":616,"pkt_l4_len":562,"pkt":"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"}
00454{"flow_id":19,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":820,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":183903,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBTHMACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3Q4Bu5Rtgnn3Wj96gBAB9WZ6AAABAQgKqXTme8LXOQ4="}
00454{"flow_id":19,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":821,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":183921,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBTHMACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3Q4Bu5Rtgnn3WkOSgBAB82JkAAABAQgKqXTme8LXOQ4="}
00454{"flow_id":19,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":822,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":183926,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBTHMACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3Q4Bu5Rtgnn3WkWkgBAB72BWAAABAQgKqXTme8LXOQ4="}
00582{"flow_id":20,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":823,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":184846,"pkt_caplen":179,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":179,"pkt_l4_len":125,"pkt":"qtsDr8lk5EKm5WPyht1gCcfOAH0GQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3RABu9uJg7e5D9qegBgB9Tc+AAABAQgKqXTmfMLXOQ8WAwMAJRAAACEg3KY1H\/05Q15oj6d5bgAwoPgpNJUhsYhgVZeNDdb+CwMUAwMAAQEWAwMAKAAAAAAAAAAA0Gn41pN31l55+wXuCFG6hvJFOpUeW6U3HTLow+B5mH4="}
00582{"flow_id":19,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":824,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":185402,"pkt_caplen":179,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":179,"pkt_l4_len":125,"pkt":"qtsDr8lk5EKm5WPyht1gBTHMAH0GQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3Q4Bu5Rtgnn3WkWkgBgB9ePfAAABAQgKqXTmfcLXOQ4WAwMAJRAAACEgVgtqpHliuL0Op9BnOLDhFz2xDTdVGlADg825t9I3d3kUAwMAAQEWAwMAKAAAAAAAAAAAq7siOn5l3QhTDyKz5ySKKpa9+GvIEEOa\/DQD65ylo1A="}
00455{"flow_id":19,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":825,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":185482,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBTHMACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3Q4Bu5Rtgtb3WkWkgBEB9V\/wAAABAQgKqXTmfcLXOQ4="}
00590{"flow_id":20,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":826,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":185514,"pkt_caplen":185,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":185,"pkt_l4_len":131,"pkt":"qtsDr8lk5EKm5WPyht1gCcfOAIMGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3RABu9uJhBS5D9qegBgB9cN5AAABAQgKqXTmfcLXOQ8XAwMAXgAAAAAAAAABnOvciIXX4vSH6iDSVLx8BmLJ1WliglA6TgbgmaeZoLtkuvIEUORIZl0tXMy9ipHj\/YC78HX7iUreOf7xxjSvOKjDHVfHgz7J5L1ug0UldeAzh1EN2tc="}
00456{"flow_id":14,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":835,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":193365,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdBGVsogAAYOGTgBALMMG3AAABAQgKwtc5I6l05lM="}
00438{"flow_id":14,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":836,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":193428,"pkt_caplen":74,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":74,"pkt_l4_len":20,"pkt":"qtsDr8lk5EKm5WPyht1gCPRTABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QQBuwBg4ZMAAAAAUAQAAJk7AAA="}
00456{"flow_id":18,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":859,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":201914,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdDA6Vsjls46UMgBALMNhKAAABAQgKwtc5J6l05lY="}
00456{"flow_id":17,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":861,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":201935,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdCnzg2gcZci+CgBALMAsuAAABAQgKwtc5KKl05lY="}
00438{"flow_id":18,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":866,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":201947,"pkt_caplen":74,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":74,"pkt_l4_len":20,"pkt":"qtsDr8lk5EKm5WPyht1gCsXSABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QwBu2zjpQwAAAAAUAQAAGk3AAA="}
00438{"flow_id":17,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":868,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":201958,"pkt_caplen":74,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":74,"pkt_l4_len":20,"pkt":"qtsDr8lk5EKm5WPyht1gAi8TABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QoBuxlyL4IAAAAAUAQAADI1AAA="}
00456{"flow_id":17,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":884,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":203769,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdCnzg2gcZci+CgBELMAssAAABAQgKwtc5Kal05lY="}
00456{"flow_id":18,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":885,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":203769,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdDA6Vsjls46UMgBELMNhHAAABAQgKwtc5Kal05lY="}
00438{"flow_id":17,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":886,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":203774,"pkt_caplen":74,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":74,"pkt_l4_len":20,"pkt":"qtsDr8lk5EKm5WPyht1gAi8TABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QoBuxlyL4IAAAAAUAQAADI1AAA="}
00438{"flow_id":18,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":887,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":203778,"pkt_caplen":74,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":74,"pkt_l4_len":20,"pkt":"qtsDr8lk5EKm5WPyht1gCsXSABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QwBu2zjpQwAAAAAUAQAAGk3AAA="}
00507{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1160,"source":"reddit.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":1,"flow_first_seen":1605291686301,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56594,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00466{"flow_id":21,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1160,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":301196,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gDu9XACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3RIBuyQ3ML0AAAAAoAL9IDDZAAACBAWgBAIICql05vEAAAAAAQMDBw=="}
00468{"flow_id":21,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1203,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":327034,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdEkHBFWUkNzC+oBJXgILuAAACBAV4AQMDAwQCCArC1zmoqXTm8Q=="}
00454{"flow_id":21,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1208,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":327076,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDu9XACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3RIBuyQ3ML5BwRVmgBAB+wbmAAABAQgKqXTnC8LXOag="}
01147{"flow_id":21,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1211,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":327471,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"}
00836{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1211,"source":"reddit.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":4,"flow_first_seen":1605291686301,"flow_last_seen":1605291686327,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56594,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"b.thumbs.redditmedia.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
00456{"flow_id":21,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1318,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":393401,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdEkHBFWYkNzLDgBALMPtvAAABAQgKwtc55Kl05ws="}
01865{"flow_id":21,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1398,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":419456,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABDgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdEkHBFWYkNzLDgBgLMO57AAABAQgKwtc55ql05wsWAwMAUgIAAE4DA2w2h4OnI5oqTmXU5WBqOgdwOPvgJebj0XNMae9Ppb25AMAvAAAm\/wEAAQAAAAAAAAsABAMAAQIAIwAAAAUAAAAQAAUAAwJoMgAXAAAWAwMK9QsACvEACu4ABlAwggZMMIIFNKADAgECAhALxRVguuP1otqG87N37ptnMA0GCSqGSIb3DQEBCwUAME0xCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIgU2VjdXJlIFNlcnZlciBDQTAeFw0yMDAyMTgwMDAwMDBaFw0yMTA1MTQxMjAwMDBaMHMxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpDYWxpZm9ybmlhMRYwFAYDVQQHEw1TYW4gRnJhbmNpc2NvMRQwEgYDVQQKEwtSZWRkaXQgSW5jLjEhMB8GA1UEAwwYKi50aHVtYnMucmVkZGl0bWVkaWEuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2m0tBPQBt7iNZ9yVM43JERqwrF\/7kkYx1k6FWIH3ERmFHj8lZDO2vnookRF1j+3gp2OWzg92awKOEw8ynv7OhC\/Q5ckvxRPMvNQykUR3dYJEzqFj6rVX+hgdBGcpvA2JYS6luoyXAfWrQhQFT1g16+2RjINDueb7iAIJsPJRzPCfTTbrfGcRKK8ruBZH0EoCxgUm0sBGwogRiZ1j\/WylqkCyWbwdS3kXLbokhtsK7bgg+OCKQjLVg4Gawug\/eb5u8K5JUy+ck86Oa9v3xh3x9M8m8xRtsLH7k4wM5UectnuPET63DLhhwFSJ64Hy6vNbeV\/xglSptawNgIIF4BtCAQIDAQABo4IDADCCAvwwHwYDVR0jBBgwFoAUD4BhHIIxYdUvKOeNRji0LOHG2eIwHQYDVR0OBBYEFFry81+a+cNcHveCjTY9tHerLfKDMDsGA1UdEQQ0MDKCGCoudGh1bWJzLnJlZGRpdG1lZGlhLmNvbYIWdGh1bWJzLnJlZGRpdG1lZGlhLmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMGsGA1UdHwRkMGIwL6AtoCuGKWh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9zc2NhLXNoYTItZzYuY3JsMC+gLaArhilodHRwOi8vY3JsNC5kaWdpY2VydC5jb20vc3NjYS1zaGEyLWc2LmNybDBMBgNVHSAERTBDMDcGCWCGSAGG\/WwBATAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMAgGBmeBDAECAjB8BggrBgEFBQcB"}
00892{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1398,"source":"reddit.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":6,"flow_first_seen":1605291686301,"flow_last_seen":1605291686419,"flow_tot_l4_data_len":1773,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":295,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56594,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"b.thumbs.redditmedia.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
00454{"flow_id":21,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1401,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":419467,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDu9XACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3RIBuyQ3MsNBwRl+gBAB9QA1AAABAQgKqXTnZ8LXOeY="}
01871{"flow_id":21,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1405,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":420291,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABDgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdEkHBGX4kNzLDgBgLMDfDAAABAQgKwtc55ql05wsBBHAwbjAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEYGCCsGAQUFBzAChjpodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRTSEEyU2VjdXJlU2VydmVyQ0EuY3J0MAwGA1UdEwEB\/wQCMAAwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdwC72d+8H4pxtZOUI5eqkntHOFeVCqtS6BqQlmQ2jh7RhQAAAXBYgRWDAAAEAwBIMEYCIQDHzXaR4B0YH3rB5zl\/ytcz+FJl7Zxtbv4nzWj2+mrP8AIhANvwvwlyQT+Rynl+pzhafPdcFaqKQ5X6Jb+svwfabBU2AHYAXNxDkv7mq0VEsV6a1FbmEDf71fpH3KFzlLJe5vbHDsoAAAFwWIEV5AAABAMARzBFAiB2TSqQUr6lBIFkWx4+6OGH4t4V5eNSLU3D4JXHzW\/bRQIhAP3l6PWmcmA2KGd5868mmIFUWuFVb3TgdVUEuKBtt2ySMA0GCSqGSIb3DQEBCwUAA4IBAQC5SMPLH\/yIoBGVmm8p1R\/rE3qqeu5LbPRbNxkauLpqgtV3F+0A7ZV+7WzF\/1A0p9Mw8jRs6gXlsm4Cl1bSypmJg1kQbUDu9phPcEeZC5\/okPI4mVW0f5HYzQTGzGX1+tDxuJDd0mlT3MGnZXdMugW0KM7VnqDGQBwakSYYe11bCU1u4Ltrd7L2d17O8+Ze4yDZxEblULm6iUwSPn0ySS2A+z5gy4gXweLEraMpLPuoyawau3zrWrkw91\/dZJxW4LKLoCCx5BQhuPkOMtdX\/eUVDxVpQe\/xx0f\/Hta44nNFzu4QShGmGydWhIw9oB6hnEizc6e9A0VNhRtRnseBY68kAASYMIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBhMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBDQTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIgU2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANyuWJBNwcQwFZA1W248ghX1LFy949v\/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83nf36QYSvx6+M\/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yr"}
01869{"flow_id":21,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1406,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":420291,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"}
01196{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1406,"source":"reddit.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":9,"flow_first_seen":1605291686301,"flow_last_seen":1605291686420,"flow_tot_l4_data_len":3965,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":440,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56594,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"b.thumbs.redditmedia.com","server_names":"*.thumbs.redditmedia.com,thumbs.redditmedia.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Reddit Inc., CN=*.thumbs.redditmedia.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"FF:F4:6C:CF:D6:FD:64:3E:50:17:A2:DE:B0:F2:B6:9B:76:59:C6:75"}}
01207{"flow_id":21,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1407,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":420291,"pkt_caplen":637,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":637,"pkt_l4_len":583,"pkt":"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"}
00455{"flow_id":21,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1409,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":420296,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDu9XACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3RIBuyQ3MsNBwR2WgBAB9fwbAAABAQgKqXTnaMLXOeY="}
00456{"flow_id":21,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1410,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":420303,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDu9XACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3RIBuyQ3MsNBwSGugBAB8\/gFAAABAQgKqXTnaMLXOeY="}
00456{"flow_id":21,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1411,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":420307,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDu9XACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3RIBuyQ3MsNBwSPVgBAB7\/XiAAABAQgKqXTnaMLXOeY="}
00583{"flow_id":21,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1417,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":421886,"pkt_caplen":179,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":179,"pkt_l4_len":125,"pkt":"qtsDr8lk5EKm5WPyht1gDu9XAH0GQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3RIBuyQ3MsNBwSPVgBgB9Z1MAAABAQgKqXTnacLXOeYWAwMAJRAAACEgWYU3PfgsQKYihFO3uoMJdTmDwQVceFgYyiRr8prQm0MUAwMAAQEWAwMAKAAAAAAAAAAA0FgT\/SKenNyDYhzxq42tumFsAOJ4h5zHyIcni8qFEN4="}
00590{"flow_id":21,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1421,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":422007,"pkt_caplen":185,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":185,"pkt_l4_len":131,"pkt":"qtsDr8lk5EKm5WPyht1gDu9XAIMGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3RIBuyQ3MyBBwSPVgBgB9bbXAAABAQgKqXTnacLXOeYXAwMAXgAAAAAAAAABUHjyoTMKS98mcOvWf3UpTo1d4pwHgu1OJbBtPp584YrH51mfdENeft+iSY7mt4F2ROOjr+Z8p0dhvBTbwFC9CZTY4BZgbNz0YaORcr22c3h+rYSnehg="}
00513{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1925,"source":"reddit.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":1,"flow_first_seen":1605291686985,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:805::2002","src_port":50960,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00466{"flow_id":22,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1925,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":985114,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gAMi0ACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACACxxABu7duD88AAAAAoAL9IJsfAAACBAWgBAIIClRf4AwAAAAAAQMDBw=="}
00506{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1926,"source":"reddit.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_first_seen":1605291686985,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::df9:21c6","src_port":43492,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00466{"flow_id":23,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1926,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":985710,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gDjDtACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAAN+SHGqeQBu3kB4hEAAAAAoAL9ICE+AAACBAWgBAIICkv6YkkAAAAAAQMDBw=="}
00507{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1927,"source":"reddit.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_first_seen":1605291686996,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::6853:b3b6","src_port":38320,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00466{"flow_id":24,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1927,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":996891,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gCh2fACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABoU7O2lbABu20FmjEAAAAAoAL9ILJdAAACBAWgBAIICnOjJUYAAAAAAQMDBw=="}
00468{"flow_id":22,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1928,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":16591,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgFAAAAAAAAIAIqAcsBIEmLB5kd7IUo3\/YpAbvHENPm6q63bg\/QoBJXgIMUAAACBAV4AQMDAwQCCArC1zxZVF\/gDA=="}
00454{"flow_id":22,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1929,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":16621,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gAMi0ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACACxxABu7duD9DT5uqvgBAB+wcHAAABAQgKVF\/gK8LXPFk="}
01151{"flow_id":22,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1930,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":16854,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"}
00848{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1930,"source":"reddit.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":4,"flow_first_seen":1605291686985,"flow_last_seen":1605291687016,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:805::2002","src_port":50960,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.GoogleServices","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.googletagservices.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
00468{"flow_id":24,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1931,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":24247,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAGhTs7YqAcsBIEmLB5kd7IUo3\/YpAbuVsAnf\/VJtBZoyoBJXgFGuAAACBAV4AQMDAwQCCArC1zxhc6MlRg=="}
00468{"flow_id":23,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1932,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":24248,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAA35IcYqAcsBIEmLB5kd7IUo3\/YpAbup5BqPq4R5AeISoBJXgAGtAAACBAV4AQMDAwQCCArC1zxhS\/piSQ=="}
00454{"flow_id":24,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1933,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":24307,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCh2fACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABoU7O2lbABu20FmjIJ3\/1TgBAB+9WjAAABAQgKc6MlYsLXPGE="}
00454{"flow_id":23,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1934,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":24329,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDjDtACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAAN+SHGqeQBu3kB4hIaj6uFgBAB+4WXAAABAQgKS\/picMLXPGE="}
01149{"flow_id":24,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1935,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":24606,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"}
00808{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1935,"source":"reddit.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":4,"flow_first_seen":1605291686996,"flow_last_seen":1605291687024,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::6853:b3b6","src_port":38320,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"c.aaxads.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
01148{"flow_id":23,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1936,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":24727,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"}
00829{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1936,"source":"reddit.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":4,"flow_first_seen":1605291686985,"flow_last_seen":1605291687024,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::df9:21c6","src_port":43492,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"c.amazon-adsystem.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
00454{"flow_id":22,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1937,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":53426,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgFAAAAAAAAIAIqAcsBIEmLB5kd7IUo3\/YpAbvHENPm6q+3bhHVgBALMPumAAABAQgKwtc8f1Rf4Cs="}
02101{"flow_id":22,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1938,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":60476,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"}
00889{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1938,"source":"reddit.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":6,"flow_first_seen":1605291686985,"flow_last_seen":1605291687060,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:805::2002","src_port":50960,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.GoogleServices","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"www.googletagservices.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
02100{"flow_id":22,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1939,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":60476,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"}
00455{"flow_id":22,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1940,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":60490,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gAMi0ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACACxxABu7duEdXT5u9ngBAB9f\/3AAABAQgKVF\/gV8LXPIU="}
00454{"flow_id":22,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1941,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":60506,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gAMi0ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACACxxABu7duEdXT5vQfgBAB8vtCAAABAQgKVF\/gV8LXPIU="}
01082{"flow_id":22,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1942,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":61075,"pkt_caplen":547,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":547,"pkt_l4_len":493,"pkt":"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"}
00456{"flow_id":22,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1943,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":61082,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gAMi0ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACACxxABu7duEdXT5vXsgBAB7\/l3AAABAQgKVF\/gWMLXPIU="}
00456{"flow_id":24,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1944,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":61560,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAGhTs7YqAcsBIEmLB5kd7IUo3\/YpAbuVsAnf\/VNtBZw3gBALMMpCAAABAQgKwtc8iHOjJWI="}
00455{"flow_id":23,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1945,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":61560,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAA35IcYqAcsBIEmLB5kd7IUo3\/YpAbup5BqPq4V5AeQXgBALMHo2AAABAQgKwtc8iEv6YnA="}
00545{"flow_id":22,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1946,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":63513,"pkt_caplen":150,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":150,"pkt_l4_len":96,"pkt":"qtsDr8lk5EKm5WPyht1gAMi0AGAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACACxxABu7duEdXT5vXsgBgB9fdYAAABAQgKVF\/gWsLXPIUUAwMAAQEXAwMANR8vgLmhiHvL\/roVqe2Caz7DYPmgM\/8rDPsX4ny\/13EIeY6mjywRdp19TOqcB\/vZYopNOlSi"}
00585{"flow_id":22,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1947,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":63678,"pkt_caplen":178,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":178,"pkt_l4_len":124,"pkt":"qtsDr8lk5EKm5WPyht1gAMi0AHwGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACACxxABu7duEhXT5vXsgBgB9VtEAAABAQgKVF\/gWsLXPIUXAwMAVwBjIcDX7pZI2m9db6MAcuVvvIUC6ceyzuDWbbSXzRXAJkDVHB\/afLzUyVw\/gIuKH5PFyS0EExG8UKNv6+okw9ygDdaEYPzsXJvHkMFubJ43QtG\/NRaDTg=="}
00811{"flow_id":22,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1948,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":63813,"pkt_caplen":347,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":347,"pkt_l4_len":293,"pkt":"qtsDr8lk5EKm5WPyht1gAMi0ASUGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACACxxABu7duEnHT5vXsgBgB9XNgAAABAQgKVF\/gWsLXPIUXAwMBAErss9Ro1+6WKxQzbA1HvyO2qoAbQOglRe1CBh53dLgZCtV2ACUKhSnmyjVFRGbGXtBLE13Z2ZxluMzCOQstrDXbOCBfqA0oTe1kfP\/WjFcuHFHLwYDsJFwgABy0sIKc4wxRxixnnmuuyFzv9HosyYI9HJnZAwF\/8Vmi7Y\/jxpltC0ja2Fl12v\/8L5yPrBqISakOJCGosJstvni06OGZRb80kreytDKVbkCzkGRpSwPQPOqxHSBPhcLJGoiujnQB8sBhOisw6m2TPkQKx3AkxF0o9kn2igiSV3VLDdvY2GpMPPJdfkZ0kJRkPQBP2ho98yuoN\/87UYuLIJC8A5iJj84="}
02338{"flow_id":23,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1949,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":75726,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABYwGPQBk\/5sAAAAAAAAAAA35IcYqAcsBIEmLB5kd7IUo3\/YpAbup5BqPq4V5AeQXgBgLMAIEAAABAQgKwtc8jUv6YnAWAwMAegIAAHYDAxlPUXb9YZCeSa2lSHpdRumxNgzSKA+ggZ2lQZhm2V8wIKCfkVZBs7YxSZgdkLoG0zKZeHzoKc6I+SIaE11zlfvtEwEAAC4AKwACAwQAMwAkAB0AIMQOXmNr3ukoZyPpDTvzhq63qgZEGO1MOCgqxcZ2irQnFAMDAAEBFwMDACTb5Qu1gBZa3L\/hIXZyXkOAecj25dqqLLCdYWY45d9oOj3th94XAwMU4JS4Z4HJVTufAM71+HqGgq8J7Laxo3jZYh4R+vG+XL1x7HTCSF5hvJLJ1785iqkzTfeG\/U1qftakv++1nr3cqzzifbhJE4HCr18kCACC32vSlwK+Sjmi1Jq2oKWKJv7itHnT6i50knVzNfHXX0IbF74Lj3Gs3jwqov9y45x5xIs\/zE8zy9EjubEMBTgGkOlL854mvxVJiwscBEsceZU32pGV59s\/W4q7vuKoOrVV2epo9I7ANykDXn+Ixd4sHyt1ifFWtw8imhBOlLZspOBXsX+abUc+jgXbT\/puuxhUePXAbVWE9Y8w8zsduktrKtVBARuUr\/qYA3gnhTYtDAZDiPxTI\/7YlqtRGkLIBX4e\/+dJASCPy3oBC0\/JIkM6yzmDWjFUUAdK7CG4+7NwxCN20NBCscsRsoqfWXIxL6+pqiAasy5u+LO6MfSLfFskKb3kkNE8hJ6XVgAf3p1rjmnT8EmTPFOHfu\/x78kQS3BVRGKGZhz5bfJqCZMfDJ3Im3KL4gyDwZxELFcD51iUIwXAHJXcE2N1uGYVAA7YvpFDVvMrSPn6XNMmQPI5J2o1v8qUinRjbljpnRCLpxovPDjyi0QigtoTmS5CxdpwE4sQaEW5gOjbbVO4oI6e3UPx9IBfLXoRQlGccYMx0CCBpECPKJyMzbNh4NTAceLG+ZWdEVlz9UFeHfi0gQVaRptkDcd\/owYqbG43qqkVnF592x1WChuD6JqSUIZM7ZMpyMX6vL\/Jv\/iPyNNqCfGSZk5J296LnTjUt\/A3s5HMpfsHITzq3AXPapZ+WOnqRG0iKKzGIV8GGfqMUc0uI2YhYufApWDVr7P4mVlQQmFdUVUPd+deOypxEf11OpCI9kTFDryOdxkacSAhcZY6WsXIXXOL\/DjpvmMDD+RJrFJfC3oOO5paNpz5SqpsLZJ5BJ9byS+95Jo3x+JZKDvK9\/qdZicuocwsSoLAidznyPPFQHH4EUtHcJLcdgnNxYZM30P6+pBwazHFAWheyUFCSgevEapFQMWs9\/kriUzlktXMjjo+MGXYNEtF5fGhiwWu9ZSWS8HTTHgW0JdNEf4D8lCPi6U9gTAHy9SoN4TsF0ttr6ciIKKYlCGrTjqrN1DWHBdKxAAMP9TFGGC2URUqBV8Grd0JMHug7x8PYgIURamq030PESYKY28qLHKVFyCWDjLcX92qxadO\/0R0R5JbA9wL0lCnswhyEV8quwGExNjJX5cnpDJGrnQvMiqSUpTd2OgHYWBdGRwyVHSUX8mE82z+QO4zu5OwipCDeenHo9Yi5QoUVCQ2vHK1DXrQDm5gq1XEeBPjbCjFsOQ0QdHOMQK9jB5qZyh6B7JpsfX1k7zM6QpRqjsVP0XoPRfJM\/rff8dPUz\/o7UAHi95WgYKXfhovpVgGU6\/EGqFT5rtn4U0KF9mOcrvYDQQikycAWcG8PHrJSYQyQ2jARBRApI1Mt2n4LOths7nFF3Vxgzl8Q3LEfTiINOXN\/mca4b3\/On7ZIADMcow6cDIZ98XNIDG\/XiW7sMTm5KjaYFUe98hvbLpWLidw9CIUkePEgPUJLaqHAS2sMRJnnNWfxjcblQCUx8fMImFsS3PEuI6\/ug52XJnBiQ=="}
00870{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1949,"source":"reddit.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":6,"flow_first_seen":1605291686985,"flow_last_seen":1605291687075,"flow_tot_l4_data_len":2113,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":352,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::df9:21c6","src_port":43492,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"c.amazon-adsystem.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
02340{"flow_id":23,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1950,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":75727,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABYwGPQBk\/5sAAAAAAAAAAA35IcYqAcsBIEmLB5kd7IUo3\/YpAbup5BqPsPF5AeQXgBgLMAmeAAABAQgKwtc8jUv6YnBoEnVTuCCFUDq3Gq2KIzu\/mEx5A+cKKGYDCvCCf77hR22MQYK1wSNhLsFBSed7wA0x3BYtdexGMG0kXIM4FVu32G\/\/DfFJK8gx9QaExXbWgHbC3olISpnxkjtgHwpCUDcHOfaIBNioN7bHZdcaugtOqxDEovbcPm2M8jTO5dsA9qbGK90lD1NFQuFYLkIklcBqKvSOn78By88Tbnm2Sn2PGsDSUS4jtXOZ5pVC8UUeA8FAsEgAlrl4jcPoOq1L+j0oIMPqZjt0CRParKNNXQOlg1A+MUgmjQvj\/6QBS9rR7NE3NFTV8oJk7X+vOj9KB29AwttAqAs1LCJbBq7tpoZND82L6IwepXP9RX8BBZii6ugXJLcfXUUWSTardu6NhI3vcw+8f3imAMZG0ynf2RGKtk\/ipdHq8fBT1DovFvrSvYR1jEyafhr8rZTHQR0+ZfvIjxCCreeZTURmKMxa7+xjNLa83XV7ubDhZ9ZKO\/E460v3j6vj5PiPH7t+6LCd8qz1P\/4u7uRu5HhmvzMAghjgnRdf8sjXa4+GdNfHpi1pbN45I3V6ULeAU84mDh676GwiFD0yCq9ZpsJ4wJqBakuEVyHrA6lpNRcwdE1PchcNxtWnR62NgesKoA\/UP8WBby1k6L8ae5HLUWTNIvIMyMgUOMDZaLvsCmNZNU0xP6IR97Yg2\/Zl9K5imjuqIiHeUyht3h2LS7CFutkZViO7oAhnu9IQSBWIvaOpMCU4b8Em6zVNJEouqYegRVK4Df7jHEn0TPug4G9Po67iAATfN7R+O+WA+xevY9ODR6YjxreK4MAdMIHgLAjipn17AsCHjKfr\/LbJOxgV5Bts7ZtTo1ORRDNpU7u0WPdt15cUWFyOQ1Y+aKm2WLmBnyorS92KWrMEkpw6cH3YUdUiJ2OrrMcH3TsFV9h6\/3\/gBfIbSDaZQlZ0yTmsXpE0QIDG3TTALbTk8JTeVelR04v+GvYnNgAAbMP1n7OdDLbeVEIgUA64RpHojO\/XGEX9verS2XOEp4x5GsX6IoYadcAPqeTW4WMYy8R1WZmOmQflBW473fh20GaNojLGUgF6yGaRGwD9mQHceL8tiL5yaZGbK1W+UEpsuVFAlgoFRBQrE5lA1D+UslFK9gsDNyqWS36s6dqrLgVVnFzRnGa9lWPvP\/4eSwHnN7dwcqwTnRtFVlgTHVXZ0pCnwY1bYXdeCpQwvxR6cmP2\/vuySYmCP9pq788pDL4ZGx7xtmz8l\/Z6Vx7c3GtPIWKo\/4orGPVKagy2q4MOwYOY3USuwakjlIHksDgG5vXIqqowHc1EcS8K7Uby5p3Uj\/xLEMg\/9jHSW3GRNzSKQliPLT7z2pMkVO0pZbmCibcpZk9V0AeX1wIkaEnE4oEGqJJLSowYrRVLcSoK0l+DNSeaZIWVBDzssh\/w\/GiIclDk3mleYHpQqOuHViaAWci1e\/KJjRvFvWwAR4GEfQVBqhinu1zfToNsnZGwYPB5xMpBDmei\/jkAJJxF7qlo0nvPlxo1tT4Y4ehD0SbjSg36j19alRO+\/zw3pfkK9SkcrI25p1EOBT2KD0g4QfzyaPgnPrrtDfhnDBPxGXzOnwRZHFqM+oQilvpNg8ksgTtCQaHXFBUdM5PfaXh\/TENWbmksi7lHaPs54fh3EIeAONsz593r0F\/mdr9BROKau07jgwH0cj6qGixkFkVkBqtdZLDsp+Ro\/UGT0WhAj95GoaG0OQK329HBnbR0bMvIt0Ax8XuqgdYMzAVG5lgW3KKag+d16C5aRF6zGYExvfwTYot1gaVdG5NmX2XOoLl+yl+3mnZm7geLOjzblMvtXcpQAOwf6EoITuXyhCB3r4629g=="}
02347{"flow_id":23,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1951,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":75727,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABYwGPQBk\/5sAAAAAAAAAAA35IcYqAcsBIEmLB5kd7IUo3\/YpAbup5BqPtl15AeQXgBgLMA5LAAABAQgKwtc8jUv6YnD\/9qw03ddxyHrk6ti0y3jZPRaGzMusM07M8rTkzBPMJQTn59EHYBWUnQgJvy9fZ3skrVWjJ6JGia5SXJDAZoiaJN3z4yOTGbosk4jaHTPKP\/6XwDIepQMVZ0EBZCmCr+RjApyPJk8lIuVz16\/VGnO\/VvS4eVGRuWne5IEJOIVZNajdDZavA6xxaPinQGInucYZnIi1Qpr1eK0ta6qYmoCg3f1fqe7wbaXvYR9xrK\/SuH0lCNJqS5MCjSpv7tuD3YgbGmCCmAoDnoqziDtjrLwb7qnsA9uoxksh+DdUaOqjdbEU\/WX6atc4Cz89a35ATmSSDcEsKuU29TMojnycVKYTPhtpg0ghxF9LmemAFkUzKE8AJNeT5sNXe4eDlzk4+wr5g1qUsnlCEZ4xNEPH4MCzTShCIFKjqGzet4n6GKZFBBXKING6cZjBvFjVeI8EP8lsyr2Ap235BCpJo4Vhhyb3OyCb8RVBGS9vY823ye3A\/7Tg5w05GDSCFkMJgpraW4DojQV\/Kcj4xbiKHQ\/Q0UWedP+jxeL09LKD5CWV308IUib2ziSpl9j7q3UBhwt5TNlzxczYevJDIyPyO\/Bsu1pka55bhh3lUNVM8kG+Ac\/UjD4hh6RpbU6KLYJZW4f2bjE\/JdMueDQ6BMBPZQLfi2rwdJCgec5OcNJhJIfZ34E0svHHiRxyFnbEHEyWE6amOYCaV95IuaNzZn6UphLnY1zkJbR\/FyFKN\/eiEmOnuznJWPcYFv0gtsWAjkYXNS4244RyalZWP76tXmLeyMLItJmhT8WMERe9VeoYZC9P9Mh3q2TifjUCb4pNu38zZNffIgcW8wJI\/Oj0n+2Fsn2TCxz9srJ\/TBSRXGaC\/MUbQRmyaBdC8mkz7vA7Txpc3KzSWDQ5\/oTacJiafKyD4To2JWHYyPOpM8a97byI2fSp3tymgbYpBqebdAvQFCdhzToyc\/GNwLsJtQEQMZOPgsWErjL\/\/UEIsCTrbZ80IXD46CuSKNcUS88PfuTMxBKJ3C7keqeSJDdWop\/d4qDs5QNKXgmzQluQLYoNu6y5fj4WmZzE+bM2a2rAvRMPU34dCa5ycr5R6Ow0sKhAX8q+GEUAk8LK+NJ9auh6vZtONQVwLVbnpW1LPGf0wj8VlS44sBX2ujpWqLu9nF1XhZfczCWugI0wbOJPKBHRlJUaiW40Hf7uCIXvGIk3nu0wsHxP0hcY0byiX7Ag+Ft8Nw\/uSlMgZiY3SjlVZd6zLcuz5mrtOlRw9D\/FiS4kXyTaIX89wEX+R8rflGR4CTZmMAqjlszXwP+yjj6XiVFUZnyufe7VFa\/yY0iroY\/MlBKj8oxaK4cuDTAPid9YG1gk3DNS4\/pz7GNWfIRmurwSiNGfXZMY4y7nr2FAsRuqdX37BesENYDHZGw79WoplAMK8P07XHM0Q4fGfHsF1oW91aw4IgNemrjs\/FC0UmsLjVi+MHWJC0ImmRPHJhd0OPNtJI9XJFUy6pzCwip\/UNHcA5ioXebhi6emVfo0zRN7TAyU4HSdR9cEqPySyi821Rrp0OaBPnxKuRe2OY2o4Vw+zvgQgYwwuhEqxL3JEz\/dEuCX8Sg1wz6xd7ZHR1EApfEbtzY3Mb9k6XahIEUEJiPr50TX\/z\/jpoV+UcQWHTU+pPoyLy3twdoF0UaPY2Jq7gcig4hHsFE\/v7dvA9AUyAF7BWMXBAnBlxf07+CghAkyz2TMsj1C0jT9cH82i8pmJJi+8yjBNXkuqa60WGGADzgMn3U+tgguvWFvvxOLxK1wocK\/xo7lN0nJg1gp27M3dfWdbyVdWAs9DqYu6iv2H7Yb7vY9n5UMj48un1LBU1ISN4eQteX+HQ=="}
02335{"flow_id":23,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1952,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":75727,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"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"}
00888{"flow_id":23,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1953,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":75728,"pkt_caplen":401,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":401,"pkt_l4_len":347,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAVsGPQBk\/5sAAAAAAAAAAA35IcYqAcsBIEmLB5kd7IUo3\/YpAbup5BqPwTV5AeQXgBgLMGkUAAABAQgKwtc8j0v6YnC0hVcFbX63\/Girnbt47RxXcChfwOKAR5Mp4P3hkUFn7lGFopu8Owj2sRUEr3zGM4Lp3D9I+sEqb4YhhTN7nFe4C5tOrCjD\/yzLDKcX63FUYlJAlZ\/0mtztfkyz3EgdO1g0WvLpr7IDM8I8+qI5jOdi+z0M0xQkByMhe9OVdWlRajeginYjRHQOQQ9aGe08rZitSMhWctEbfcsT\/zoH\/Y5wn835mP5FOt9IfSrfR7teZe\/fJdQ0Jb5R6blvJCE0jGlnen\/8zjItNDufwnOZWeyaUQfZOJkPD3zd60IxUDg\/e8YGEKCLl\/KbahlnoVoVBEzYvrI05kKEbl9+77PPNvfBvhcDAwA12pzaMxFjGetr+hBZVmTqN9jdoY5g6F5KN+PaeesCouKHMLItwQstDl929Tpg8C4eTQcfL3M="}
00455{"flow_id":23,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1954,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":75746,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDjDtACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAAN+SHGqeQBu3kB5Bcaj7DxgBAB9X3NAAABAQgKS\/pio8LXPI0="}
00455{"flow_id":23,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1955,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":75766,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDjDtACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAAN+SHGqeQBu3kB5Bcaj7ZdgBAB8HhmAAABAQgKS\/pio8LXPI0="}
00455{"flow_id":23,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1956,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":75769,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDjDtACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAAN+SHGqeQBu3kB5Bcaj7vJgBAB6XMBAAABAQgKS\/pio8LXPI0="}
00455{"flow_id":23,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1957,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":75771,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDjDtACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAAN+SHGqeQBu3kB5Bcaj8E1gBAB4W2bAAABAQgKS\/pio8LXPI8="}
00455{"flow_id":23,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1958,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":75773,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDjDtACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAAN+SHGqeQBu3kB5Bcaj8JwgBAB32xiAAABAQgKS\/pio8LXPI8="}
02352{"flow_id":24,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1962,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":96859,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"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"}
00849{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1962,"source":"reddit.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":6,"flow_first_seen":1605291686996,"flow_last_seen":1605291687096,"flow_tot_l4_data_len":2113,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":352,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::6853:b3b6","src_port":38320,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"c.aaxads.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"15af977ce25de452b96affa2addb1036","unsafe_cipher":0,"cipher":"TLS_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
02338{"flow_id":24,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1963,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":96860,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"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"}
00779{"flow_id":24,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1964,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":96860,"pkt_caplen":324,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":324,"pkt_l4_len":270,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAQ4GPQBk\/5sAAAAAAAAAAGhTs7YqAcsBIEmLB5kd7IUo3\/YpAbuVsAngCCttBZw3gBgLMBi9AAABAQgKwtc8qXOjJWLVoULR7Q9V2rIPKiUxoXF35KjSgvcWeMi+kPpQEQL3c3SVw9jyx66\/tE0W2vKsddsGR13DkTjb+96PaqotZhcDAwBhjHl7i5HNjqksylN1eNcm5CLUY\/RIzP3IduDQpA\/Gi7c+a6oXIZKXtBMdUqSG0cqtChn1bs6UKk9l6ZElcu1VrsS2bEkuoQN8DFZUhkOsADcvJAqRbEqV8jfgvbOh4cSTYRcDAwBF3orx51IqRkoCntzkBk\/RIR6nynfZe2EWZiT89CxGE7FN7axExT0Toj3NWz1a8Zau\/OsMziC5kYMpq5cyfMy1FteKvERr"}
00454{"flow_id":24,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1965,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":96875,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCh2fACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABoU7O2lbABu20FnDcJ4AK\/gBAB9c2oAAABAQgKc6MlqsLXPKk="}
00454{"flow_id":24,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1966,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":96913,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCh2fACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABoU7O2lbABu20FnDcJ4AgrgBAB8MhBAAABAQgKc6MlqsLXPKk="}
00454{"flow_id":24,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1967,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":96916,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCh2fACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABoU7O2lbABu20FnDcJ4AkZgBAB78dUAAABAQgKc6MlqsLXPKk="}
00456{"flow_id":22,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1968,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":98793,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgFAAAAAAAAIAIqAcsBIEmLB5kd7IUo3\/YpAbvHENPm9ey3bhIVgBALOO\/FAAABAQgKwtc8rFRf4Fo="}
00566{"flow_id":24,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1969,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":99439,"pkt_caplen":166,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":166,"pkt_l4_len":112,"pkt":"qtsDr8lk5EKm5WPyht1gCh2fAHAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABoU7O2lbABu20FnDcJ4AkZgBgB9S2EAAABAQgKc6MlrcLXPKkUAwMAAQEXAwMARUWhDZfuxiMk7fQubfiMm7+27dZfRH4UDKnLUK298SJF8Y9ySD9V+KA6mu03fkwRXwBD\/EC7HmO2NY5P65C733Gt9NmGpg=="}
00584{"flow_id":24,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1971,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":99567,"pkt_caplen":178,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":178,"pkt_l4_len":124,"pkt":"qtsDr8lk5EKm5WPyht1gCh2fAHwGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABoU7O2lbABu20FnIcJ4AkZgBgB9fylAAABAQgKc6MlrcLXPKkXAwMAV\/z+RxkDlJXvgJNE2QhL+h5zglcobEvykxlM2AKYZ1uN5JO5pwiygkhPt1HcMkVQ4O1yuZIvKq\/6AA1RewBjfYBqXii4ludFjv0O\/IMDmsQbRZqJwFtiOw=="}
00834{"flow_id":24,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1972,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":99697,"pkt_caplen":364,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":364,"pkt_l4_len":310,"pkt":"qtsDr8lk5EKm5WPyht1gCh2fATYGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABoU7O2lbABu20FnOMJ4AkZgBgB9T2pAAABAQgKc6MlrcLXPKkXAwMBEel4+2s26Q\/\/+VvqkI2wNh1vDtUyVrJe1S2V8IXhhSKyES07bw5YW+WDEWHhUs+h3LkoPS4AlKY2do5hp3rzAARAqv5+t1ykm3xgDzVh3cRIDZoL1OdifHKhz6PJzxZsq4EE6ZKWId9JwohEbKkSl8QtpvPET6gzn1rPY+ONP8e1W8xQ49JnxqyzqD6JTv1UkNGZmQnFz1tZNZceTwCHV+E4k3QZV6+lk6JSTdUmtBaK9HcuJezt2oBrsjqnytxmKjyy\/TtPkrVTmQmWamPhh\/IMQ+Kkeycct+uiMQ1LoeqV\/KxEH4emAjvSUkzAdPcMT5nLzFy4gAIs51Tmhmbu7RRXJdI3qFS+vYeEI9GbLFFxgg=="}
00457{"flow_id":24,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2033,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":128102,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAGhTs7YqAcsBIEmLB5kd7IUo3\/YpAbuVsAngCRltBZyHgBALOr2VAAABAQgKwtc8ynOjJa0="}
00507{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2333,"source":"reddit.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":1,"flow_first_seen":1605291687485,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::acd9:12c2","src_port":51026,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00467{"flow_id":25,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2333,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":485783,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gDGJhACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACs2RLCx1IBu5\/PXZ4AAAAAoAL9IP2VAAACBAWgBAIICruOxrcAAAAAAQMDBw=="}
00468{"flow_id":25,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2341,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":512994,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAKzZEsIqAcsBIEmLB5kd7IUo3\/YpAbvHUvrRnoyfz12foBJXgAjWAAACBAV4AQMDAwQCCArC1z5Fu47Gtw=="}
00456{"flow_id":25,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2342,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":513017,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDGJhACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACs2RLCx1IBu5\/PXZ\/60Z6NgBAB+4zMAAABAQgKu47G0sLXPkU="}
01150{"flow_id":25,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2343,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":513279,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"}
00836{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2343,"source":"reddit.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":4,"flow_first_seen":1605291687485,"flow_last_seen":1605291687513,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::acd9:12c2","src_port":51026,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"securepubads.g.doubleclick.net","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
00507{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2344,"source":"reddit.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":1,"flow_first_seen":1605291687514,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:789d","src_port":48240,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00466{"flow_id":26,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2344,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":514756,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gD4BTACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXidvHABuwi2N5MAAAAAoAL9IOSoAAACBAWgBAIICiRA7pIAAAAAAQMDBw=="}
00456{"flow_id":25,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2350,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":545133,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAKzZEsIqAcsBIEmLB5kd7IUo3\/YpAbvHUvrRno2fz1+kgBALMIFtAAABAQgKwtc+abuOxtM="}
00468{"flow_id":26,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2351,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":545133,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAJdleJ0qAcsBIEmLB5kd7IUo3\/YpAbu8cGxxKx0ItjeUoBJXgPGUAAACBAV4AQMDAwQCCArC1z5pJEDukg=="}
00454{"flow_id":26,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2353,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":545171,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gD4BTACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXidvHABuwi2N5RscSsegBAB+3WHAAABAQgKJEDuscLXPmk="}
01148{"flow_id":26,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2355,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":545503,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"}
00833{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2355,"source":"reddit.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":4,"flow_first_seen":1605291687514,"flow_last_seen":1605291687545,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:789d","src_port":48240,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Twitter","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"platform.twitter.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
02351{"flow_id":25,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2356,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":552593,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"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"}
00877{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2356,"source":"reddit.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":6,"flow_first_seen":1605291687485,"flow_last_seen":1605291687552,"flow_tot_l4_data_len":2113,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":352,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::acd9:12c2","src_port":51026,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"securepubads.g.doubleclick.net","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
00455{"flow_id":25,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2357,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":552611,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDGJhACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACs2RLCx1IBu5\/PX6T60aP5gBAB8YURAAABAQgKu47G+sLXPnE="}
02344{"flow_id":25,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2358,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":553134,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"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"}
00598{"flow_id":25,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2359,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":553134,"pkt_caplen":188,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":188,"pkt_l4_len":134,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAIYGPQBk\/5sAAAAAAAAAAKzZEsIqAcsBIEmLB5kd7IUo3\/YpAbvHUvrRqWWfz1+kgBgLMHClAAABAQgKwtc+cbuOxtNkZemhbgwASoxlCtW1abhK3B\/tL3dWopbbjUQhTzBLCR4uVXy80v8Wf5q6EgkF+XnIGPIVZVc0cBICLuUJqZmJLhXpFJEmb3RvVqvx9df+iFHA3ksavgxAW3\/7kL6+vaMI+iBfh\/I="}
00456{"flow_id":25,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2360,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":553139,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDGJhACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACs2RLCx1IBu5\/PX6T60allgBAB9X+gAAABAQgKu47G+8LXPnE="}
00456{"flow_id":25,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2361,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":553148,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDGJhACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACs2RLCx1IBu5\/PX6T60anLgBAB9X86AAABAQgKu47G+8LXPnE="}
00545{"flow_id":25,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2363,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":555024,"pkt_caplen":150,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":150,"pkt_l4_len":96,"pkt":"qtsDr8lk5EKm5WPyht1gDGJhAGAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACs2RLCx1IBu5\/PX6T60anLgBgB9ZN0AAABAQgKu47G\/MLXPnEUAwMAAQEXAwMANT9oW3\/XQK5SJC6KQgbXi2eFePZr0gCln14p\/cwjApxVuoE5M9TY1+i4LedI0BYrkXSb01WC"}
00587{"flow_id":25,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2364,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":555139,"pkt_caplen":178,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":178,"pkt_l4_len":124,"pkt":"qtsDr8lk5EKm5WPyht1gDGJhAHwGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACs2RLCx1IBu5\/PX+T60anLgBgB9ZntAAABAQgKu47G\/cLXPnEXAwMAV29dzDk2yENRPtgCfgb4aS\/RWDEENEGG1oZ8c3Ud8ug8eRoQG3wPCo1PfQYszVRp9jrCq\/BhCcf2YqFEHFSegJyJAVSrjTHSw6YRrq9tZ\/CPutF9DaUCiQ=="}
00828{"flow_id":25,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2365,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":555214,"pkt_caplen":360,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":360,"pkt_l4_len":306,"pkt":"qtsDr8lk5EKm5WPyht1gDGJhATIGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACs2RLCx1IBu5\/PYED60anLgBgB9R7pAAABAQgKu47G\/cLXPnEXAwMBDSpry5NwUc4R2NKmw\/wnh5V9PbkhZgbfUw3D3CWYt4sQwXNPHpIwaggGymNA1jx7zLnu571keejl+YDQ8E7vHFDz41UN1mnNBdthzqy3FtWgUwPKbL1xd45xzE6smlRSEJ9J+HVF0YA\/Rz5NWr5T5KqXNwMStrIO1P1uN1K68NWhezS\/VI7IIVYtcZV2O8X53+Iu8HUNOopWLPxbLMqNcGTfrhRynzdpmOioThQOBsXahdzbZSPU7vhneu13R9D9pqiANs\/uVpVV3RqE50G9CfvqcFPwm9TvAaoXRQmLEdoNT4imHOd4337f4xA6huTgW1xxLHZqk79F7QwVGxIexEXOvYKcAQ8eKQ7Q4BK2"}
00458{"flow_id":25,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2366,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":592582,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAKzZEsIqAcsBIEmLB5kd7IUo3\/YpAbvHUvrRqcufz1\/kgBALOHWOAAABAQgKwtc+mbuOxvw="}
00456{"flow_id":26,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2367,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":592583,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleJ0qAcsBIEmLB5kd7IUo3\/YpAbu8cGxxKx4ItjmZgBALMGodAAABAQgKwtc+mSRA7rE="}
01864{"flow_id":26,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2382,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":606576,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"}
00889{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2382,"source":"reddit.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":6,"flow_first_seen":1605291687514,"flow_last_seen":1605291687606,"flow_tot_l4_data_len":1773,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":295,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:789d","src_port":48240,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Twitter","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"platform.twitter.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
00454{"flow_id":26,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2386,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":606628,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gD4BTACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXidvHABuwi2OZlscS82gBAB9W8AAAABAQgKJEDu7sLXPpw="}
01866{"flow_id":26,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2388,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":606671,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"}
01875{"flow_id":26,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2390,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":606672,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"}
01214{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2390,"source":"reddit.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":9,"flow_first_seen":1605291687514,"flow_last_seen":1605291687606,"flow_tot_l4_data_len":3965,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":440,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:789d","src_port":48240,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Twitter","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"platform.twitter.com","server_names":"platform.twitter.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert SHA2 High Assurance Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Twitter, Inc., OU=Twitter Security, CN=platform.twitter.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"2B:30:10:3B:07:2F:F2:EB:3D:08:E3:BB:45:61:F7:A3:9F:4C:A7:92"}}
01310{"flow_id":26,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2391,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":606672,"pkt_caplen":718,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":718,"pkt_l4_len":664,"pkt":"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"}
00455{"flow_id":26,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2392,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":606677,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gD4BTACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXidvHABuwi2OZlscTNOgBAB82rqAAABAQgKJEDu7sLXPpw="}
00455{"flow_id":26,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2394,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":606687,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gD4BTACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXidvHABuwi2OZlscTdmgBAB7WbYAAABAQgKJEDu7sLXPpw="}
00455{"flow_id":26,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2395,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":606689,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gD4BTACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXidvHABuwi2OZlscTnegBAB6WRkAAABAQgKJEDu7sLXPpw="}
00582{"flow_id":26,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2403,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":609975,"pkt_caplen":179,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":179,"pkt_l4_len":125,"pkt":"qtsDr8lk5EKm5WPyht1gD4BTAH0GQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXidvHABuwi2OZlscTnegBgB9QTdAAABAQgKJEDu8cLXPpwWAwMAJRAAACEgwJfCy8hYegf8vK1gEd771FfULAnWR2VKZ360NviDzVQUAwMAAQEWAwMAKAAAAAAAAAAAEwtwOfUQVmc1mHUWH7ov8ZceZBEvh4p0wiGKwlhnIvo="}
00593{"flow_id":26,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2407,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":610090,"pkt_caplen":185,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":185,"pkt_l4_len":131,"pkt":"qtsDr8lk5EKm5WPyht1gD4BTAIMGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXidvHABuwi2OfZscTnegBgB9TOvAAABAQgKJEDu8sLXPpwXAwMAXgAAAAAAAAABjw9BEk2YJbGDeK86aZew3Mf7D\/Z5M1FLMpMQ8HdpJQ50oLyOWImN6mqth6m\/RP\/40Ks638qoxbNS0Zu2LZ7kKA4tnQgaNqn6+tnLpBt0GmlBEff7vHo="}
00513{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2460,"source":"reddit.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":1,"flow_first_seen":1605291687642,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:816::2008","src_port":39520,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00466{"flow_id":27,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2460,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":642048,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gDI7+ACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACAImmABu4PHuxgAAAAAoAL9IGTNAAACBAWgBAIICsL4XLwAAAAAAQMDBw=="}
00467{"flow_id":27,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2543,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":676357,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgWAAAAAAAAIAgqAcsBIEmLB5kd7IUo3\/YpAbuaYOcfuuGDx7sZoBJXgGbFAAACBAV4AQMDAwQCCArC1z7qwvhcvA=="}
00454{"flow_id":27,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2544,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":676396,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDI7+ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACAImmABu4PHuxnnH7rigBAB++qzAAABAQgKwvhc38LXPuo="}
01146{"flow_id":27,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2546,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":678071,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"}
00826{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2546,"source":"reddit.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":4,"flow_first_seen":1605291687642,"flow_last_seen":1605291687678,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:816::2008","src_port":39520,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.googletagmanager.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
00456{"flow_id":27,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2552,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":714410,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgWAAAAAAAAIAgqAcsBIEmLB5kd7IUo3\/YpAbuaYOcfuuKDx70egBALMN9QAAABAQgKwtc\/EsL4XOA="}
02096{"flow_id":27,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2554,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":721930,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"}
00867{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2554,"source":"reddit.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":6,"flow_first_seen":1605291687642,"flow_last_seen":1605291687721,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:816::2008","src_port":39520,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"www.googletagmanager.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
02092{"flow_id":27,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2555,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":721931,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"}
01104{"flow_id":27,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2556,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":721931,"pkt_caplen":564,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":564,"pkt_l4_len":510,"pkt":"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"}
00454{"flow_id":27,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2557,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":721941,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDI7+ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACAImmABu4PHvR7nH7+agBAB9eOfAAABAQgKwvhdDMLXPxo="}
00455{"flow_id":27,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2558,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":721956,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDI7+ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACAImmABu4PHvR7nH8RSgBAB8t7qAAABAQgKwvhdDMLXPxo="}
00455{"flow_id":27,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2559,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":721959,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDI7+ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACAImmABu4PHvR7nH8YwgBAB790PAAABAQgKwvhdDMLXPxo="}
00545{"flow_id":27,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2560,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":724949,"pkt_caplen":150,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":150,"pkt_l4_len":96,"pkt":"qtsDr8lk5EKm5WPyht1gDI7+AGAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACAImmABu4PHvR7nH8YwgBgB9cEoAAABAQgKwvhdD8LXPxoUAwMAAQEXAwMANTuiWZPTyxL8Q\/\/nF5weNXBYVnv5\/NleIQwSByQxH1HnaopR3O\/Q1ECJ9cRo0CMSKlyTAdFB"}
00584{"flow_id":27,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2561,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":725128,"pkt_caplen":178,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":178,"pkt_l4_len":124,"pkt":"qtsDr8lk5EKm5WPyht1gDI7+AHwGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACAImmABu4PHvV7nH8YwgBgB9SQoAAABAQgKwvhdEMLXPxoXAwMAVzmHwSAiWI\/k3CJkJeFEnnTcskuW6crrkLQFEBiS0vl+XR65kcLDbLlGxXq3eodCHKGxcH9g9IbJ+rTMvn76iM92Yab+rZhFJh3wRl\/MCI63sBOMO1tThw=="}
00814{"flow_id":27,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2562,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":725460,"pkt_caplen":349,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":349,"pkt_l4_len":295,"pkt":"qtsDr8lk5EKm5WPyht1gDI7+AScGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACAImmABu4PHvbrnH8YwgBgB9YzRAAABAQgKwvhdEMLXPxoXAwMBAizDx2A1A0vbHRpYsfJI5RLkH3Jzhy5MjXSfFOaNEDo4gIQv2afYdeTg0OoFqkrBqH2JgG\/3iCLCyAV0bizD84zlHn\/YzHdrnbRfFiAOqKwPmCJMuFCJ47FDdugVdNO5OYUwOgyMcRGRuwUlEOi9EZzNdnFOvKsQcj5pk02n6S1ZaskxVuWki00kzw0Zm\/n+56YxFaX6Y5JKH2AHrLmn8880RzJTHvGKVLI7jDzHn4kpYyB9TJdIrDoyKdAs2QmImGiwQGR9g3ZYnyDIjP8dFicLDwD5aDkbL9WTCoq7S7qHDwIUvee\/K79qfVH+0wgciRNqSXH4C6lURIbSWdTKkwXREQ=="}
00457{"flow_id":27,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2571,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":759189,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgWAAAAAAAAIAgqAcsBIEmLB5kd7IUo3\/YpAbuaYOcfxjCDx71egBALONNeAAABAQgKwtc\/P8L4XQ8="}
00507{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2578,"source":"reddit.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":1,"flow_first_seen":1605291687761,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::6853:b3d1","src_port":32970,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00466{"flow_id":28,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2578,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":761761,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gCTrZACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABoU7PRgMoBuzRK2bcAAAAAoAL9IFSZAAACBAWgBAIIClvEqOkAAAAAAQMDBw=="}
00468{"flow_id":28,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2609,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":790624,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAGhTs9EqAcsBIEmLB5kd7IUo3\/YpAbuAylJzVUg0Stm4oBJXgFBhAAACBAV4AQMDAwQCCArC1z9gW8So6Q=="}
00454{"flow_id":28,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2610,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":790646,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCTrZACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABoU7PRgMoBuzRK2bhSc1VJgBAB+9RVAAABAQgKW8SpBsLXP2A="}
01147{"flow_id":28,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2611,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":790793,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"}
00813{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2611,"source":"reddit.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":4,"flow_first_seen":1605291687761,"flow_last_seen":1605291687790,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::6853:b3d1","src_port":32970,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.aaxdetect.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
00507{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2616,"source":"reddit.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":1,"flow_first_seen":1605291687800,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::68f4:2ac8","src_port":56782,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00467{"flow_id":29,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2616,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":800179,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gBEqMACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABo9CrI3c4Bu\/+MN8MAAAAAoAL9IICJAAACBAWgBAIICk1+jVUAAAAAAQMDBw=="}
00457{"flow_id":28,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2626,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":820314,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAGhTs9EqAcsBIEmLB5kd7IUo3\/YpAbuAylJzVUk0Stu9gBALMMj9AAABAQgKwtc\/flvEqQY="}
00469{"flow_id":29,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2645,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":829410,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAGj0KsgqAcsBIEmLB5kd7IUo3\/YpAbvdzp1dXkT\/jDfEoBJXgChEAAACBAV4AQMDAwQCCArC1z+HTX6NVQ=="}
00455{"flow_id":29,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2646,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":829478,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBEqMACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABo9CrI3c4Bu\/+MN8SdXV5FgBAB+6w4AAABAQgKTX6NcsLXP4c="}
01150{"flow_id":29,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2647,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":829706,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"}
00836{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2647,"source":"reddit.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":4,"flow_first_seen":1605291687800,"flow_last_seen":1605291687829,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::68f4:2ac8","src_port":56782,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Twitter","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"syndication.twitter.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
02337{"flow_id":28,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2651,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":852902,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"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"}
00854{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2651,"source":"reddit.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":6,"flow_first_seen":1605291687761,"flow_last_seen":1605291687852,"flow_tot_l4_data_len":2113,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":352,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::6853:b3d1","src_port":32970,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"www.aaxdetect.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"15af977ce25de452b96affa2addb1036","unsafe_cipher":0,"cipher":"TLS_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
02345{"flow_id":28,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2652,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":852903,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"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"}
00454{"flow_id":28,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2653,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":852932,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCTrZACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABoU7PRgMoBuzRK271Sc1q1gBAB9cxuAAABAQgKW8SpRMLXP54="}
00454{"flow_id":28,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2654,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":852982,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCTrZACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABoU7PRgMoBuzRK271Sc2AhgBAB8McHAAABAQgKW8SpRMLXP54="}
00803{"flow_id":28,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2655,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":853615,"pkt_caplen":338,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":338,"pkt_l4_len":284,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAARwGPQBk\/5sAAAAAAAAAAGhTs9EqAcsBIEmLB5kd7IUo3\/YpAbuAylJzYCE0Stu9gBgLMFTGAAABAQgKwtc\/nlvEqQZMO39y2YEtMwrD1hNK1gwyOawcrBdgg+uwa2UaP5emwVrlpL2Bu0MENPvXs3VR7m0OOpJ\/esXJLmLwZaiTavsQY6Hy6+3U8Ql6iTZOFwMDAGFdVvKrB1PAcxwOosv+FqAZSYlCJbjCI3sLpmttzH1hMzR1pZGxDhXdDuHmsS0kTeiZGJCggL\/qO8NHmWdjnz4epHcw6j8ApQ0+Sdw\/v1sInfQgrVHTPdTTCHz0ukgUdeKDFwMDAEU1pPpwpIx3j6wshpAVPzOj2IQ612idtI4LX\/vY7nZDjQ5ldJIKYd6Jp0MXFhV76Jj8LNKAs0LuAceKZOc95R\/\/cZbbna0="}
00455{"flow_id":28,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2657,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":853629,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCTrZACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABoU7PRgMoBuzRK271Sc2EdgBAB9cYFAAABAQgKW8SpRcLXP54="}
00569{"flow_id":28,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2658,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":856761,"pkt_caplen":166,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":166,"pkt_l4_len":112,"pkt":"qtsDr8lk5EKm5WPyht1gCTrZAHAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABoU7PRgMoBuzRK271Sc2EdgBgB9ckmAAABAQgKW8SpSMLXP54UAwMAAQEXAwMARXcxrEXgBPL2v15tl2nStBVqZ08\/OC5L7jjAkbsqzg\/g\/PKuN9sbeaW7ha2beU4SMEcj4ZYmpCEr9kJAmqNDBq51Wq4Hjw=="}
01072{"flow_id":28,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2659,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":856983,"pkt_caplen":542,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":542,"pkt_l4_len":488,"pkt":"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"}
00458{"flow_id":29,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2660,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":858949,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAGj0KsgqAcsBIEmLB5kd7IUo3\/YpAbvdzp1dXkX\/jDnJgBALMKDhAAABAQgKwtc\/pE1+jXI="}
00458{"flow_id":28,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2856,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":893353,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAGhTs9EqAcsBIEmLB5kd7IUo3\/YpAbuAylJzYR00StwNgBALOrxOAAABAQgKwtc\/vVvEqUg="}
00458{"flow_id":28,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2857,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":893354,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAGhTs9EqAcsBIEmLB5kd7IUo3\/YpAbuAylJzYR00St3VgBALc7pKAAABAQgKwtc\/wFvEqUg="}
00507{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2861,"source":"reddit.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":1,"flow_first_seen":1605291687896,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::2278:cf94","src_port":39626,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00466{"flow_id":30,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2861,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":896532,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gD27HACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAAieM+UmsoBu3fYetUAAAAAoAL9ICsYAAACBAWgBAIIClOdBf4AAAAAAQMDBw=="}
00513{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2916,"source":"reddit.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":1,"flow_first_seen":1605291687931,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:806::200e","src_port":54862,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00466{"flow_id":31,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2916,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":931808,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gCkMmACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBgAAAAAAACAO1k4Bu9FF0vYAAAAAoAL9ILpIAAACBAWgBAIICnCSuGYAAAAAAQMDBw=="}
00470{"flow_id":30,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2917,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":932773,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAACJ4z5QqAcsBIEmLB5kd7IUo3\/YpAbuayhO+xPN32HrWoBJXgPVcAAACBAV4AQMDAwQCCArC1z\/tU50F\/g=="}
00454{"flow_id":30,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2918,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":932816,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gD27HACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAAieM+UmsoBu3fYetYTvsT0gBAB+3lKAAABAQgKU50GIsLXP+0="}
01148{"flow_id":30,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2919,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":933001,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"}
00808{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2919,"source":"reddit.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":4,"flow_first_seen":1605291687896,"flow_last_seen":1605291687933,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::2278:cf94","src_port":39626,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"id.rlcdn.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
00525{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2920,"source":"reddit.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":1,"flow_first_seen":1605291687933,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2620:116:800d:21:f916:5049:f87f:108e","src_port":48648,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00466{"flow_id":32,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2920,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":933355,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gBZTsACgGQCoBywEgSYsHmR3shSjf9ikmIAEWgA0AIfkWUEn4fxCOvggBu9JG6EoAAAAAoAL9IFfFAAACBAWgBAIICteKYnsAAAAAAQMDBw=="}
00507{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2921,"source":"reddit.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":1,"flow_first_seen":1605291687934,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::1736:86f1","src_port":44264,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00467{"flow_id":33,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2921,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":934638,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gA0MZACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAAXNobxrOgBu0Y7yJAAAAAAoAL9ICibAAACBAWgBAIIClHJL\/gAAAAAAQMDBw=="}
00467{"flow_id":31,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2996,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":966627,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgGAAAAAAAAIA4qAcsBIEmLB5kd7IUo3\/YpAbvWTrVWRoTRRdL3oBJXgGFBAAACBAV4AQMDAwQCCArC10AQcJK4Zg=="}
00454{"flow_id":31,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2997,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":966647,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCkMmACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBgAAAAAAACAO1k4Bu9FF0ve1VkaFgBAB++UvAAABAQgKcJK4icLXQBA="}
01148{"flow_id":31,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2998,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":966872,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"}
00826{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2998,"source":"reddit.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":4,"flow_first_seen":1605291687931,"flow_last_seen":1605291687966,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:806::200e","src_port":54862,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.YouTube","breed":"Fun","category":"Media"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.youtube.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
00468{"flow_id":32,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2999,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":974700,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSYgARaADQAh+RZQSfh\/EI4qAcsBIEmLB5kd7IUo3\/YpAbu+CLYiE5XSRuhLoBJXgDDhAAACBAV4AQMDAwQCCArC10AQ14piew=="}
00456{"flow_id":30,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3000,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":974700,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAACJ4z5QqAcsBIEmLB5kd7IUo3\/YpAbuayhO+xPR32HzbgBALMG3oAAABAQgKwtdAFVOdBiI="}
00454{"flow_id":32,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3002,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":974730,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBZTsACAGQCoBywEgSYsHmR3shSjf9ikmIAEWgA0AIfkWUEn4fxCOvggBu9JG6Eu2IhOWgBAB+7TJAAABAQgK14pipMLXQBA="}
01148{"flow_id":32,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3004,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":974969,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"qtsDr8lk5EKm5WPyht1gBZTsAiUGQCoBywEgSYsHmR3shSjf9ikmIAEWgA0AIfkWUEn4fxCOvggBu9JG6Eu2IhOWgBgB+zY3AAABAQgK14pipMLXQBAWAwECAAEAAfwDA3sf7LZhCKu3FcQtfQQXpjU\/yJNKxK1Wu7mS7O\/nW0esIK9NcmR4uxEXTx0wl0DqrASosxQJ8d8M7I15cNDqZSjgACAKChMBEwITA8ArwC\/ALMAwzKnMqMATwBQAnACdAC8ANQEAAZP6+gAAAAAAGgAYAAAVc2VjdXJlLnF1YW50c2VydmUuY29tABcAAP8BAAEAAAoACgAIenoAHQAXABgACwACAQAAIwAAABAADgAMAmgyCGh0dHAvMS4xAAUABQEAAAAAAA0AEgAQBAMIBAQBBQMIBQUBCAYGAQASAAAAMwArACl6egABAAAdACBi6uz3bgjuw2Flzm3cT5QZ5PbRQ8kZgg4sjV4aUfzKPgAtAAIBAQArAAsKKioDBAMDAwIDAQAbAAMCAAIqKgABAAAVAMcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"}
00835{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3004,"source":"reddit.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":4,"flow_first_seen":1605291687933,"flow_last_seen":1605291687974,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2620:116:800d:21:f916:5049:f87f:108e","src_port":48648,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"secure.quantserve.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
00468{"flow_id":33,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3007,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":975138,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAABc2hvEqAcsBIEmLB5kd7IUo3\/YpAbus6CNL5ddGO8iRoBJXgMJGAAACBAV4AQMDAwQCCArC10AVUckv+A=="}
00454{"flow_id":33,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3009,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":975186,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gA0MZACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAAXNobxrOgBu0Y7yJEjS+XYgBAB+0YvAAABAQgKUckwIcLXQBU="}
01147{"flow_id":33,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3014,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":975399,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"qtsDr8lk5EKm5WPyht1gA0MZAiUGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAAXNobxrOgBu0Y7yJEjS+XYgBgB+6HOAAABAQgKUckwIcLXQBUWAwECAAEAAfwDAyyfGNXrQuJaooVOSAZWYwrICVdKySe7AfwbUmNJLrj6IPGtMcg+xk+\/4O6dPXPeOmaj7v3Le548CiQfbZu3tkOqACAKChMBEwITA8ArwC\/ALMAwzKnMqMATwBQAnACdAC8ANQEAAZNKSgAAAAAAHQAbAAAYc2Iuc2NvcmVjYXJkcmVzZWFyY2guY29tABcAAP8BAAEAAAoACgAI+voAHQAXABgACwACAQAAIwAAABAADgAMAmgyCGh0dHAvMS4xAAUABQEAAAAAAA0AEgAQBAMIBAQBBQMIBQUBCAYGAQASAAAAMwArACn6+gABAAAdACCtpKM+O77uTAjQEIT6uCXqvuLVOHqvZMFLfC1DKm+WSgAtAAIBAQArAAsKysoDBAMDAwIDAQAbAAMCAAIaGgABAAAVAMQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"}
00820{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3014,"source":"reddit.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":4,"flow_first_seen":1605291687934,"flow_last_seen":1605291687975,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::1736:86f1","src_port":44264,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"sb.scorecardresearch.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
02342{"flow_id":30,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3016,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":976086,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"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"}
00849{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":3016,"source":"reddit.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":6,"flow_first_seen":1605291687896,"flow_last_seen":1605291687976,"flow_tot_l4_data_len":2113,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":352,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::2278:cf94","src_port":39626,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"id.rlcdn.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
02343{"flow_id":30,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3017,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":976086,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"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"}
00454{"flow_id":30,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3018,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":976141,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gD27HACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAAieM+UmsoBu3fYfNsTvspggBAB9XGJAAABAQgKU50GTsLXQBc="}
00455{"flow_id":30,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3019,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":976175,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gD27HACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAAieM+UmsoBu3fYfNsTvs\/MgBAB62wnAAABAQgKU50GTsLXQBc="}
02353{"flow_id":30,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3020,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":976294,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"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"}
01495{"flow_id":30,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3021,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":976295,"pkt_caplen":849,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":849,"pkt_l4_len":795,"pkt":"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"}
00455{"flow_id":30,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3022,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":976300,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gD27HACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAAieM+UmsoBu3fYfNsTvtU4gBAB4WbFAAABAQgKU50GTsLXQBc="}
00455{"flow_id":30,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3023,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":976308,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gD27HACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAAieM+UmsoBu3fYfNsTvtgzgBAB3GPPAAABAQgKU50GTsLXQBc="}
00541{"flow_id":30,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3037,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":979651,"pkt_caplen":150,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":150,"pkt_l4_len":96,"pkt":"qtsDr8lk5EKm5WPyht1gD27HAGAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAAieM+UmsoBu3fYfNsTvtgzgBgB9dDCAAABAQgKU50GUcLXQBcUAwMAAQEXAwMANbpWMnbWAtRWOmd6b5z5XtbllVCz99ZW8cX3m14LjwOuE+lhSEs+ElW3OOks51p7+qpzRsWc"}
00584{"flow_id":30,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3046,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":980763,"pkt_caplen":178,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":178,"pkt_l4_len":124,"pkt":"qtsDr8lk5EKm5WPyht1gD27HAHwGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAAieM+UmsoBu3fYfRsTvtgzgBgB9SW2AAABAQgKU50GUsLXQBcXAwMAV9mZ94pPejW0IJSD8bwnOmdb\/yRZOlSdaybWLLTwm8MN19W4KwuYIzzHCWJRFjjrWzbCov+L5bQak+Qk3Z+TbuEWYb4YRQd2GIcxzSxjbDtnu1hH\/8U17g=="}
00454{"flow_id":31,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3088,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":19659,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgGAAAAAAAAIA4qAcsBIEmLB5kd7IUo3\/YpAbvWTrVWRoXRRdT8gBALMNnKAAABAQgKwtdAO3CSuIk="}
00455{"flow_id":32,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3092,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":20339,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSYgARaADQAh+RZQSfh\/EI4qAcsBIEmLB5kd7IUo3\/YpAbu+CLYiE5bSRupQgBALMKljAAABAQgKwtdAPNeKYqQ="}
02093{"flow_id":31,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3105,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":24605,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"}
00867{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":3105,"source":"reddit.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":6,"flow_first_seen":1605291687931,"flow_last_seen":1605291688024,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:806::200e","src_port":54862,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.YouTube","breed":"Fun","category":"Media"},"tls": {"version":"TLSv1.3","client_requested_server_name":"www.youtube.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
00453{"flow_id":31,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3107,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":24643,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCkMmACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBgAAAAAAACAO1k4Bu9FF1Py1Vks9gBAB9d4NAAABAQgKcJK4w8LXQEE="}
02089{"flow_id":31,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3109,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":25071,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"}
02087{"flow_id":31,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3110,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":25071,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"}
00732{"flow_id":31,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3111,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":25071,"pkt_caplen":286,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":286,"pkt_l4_len":232,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAOgGPSoAFFBABwgGAAAAAAAAIA4qAcsBIEmLB5kd7IUo3\/YpAbvWTrVWVK3RRdT8gBgLMHKWAAABAQgKwtdAQXCSuIk7nST5MB4W7LqQDI+ruRgSqNFixg8+tuf7fxTSvdZP4F373dDQYdr\/dUBy5M5Y0r0J8\/NwDNIhNkSh1xz99T3T0hzeqb64Mi2tF5f4IJ2UrY624nPzFZdWoQHg1PneTNulsX1j8klkyC\/XNhtZp7ADwBkTqNyP\/TSAIoqgLNnjg0M\/vextssIJRGXu1Z+IjHqLqiURPYAzXVbgI2UP3l9v2PWV6dKDhD3n3bwUYUisMilKaOv0U8MsCpwnsBZd17KZz00NU\/J4qA=="}
00455{"flow_id":33,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3112,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":25071,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAABc2hvEqAcsBIEmLB5kd7IUo3\/YpAbus6CNL5dhGO8qWgBALMDrJAAABAQgKwtdAQVHJMCE="}
02346{"flow_id":33,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3113,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":25072,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"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"}
00861{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":3113,"source":"reddit.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":6,"flow_first_seen":1605291687934,"flow_last_seen":1605291688025,"flow_tot_l4_data_len":2113,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":352,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::1736:86f1","src_port":44264,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"sb.scorecardresearch.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"15af977ce25de452b96affa2addb1036","unsafe_cipher":0,"cipher":"TLS_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
02331{"flow_id":33,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3114,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":25072,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABYwGPQBk\/5sAAAAAAAAAABc2hvEqAcsBIEmLB5kd7IUo3\/YpAbus6CNL60RGO8qWgBgLMDGBAAABAQgKwtdAQ1HJMCF4jQqeULuXRCCpURAPXmADQAsNyQ12YUIiJuSPtoiphd8sYN9fnDHOuV1EVzLqHqnQU7SKD2FoHIauLtFIOTBEpfYGArNsyafM3447h9GKPd+Y4VCFzSnxAJmVQtLUb5VD465hmWw5N\/2mE6gzhbt7K3xwvsKgNdP3UsdUSXkFReZupTkXmM4uxKkQfe2KnsKXew+mJV2U\/IrGSswVXDSjxJjNnII4Lex86a8DyrDJQKwsWSt6frGztzQVzkjICO8BCK5KSHhiAjwQnjMJbq\/L5kdJ9teFHJHu0gH75+kLN2cazeIOYKO4ZJZyO+\/V3yOVFWgQQ9k7Cgb+oj0ifvx\/QWb7Arv4hndjJTFd6YR59VaFaHRjfjg\/eVh0eO1Ck0fnmoNvA90Zk5+2VE8VESB6KHGgK7QcrxL7K9NUwXAaFf5UaY0gzHzntYXIQdA4+9JrQezmmRhDp4JQTIDVdeol4ilvG7HIEJuphPXBz1dnXPExBENGJFDfpp9AJvBScogMFGxgZYNlNMtdNJ9CQhqWgFYsUwIhY0EC5ds2B5UkwGuEQsu\/x+\/FwD2jAboDPjgbTzRwCjj6C26BlAqcpRS9QTKSPNCalZZYK247ZTxSh0EnkBjQbIHbzFZcohhUBSdL3YrIgG2HyIxgodV7WtjrPAD4MfjoSPJFyDIrrtsAGG8fL0atJPJUQ8V0oc5poWFIplIwKzPTQiVk83piVk2tJVksYHnzNqvH0k+d7wb38p9PxmTUfrtqy\/K3skTa2bhJ3ElTwUpvkuvQpjx693Uy+jE4e3jRGIjfWjeF2rpqpuTfbUw5fho7TDImGvuG5n+KQppXhDZoIXK+F7BmrtgttGvaJWZFM2a1+UV92oKCfkpNSeLmWhKrhq3WxvXc1sI2JMe5rxaGcJTkdMU5efdHqeOFZiOVFMoFg59I3E3sFOiKoinvMa4KZvXevnOR7hrRLT50GQTYKqwuUQOhpfuKB7DYVHxASgGfGOwALsn5G9n4SavfdrrnZrNTT0oTAY08heWmmFamKoiSMboJBsg\/Y6ylZKCXEMtvfVLPayqLDQhHvZN3EcShZjFUrj2VeGUDVKNVojBdWpSZ8cX7G6gYKhYAsQVhj4gFv3MAS1gUYCnTRUcQXiKNKnNdhGLI08CmM4cZzeI5Smw9muUnUz0VrcjdqZ7MJeMPFwMmfOovWyuG5WTjqe6yywr2My63d3OV2zhHPy6o8uLYH2e07Vqc0AZtnGWVgXzCDFE9Gzp37fLuWHZxiL8CUR79oy0XirpPHdyNtuNf9WBA\/nXr70c\/pwNySPO1l9ZokQd6gRJaKK6bHhVuvGATljh09U6p7oMnsfbEN2I8l22PmR\/eirBh37K60sE8IX\/R5yNObDv+FXeJarB4AHSgGY1oOUg5t0sFGDYdd1+Jgh1w1A9LRPkAURiZ4XFskRkcAR8uSggNfEO4cN1NGR94IcQ2j4AV3hy8aBYZSf\/utAOXXs9zEPXVsWcvDFixLn0cXWzejQJbnIpClpba180q3nmGQDgTuuwYRpZ3ScsH+TA7CqyaWnCJlp+UGfg+bRaHrG3WravXAgMQu63nGOWoETyUUruvuslFinpeSeG+sw2m2dn0slfc8LalqM8sABdrsFwnYXdv8e07aYk3b7SQP0H4z+NoIfSDecHtK9+coGEx8oe583va9hClWd\/PDcpVMTGAKc5sxLockZxThSUiA8PJQ3WsqukuycepSuw2Mw0vJVrIQyb7Pk5\/wtVlV\/m3iUYAhcGxJVV8it+msj06Ny2Z3eZ4GEM2xSDiR24dwlJhk4QvIRwZLU8xnrbZn6gI+bjcZjP7NVrlzt3DPw75j752EQ=="}
00699{"flow_id":33,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3115,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":25072,"pkt_caplen":266,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":266,"pkt_l4_len":212,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAANQGPQBk\/5sAAAAAAAAAABc2hvEqAcsBIEmLB5kd7IUo3\/YpAbus6CNL8LBGO8qWgBgLMBR4AAABAQgKwtdAQ1HJMCHo3L5OFwMDAGFnpa9efBK27FTOo2bcWqyKvjzPykx9aWoPWSfIj5rQLBHGICzQSuv6HR54YvalrJ5FE0uJKXw7SSb+IQPVJVWqa8tDMIsKBYjWTRHtSKBCzGhuH4vGmGfJEX0feYTzpPPdFwMDAEWyfdrJIh8ybuZI2kcrCpSYZYxLIxjhtCWTtQ9cYKVgr5jLNmGlKHgxaWJWEFx\/Qfp2s966SbOGX61NEnen+TUQptYsRI4="}
00455{"flow_id":31,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3117,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":25078,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCkMmACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBgAAAAAAACAO1k4Bu9FF1Py1Vk\/1gBAB9dlUAAABAQgKcJK4xMLXQEE="}
00454{"flow_id":31,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3118,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":25086,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCkMmACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBgAAAAAAACAO1k4Bu9FF1Py1VlStgBAB8tSfAAABAQgKcJK4xMLXQEE="}
00454{"flow_id":31,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3119,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":25091,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCkMmACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBgAAAAAAACAO1k4Bu9FF1Py1VlV1gBAB8dPYAAABAQgKcJK4xMLXQEE="}
00453{"flow_id":33,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3120,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":25118,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gA0MZACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAAXNobxrOgBu0Y7ypYjS+tEgBAB8T5oAAABAQgKUckwU8LXQEM="}
00455{"flow_id":33,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3121,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":25122,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gA0MZACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAAXNobxrOgBu0Y7ypYjS\/CwgBAB5zkGAAABAQgKUckwU8LXQEM="}
00455{"flow_id":33,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3122,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":25124,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gA0MZACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAAXNobxrOgBu0Y7ypYjS\/FkgBAB5jhTAAABAQgKUckwU8LXQEM="}
00540{"flow_id":31,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3124,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":28675,"pkt_caplen":150,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":150,"pkt_l4_len":96,"pkt":"qtsDr8lk5EKm5WPyht1gCkMmAGAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBgAAAAAAACAO1k4Bu9FF1Py1VlV1gBgB9bbYAAABAQgKcJK4x8LXQEEUAwMAAQEXAwMANfpQu8xk8zyNblZs3IHMorVGv3IB26ltGRnX+fscAZlJD0iWK+RIGlbPoduVx3BmexD4lZFk"}
00568{"flow_id":33,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3125,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":29535,"pkt_caplen":166,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":166,"pkt_l4_len":112,"pkt":"qtsDr8lk5EKm5WPyht1gA0MZAHAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAAXNobxrOgBu0Y7ypYjS\/FkgBgB9VNaAAABAQgKUckwV8LXQEMUAwMAAQEXAwMARSsZCHMBkVuqax2fP0MlAzWGM\/INMirxjZgerlnFD\/HXu9993iEbSIQ2KZjMlR7KnSQKwvF5isN3VMVrc7ZoDIMMC79Wxw=="}
00583{"flow_id":31,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3126,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":30718,"pkt_caplen":178,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":178,"pkt_l4_len":124,"pkt":"qtsDr8lk5EKm5WPyht1gCkMmAHwGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBgAAAAAAACAO1k4Bu9FF1Ty1VlV1gBgB9TghAAABAQgKcJK4ycLXQEEXAwMAV6IwUuKlNwcFIN5JinvDvs5wyYI8Vf1K2pqctiTv7HAw\/ZgkIfR30nMw1yo5oIiRZ5cSlU3\/5hcXggQjPTFnIT4k0QV+w1JWfdVv4ECphPEuFwmUmGkSIg=="}
01162{"flow_id":33,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3127,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":31009,"pkt_caplen":608,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":608,"pkt_l4_len":554,"pkt":"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"}
02320{"flow_id":32,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3144,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":36417,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"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"}
00891{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":3144,"source":"reddit.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":6,"flow_first_seen":1605291687933,"flow_last_seen":1605291688036,"flow_tot_l4_data_len":2113,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":352,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2620:116:800d:21:f916:5049:f87f:108e","src_port":48648,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"secure.quantserve.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"b898351eb5e266aefd3723d466935494","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
02329{"flow_id":32,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3146,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":36418,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"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"}
01253{"flow_id":32,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3147,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":36418,"pkt_caplen":674,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":674,"pkt_l4_len":620,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAmwGPSYgARaADQAh+RZQSfh\/EI4qAcsBIEmLB5kd7IUo3\/YpAbu+CLYiHm7SRupQgBgLMFgmAAABAQgKwtdAUNeKYqSD1lEvjWtEFp6sY\/XSbmyEmYuqgXGEW+00TrC3eZIpzC2AavCOIOF5pP4DRxPq9YbKWXF99ASWa9NZWD3+0zElXBg4hKPmn4L9jFuYMU7NeJ4a\/YXLSaryJ4uZcvw+qtVBC9rVNqG\/HG5HSX9e2Uh8A9n9i0mgmCZCQOvWkhGkZApXVMT1HdYCXmus7sSAmhJy+laT1\/+\/MIUGML8Lf07\/VwWdJO2Fwyv7pnWorC0W7315J7Lrwp0LB+qqhdMBoyAoQVlDKNKB46r27Hs7d7ZAYoAFQUUB7xcGPt7AM5tn02EucofkafwSAFdAHnD1Hsm0FgMDAU0MAAFJAwAXQQRWwxTgaeRotOzUSO2eAfqy5HUGrmNY2RYMnvpcJJ++cK1s2I1my006FcHTO+ujePmXMGbvGXq6ehQgSUjLLS+MBgEBACYa5aPMv00vc4Ec5NbmYkHFx+1avPxnitx2KJFAq4OskMuo\/1w95dX0iciNqcs7JgWVWWNXkLGLRZy3tegjpzaoEWzbma2x8ytGogewM4zGnOSo8w3qPlrIbKQtf7xk\/ZXcmO4NoAmctaNI9c78f15gnnGBCZFzrRTiAPTU\/Zug03cWtjbWDsbbWD4CVFnCuLE0mbgt5HSgZW8ZoCD2WzFzMeb2Pz3Q+k4Ob6hPmN71f\/rkDio930mdP3jSXuOcKZEy0Sy90G9vPQNAGG30fzx25ncB6YGjlz1L1R2e\/74qjJSjQPsKg0BYNNjdW+qZjxaUlE3eccbeSDkDEHnIzTUWAwMABA4AAAA="}
01268{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":3147,"source":"reddit.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":8,"flow_first_seen":1605291687933,"flow_last_seen":1605291688036,"flow_tot_l4_data_len":4153,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":519,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2620:116:800d:21:f916:5049:f87f:108e","src_port":48648,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"secure.quantserve.com","server_names":"*.quantserve.com,*.quantcount.com,*.apextag.com,quantserve.com,quantcount.com,apextag.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"b898351eb5e266aefd3723d466935494","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert SHA2 High Assurance Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Quantcast Corporation, CN=*.quantserve.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"3A:30:B1:4A:CE:62:AF:55:B1:89:FF:0C:CB:69:E3:80:CB:B0:91:90"}}
00453{"flow_id":32,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3151,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":36432,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBZTsACAGQCoBywEgSYsHmR3shSjf9ikmIAEWgA0AIfkWUEn4fxCOvggBu9JG6lC2IhkCgBAB9azgAAABAQgK14pi4sLXQFA="}
00454{"flow_id":32,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3153,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":36448,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBZTsACAGQCoBywEgSYsHmR3shSjf9ikmIAEWgA0AIfkWUEn4fxCOvggBu9JG6lC2Ih5ugBAB8Kd5AAABAQgK14pi4sLXQFA="}
00454{"flow_id":32,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3154,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":36451,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBZTsACAGQCoBywEgSYsHmR3shSjf9ikmIAEWgA0AIfkWUEn4fxCOvggBu9JG6lC2IiC6gBAB7KUxAAABAQgK14pi4sLXQFA="}
00627{"flow_id":32,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3162,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":40331,"pkt_caplen":212,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":212,"pkt_l4_len":158,"pkt":"qtsDr8lk5EKm5WPyht1gBZTsAJ4GQCoBywEgSYsHmR3shSjf9ikmIAEWgA0AIfkWUEn4fxCOvggBu9JG6lC2IiC6gBgB9RmeAAABAQgK14pi5sLXQFAWAwMARhAAAEJBBDU74BzP7Q6RSVUWj9cO2lqHkgsYnntO0GBgQsjeKNHhq\/FvR0aI5ELRFHDlX\/LMaAcnsUWjczn1FadPzDGyymUUAwMAAQEWAwMAKAAAAAAAAAAAaH1na1yJCdmPc5LOW+GXQI2W4akRkKbxfXNj7hRma5U="}
00589{"flow_id":32,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3164,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":40696,"pkt_caplen":185,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":185,"pkt_l4_len":131,"pkt":"qtsDr8lk5EKm5WPyht1gBZTsAIMGQCoBywEgSYsHmR3shSjf9ikmIAEWgA0AIfkWUEn4fxCOvggBu9JG6s62IiC6gBgB9ZCCAAABAQgK14pi5sLXQFAXAwMAXgAAAAAAAAABhTe2kqaTLlAAr1bUYq0xjWqOf93ObH7BnPvCaaDcXr7U21czVub80rrckE2NlQCoHD7g9B+xs8G9tNwpWj4ElxeKVkwXL8dqAWqp8Dluss2bvuLPnXQ="}
00807{"flow_id":32,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3165,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":40821,"pkt_caplen":344,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":344,"pkt_l4_len":290,"pkt":"qtsDr8lk5EKm5WPyht1gBZTsASIGQCoBywEgSYsHmR3shSjf9ikmIAEWgA0AIfkWUEn4fxCOvggBu9JG6zG2IiC6gBgB9Sw8AAABAQgK14pi5sLXQFAXAwMA\/QAAAAAAAAAC9pMun1ZqAdTi1F1kreffo29Ey700P\/1LxMn1WNIVaNH360u7qDLCs\/IdEMxFqj6MX5gwsKWlJpCdeeb1mXwtDV43E67V7Hvk0e7+IeYzBlROgwWrNJnpq70HiOHdVMaUa+yyKyfdo6W2KeMEedpBecer6+JlP2GKN58yOO0v0\/1nrhSb\/FJkQdAEqYJc1NSpkT8E9wRtf+gNDwG00+IGUrl\/FfIaitfxPWUn+flW35wuLjHv5lngue8VUBVFqhFj61eBdi3zXrykyFq1Iqyo6fUrWlPwkDT0pXBFhMCB91j0RhGkwQR5JLSluMEyKzXvzAiPQxk="}
02329{"flow_id":29,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3171,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":46248,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"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"}
00892{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":3171,"source":"reddit.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":6,"flow_first_seen":1605291687800,"flow_last_seen":1605291688046,"flow_tot_l4_data_len":2113,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":352,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::68f4:2ac8","src_port":56782,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Twitter","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"syndication.twitter.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"8d2a028aa94425f76ced7826b1f39039","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
00454{"flow_id":29,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3172,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":46258,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBEqMACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABo9CrI3c4Bu\/+MOcmdXWOxgBAB9aMlAAABAQgKTX6OS8LXQFY="}
02332{"flow_id":29,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3173,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":46580,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"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"}
01357{"flow_id":29,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3174,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":46580,"pkt_caplen":749,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":749,"pkt_l4_len":695,"pkt":"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"}
01337{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":3174,"source":"reddit.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":9,"flow_first_seen":1605291687800,"flow_last_seen":1605291688046,"flow_tot_l4_data_len":4260,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":473,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::68f4:2ac8","src_port":56782,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Twitter","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"syndication.twitter.com","server_names":"syndication.twitter.com,syndication.twimg.com,syndication-o.twitter.com,syndication-o.twimg.com,cdn.syndication.twitter.com,cdn.syndication.twimg.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"8d2a028aa94425f76ced7826b1f39039","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert SHA2 High Assurance Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Twitter, Inc., OU=lon3, CN=syndication.twitter.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"09:D3:FE:9A:3E:39:A7:E2:90:5B:C9:1F:3B:7D:CE:7C:7E:08:1C:6F"}}
00455{"flow_id":29,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3177,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":46584,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBEqMACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABo9CrI3c4Bu\/+MOcmdXWkdgBAB9Z25AAABAQgKTX6OS8LXQFY="}
00455{"flow_id":29,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3178,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":46591,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBEqMACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABo9CrI3c4Bu\/+MOcmdXWu0gBAB85skAAABAQgKTX6OS8LXQFY="}
00628{"flow_id":29,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3189,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":48406,"pkt_caplen":212,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":212,"pkt_l4_len":158,"pkt":"qtsDr8lk5EKm5WPyht1gBEqMAJ4GQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABo9CrI3c4Bu\/+MOcmdXWu0gBgB9aVbAAABAQgKTX6OTcLXQFYWAwMARhAAAEJBBLxNGdavmW2r6LuhyaTtmynR54HIf1IbZbNGrqxJliXAuxyzExWIiumFL6ux6cBe6ohWZ6ComRXkrIQtAX1uevUUAwMAAQEWAwMAKAAAAAAAAAAAk6ZleW3+AoD\/yTrCsbJF5nmHROOCbTsZe7zF\/mKXSAM="}
00590{"flow_id":29,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3190,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":48594,"pkt_caplen":185,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":185,"pkt_l4_len":131,"pkt":"qtsDr8lk5EKm5WPyht1gBEqMAIMGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABo9CrI3c4Bu\/+MOkedXWu0gBgB9flNAAABAQgKTX6OTcLXQFYXAwMAXgAAAAAAAAABXeBZ8sXYkwQw6UX3auw42bdmluZV+emTj4s1arJ2DJJ9kcKNokCO5vNIL52Skml+PpYjv50KX0eeCQHuJjGWj6Y2YyM8sLhMbLO49mjZVvaG3Sj5ybM="}
00852{"flow_id":29,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3191,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":48624,"pkt_caplen":376,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":376,"pkt_l4_len":322,"pkt":"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"}
00853{"flow_id":29,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3233,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":118878,"pkt_caplen":376,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":376,"pkt_l4_len":322,"pkt":"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"}
01163{"flow_id":33,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3235,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":130841,"pkt_caplen":608,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":608,"pkt_l4_len":554,"pkt":"qtsDr8lk5EKm5WPyht1gA0MZAioGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAAXNobxrOgBu0Y7yuYjS\/FkgBgB9VqQAAABAQgKUckwvMLXQEMXAwMCBdw9YPyptpUaPrvKXAia3WKdhxG3zwg0P6dw+SNWe27ET0dYGzK\/Zsa5BrcHi55wY5dT0gjkBtUm7iIAV1V+HpoK2kohrkXArOPR4DNPL\/5g72AXP4CIKcbUP9WcowBKdCydsWHWbIc\/O6Iix6COL1rk43PiNLDQbKcxCcoxsphBa1Vlyy7kdSITfFHXywmm4c3Ri82Lgp7hjo\/0vmKKg9baKer6SPkyK19MDfQ0bBpCLC0MJX2v0SrfgAjFHbVZiEaqW2HfPGefLKZIsnXLTIBmUUXF3cb5Li18lPTdEklYN2n0B0ND8LRXY3CCFtHC4ZGivJqoddRd3AeBYFqMiELgjnMrIxMZW6bRgiTBxe0nlEiNGb8c\/NzxA1br2krw+J8+V8mrggC9JD3lVhVcD14Nq8UkVH712hTB39AyhBm2yip+lmGnN4snUsquG2kOlzNHVS6rP7sMP9LnPkMTRFXNhSSFef+\/eDypsaHUpt3seXDOtxr4DaoZO92xLslr7TiW1hfmJMeE\/RpQYph2P2m6B+66jlvhwitJDbRdSRjf0OBOUYfjaUkQs7huNsu3QRqowkwXIXSfSTdTVBvTITlvdJsiIEN766V0CoTBHwyvaad37U02GfI80thwzympZpkNraCBW5GAVVdg4PtEkHQ9BdhimDr\/2fzBLLHcNXRNPuinI84="}
00808{"flow_id":32,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3237,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":134870,"pkt_caplen":344,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":344,"pkt_l4_len":290,"pkt":"qtsDr8lk5EKm5WPyht1gBZTsASIGQCoBywEgSYsHmR3shSjf9ikmIAEWgA0AIfkWUEn4fxCOvggBu9JG6zG2IiC6gBgB9SveAAABAQgK14pjRMLXQFAXAwMA\/QAAAAAAAAAC9pMun1ZqAdTi1F1kreffo29Ey700P\/1LxMn1WNIVaNH360u7qDLCs\/IdEMxFqj6MX5gwsKWlJpCdeeb1mXwtDV43E67V7Hvk0e7+IeYzBlROgwWrNJnpq70HiOHdVMaUa+yyKyfdo6W2KeMEedpBecer6+JlP2GKN58yOO0v0\/1nrhSb\/FJkQdAEqYJc1NSpkT8E9wRtf+gNDwG00+IGUrl\/FfIaitfxPWUn+flW35wuLjHv5lngue8VUBVFqhFj61eBdi3zXrykyFq1Iqyo6fUrWlPwkDT0pXBFhMCB91j0RhGkwQR5JLSluMEyKzXvzAiPQxk="}
00457{"flow_id":33,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3258,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":195660,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAABc2hvEqAcsBIEmLB5kd7IUo3\/YpAbus6CNL8WRGO8rmgBALOi35AAABAQgKwtdA9VHJMFc="}
00507{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3346,"source":"reddit.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":1,"flow_first_seen":1605291688324,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::d83a:d1e6","src_port":51100,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00466{"flow_id":34,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3346,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":324076,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gDP1bACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADYOtHmx5wBu0pXpjQAAAAAoAL9INe7AAACBAWgBAIICn8mSwwAAAAAAQMDBw=="}
00507{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3358,"source":"reddit.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":1,"flow_first_seen":1605291688336,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::d83a:d1e6","src_port":51102,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00466{"flow_id":35,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3358,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":336354,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gC0OFACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADYOtHmx54BuzYIpzgAAAAAoAL9IOr4AAACBAWgBAIICn8mSxgAAAAAAQMDBw=="}
00525{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3372,"source":"reddit.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":1,"flow_first_seen":1605291688344,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2600:9000:219c:ee00:6:44e3:f8c0:93a1","src_port":56186,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00466{"flow_id":36,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3372,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":344280,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gATUNACgGQCoBywEgSYsHmR3shSjf9ikmAJAAIZzuAAAGROP4wJOh23oBu4m0PmAAAAAAoAL9ICpwAAACBAWgBAIICgi3lpgAAAAAAQMDBw=="}
00468{"flow_id":34,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3437,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":365155,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAANg60eYqAcsBIEmLB5kd7IUo3\/YpAbvHnC63k25KV6Y1oBJXgLbhAAACBAV4AQMDAwQCCArC10GYfyZLDA=="}
00454{"flow_id":34,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3438,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":365176,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDP1bACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADYOtHmx5wBu0pXpjUut5NvgBAB+zrKAAABAQgKfyZLNcLXQZg="}
01148{"flow_id":34,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3439,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":365341,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"}
00824{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3439,"source":"reddit.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":4,"flow_first_seen":1605291688324,"flow_last_seen":1605291688365,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::d83a:d1e6","src_port":51100,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"ad.doubleclick.net","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
00468{"flow_id":35,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3440,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":370931,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAANg60eYqAcsBIEmLB5kd7IUo3\/YpAbvHnlMkjxA2CKc5oBJXgKoEAAACBAV4AQMDAwQCCArC10GjfyZLGA=="}
00454{"flow_id":35,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3444,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":370943,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gC0OFACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADYOtHmx54BuzYIpzlTJI8RgBAB+y30AAABAQgKfyZLOsLXQaM="}
01148{"flow_id":35,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3446,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":371089,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"qtsDr8lk5EKm5WPyht1gC0OFAiUGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADYOtHmx54BuzYIpzlTJI8RgBgB+970AAABAQgKfyZLO8LXQaMWAwECAAEAAfwDAwgp1anJVpvxZgRnK\/Ii+gtEvGbJCYcqFRsrqueQf6vRIJCDNh4n+qlo6kd0ODvy\/AwDjBO0nZ+gYy2KZgyiYgg0ACDa2hMBEwITA8ArwC\/ALMAwzKnMqMATwBQAnACdAC8ANQEAAZOamgAAAAAAFwAVAAASYWQuZG91YmxlY2xpY2submV0ABcAAP8BAAEAAAoACgAICgoAHQAXABgACwACAQAAIwAAABAADgAMAmgyCGh0dHAvMS4xAAUABQEAAAAAAA0AEgAQBAMIBAQBBQMIBQUBCAYGAQASAAAAMwArACkKCgABAAAdACCaFYCIYTRmnTxfH8RhAM0mES96Hrj9vGr3nYL6Ox9VMwAtAAIBAQArAAsKGhoDBAMDAwIDAQAbAAMCAAKqqgABAAAVAMoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"}
00824{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3446,"source":"reddit.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":4,"flow_first_seen":1605291688336,"flow_last_seen":1605291688371,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::d83a:d1e6","src_port":51102,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"ad.doubleclick.net","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
00468{"flow_id":36,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3449,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":371819,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSYAkAAhnO4AAAZE4\/jAk6EqAcsBIEmLB5kd7IUo3\/YpAbvbeuzTe9OJtD5hoBJXgGMHAAACBAV4AQMDAwQCCArC10GlCLeWmA=="}
00454{"flow_id":36,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3451,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":371834,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gATUNACAGQCoBywEgSYsHmR3shSjf9ikmAJAAIZzuAAAGROP4wJOh23oBu4m0PmHs03vUgBAB++b9AAABAQgKCLeWs8LXQaU="}
01153{"flow_id":36,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3453,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":372055,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"qtsDr8lk5EKm5WPyht1gATUNAiUGQCoBywEgSYsHmR3shSjf9ikmAJAAIZzuAAAGROP4wJOh23oBu4m0PmHs03vUgBgB+yzJAAABAQgKCLeWs8LXQaUWAwECAAEAAfwDA9hatQx\/QktbULCFc2FQNgXPGrp+qPvBQrE5NDlBZlE\/IMd+e8Lduh2\/OW58Rm5lIQBoGyh8j\/3MT9YMf0bL3Me3ACCqqhMBEwITA8ArwC\/ALMAwzKnMqMATwBQAnACdAC8ANQEAAZPq6gAAAAAAGQAXAAAUcnVsZXMucXVhbnRjb3VudC5jb20AFwAA\/wEAAQAACgAKAAhKSgAdABcAGAALAAIBAAAjAAAAEAAOAAwCaDIIaHR0cC8xLjEABQAFAQAAAAAADQASABAEAwgEBAEFAwgFBQEIBgYBABIAAAAzACsAKUpKAAEAAB0AIOhk20ZK7Hqhb4\/e3Kx4aK6U4Kcjb5InvqFomt\/cTww3AC0AAgEBACsACwr6+gMEAwMDAgMBABsAAwIAAtraAAEAABUAyAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"}
00834{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3453,"source":"reddit.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":4,"flow_first_seen":1605291688344,"flow_last_seen":1605291688372,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2600:9000:219c:ee00:6:44e3:f8c0:93a1","src_port":56186,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"rules.quantcount.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
00456{"flow_id":34,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3505,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":397011,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAANg60eYqAcsBIEmLB5kd7IUo3\/YpAbvHnC63k29KV6g6gBALMC9uAAABAQgKwtdBun8mSzU="}
00456{"flow_id":35,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3516,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":408044,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAANg60eYqAcsBIEmLB5kd7IUo3\/YpAbvHnlMkjxE2CKk+gBALMCKeAAABAQgKwtdBvn8mSzs="}
02346{"flow_id":34,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3517,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":408044,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"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"}
00865{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":3517,"source":"reddit.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":6,"flow_first_seen":1605291688324,"flow_last_seen":1605291688408,"flow_tot_l4_data_len":2113,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":352,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::d83a:d1e6","src_port":51100,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"ad.doubleclick.net","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
00454{"flow_id":34,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3518,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":408071,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDP1bACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADYOtHmx5wBu0pXqDout5jbgBAB8TMPAAABAQgKfyZLYMLXQcE="}
02342{"flow_id":34,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3519,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":408513,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"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"}
00596{"flow_id":34,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3520,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":408514,"pkt_caplen":186,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":186,"pkt_l4_len":132,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAIQGPQBk\/5sAAAAAAAAAANg60eYqAcsBIEmLB5kd7IUo3\/YpAbvHnC63nkdKV6g6gBgLMFT\/AAABAQgKwtdBwX8mSzWZAQtKOmC1Cmerdjiwl25zxvQlLKTxyRIsfRSd59vSCP1FHBqpjeScKIz0NcYEkjRQ7qA8y6PGIoYEoZ4T7RwBEOdmiEu9wwZaGN0bxBSDJZ\/N\/2bdOdfViyR0g\/bbUOqTfL5\/"}
02342{"flow_id":35,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3521,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":408514,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"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"}
00865{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":3521,"source":"reddit.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":6,"flow_first_seen":1605291688336,"flow_last_seen":1605291688408,"flow_tot_l4_data_len":2113,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":352,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::d83a:d1e6","src_port":51102,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"ad.doubleclick.net","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
02357{"flow_id":35,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3522,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":408514,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"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"}
00600{"flow_id":35,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3523,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":408515,"pkt_caplen":187,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":187,"pkt_l4_len":133,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAIUGPQBk\/5sAAAAAAAAAANg60eYqAcsBIEmLB5kd7IUo3\/YpAbvHnlMkmek2CKk+gBgLMMEcAAABAQgKwtdBxn8mSzsMG9Zlx4pyIl38xUkHT\/o5UVMEf43EGtYcv4lIY8Fi\/LqFSKJSyE+GNZxkT6Tc6bS7uFIbM4czCsUnkH8iWm\/Xyol32BKfQrmSx0DiX\/IhEgWjA+1bVw1qkCgBI6O9YkwF8K\/R1A=="}
00456{"flow_id":36,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3524,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":408515,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSYAkAAhnO4AAAZE4\/jAk6EqAcsBIEmLB5kd7IUo3\/YpAbvbeuzTe9SJtEBmgBALMNufAAABAQgKwtdByQi3lrM="}
00455{"flow_id":34,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3525,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":408541,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDP1bACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADYOtHmx5wBu0pXqDout55HgBAB9S2fAAABAQgKfyZLYMLXQcE="}
00455{"flow_id":34,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3526,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":408566,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDP1bACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADYOtHmx5wBu0pXqDout56rgBAB9S07AAABAQgKfyZLYMLXQcE="}
00454{"flow_id":35,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3527,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":408572,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gC0OFACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADYOtHmx54BuzYIqT5TJJR9gBAB9SZAAAABAQgKfyZLYMLXQcY="}
00455{"flow_id":35,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3528,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":408581,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gC0OFACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADYOtHmx54BuzYIqT5TJJnpgBAB8CDZAAABAQgKfyZLYMLXQcY="}
00455{"flow_id":35,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3529,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":408584,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gC0OFACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADYOtHmx54BuzYIqT5TJJpOgBAB8CB0AAABAQgKfyZLYMLXQcY="}
00544{"flow_id":34,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3537,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":411378,"pkt_caplen":150,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":150,"pkt_l4_len":96,"pkt":"qtsDr8lk5EKm5WPyht1gDP1bAGAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADYOtHmx5wBu0pXqDout56rgBgB9UYlAAABAQgKfyZLY8LXQcEUAwMAAQEXAwMANc0QwgdYcEjWX\/4wHLuVBW6Cm1u7ajv39dhbN3eeeT8qB9my\/v2hL1Ym\/5KqxPzMl2FBNbNK"}
02095{"flow_id":36,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3538,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":411963,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"}
00875{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":3538,"source":"reddit.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":6,"flow_first_seen":1605291688344,"flow_last_seen":1605291688411,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2600:9000:219c:ee00:6:44e3:f8c0:93a1","src_port":56186,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"rules.quantcount.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
02106{"flow_id":36,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3539,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":411964,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"}
00455{"flow_id":36,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3540,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":411986,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gATUNACAGQCoBywEgSYsHmR3shSjf9ikmAJAAIZzuAAAGROP4wJOh23oBu4m0QGbs04CMgBAB9d\/2AAABAQgKCLeW28LXQc0="}
00454{"flow_id":36,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3541,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":412008,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gATUNACAGQCoBywEgSYsHmR3shSjf9ikmAJAAIZzuAAAGROP4wJOh23oBu4m0QGbs04VEgBAB8ttBAAABAQgKCLeW28LXQc0="}
02094{"flow_id":36,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3542,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":412090,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABNgGPSYAkAAhnO4AAAZE4\/jAk6EqAcsBIEmLB5kd7IUo3\/YpAbvbeuzThUSJtEBmgBgLMD+7AAABAQgKwtdBzQi3lrO4puay0IsembxbeE55a03jj\/z61zIyS+1vNwZjhVwbM95Ahst95EZ9TznScqrITOEu6VSw5vrYVdx31ucpmiSp\/YvnFOka981IjWVqXLs+nSJ4MD94Xhvdx1CA9a2qErf\/6n26Tf5jmkETx4sgOXVAtraP1Jv0fLNe9sPlNUvhwNajVU3TSgKuvKF6vRaxPoNuepu6+CMO2ytn8oXg8kSA5DPYMiXOID0UiAXs9uXdfLbvMtd4ZJMnipV4MTKY4W5WWX6zJ4P5vO1dolRVwW3BFuAN\/FIeOEH9PMd\/fCuch4+b\/sYccGq4SARvKtIiRjJNh\/2S8P5vp1y9B15Ket5Ov34S8oIWWnh3t6wF6P2XbdAWlT9IY6Nnsl+oZGMz+wCk9g9aCqiYqTWl66RSt1Y9chUeqjDZo22Jcf2zr31c7pcvfe13u38MnnSQ18qxnqsVF5s6Y4ZulYqPozwyXFhmOVkZNufjtjVciXgv3SOtoGuTagxRvuCeVHl\/pEL6VuOxrlIdiP0zreDfaFkZ6zj0oFWhXyae1qRBFcVgQFm4pazB2UozZJA+9TzmjxgJ73hBiyjI2J0fW6i6qd6NZz+Tb1MmiPlXXmriR9dsNABTXy6F9ffwTuYRSA19Z1Wg6AFJGxOIricEd+xVYHbDhMZD4AYWjPBrSTUTIXuja6y0FHxEkR8aYExoIpaLnhZlUomZl5nI5L+BV2mmIHsYs+Jdwf\/FU9oFWBFzHgTAJNQQC3CgH181uEQDVni86w87GiCct4a6StL3fS4hC8iMWwZhNRvkWNVoxJRAyWbu6x47cFNBqiiv0\/HxCieJTuHkMurg+E\/Pc7alRC9IUcz9qtwB1gpNz6Zk2TiGqSfF7qcL7QV9gVenbGmU2tx8PTcu4eV\/09UroFBm2xF2hAIKqMADdYz1riH3bacWpgXmK5EZxZ2Rp9eTFxUDxCx0mI49syX9Ivji+tRxYSfcC4UNEYe9OecAFYOcT5v4U1Nne33iNl0KGtLe\/kOC6SDlWB8prxw0jQxP5gdH\/ojcb\/L\/K8RQFqr28BUxJAd9d3ny8lNh+adYy58MZhpV5vzDPtPcKvqRcD2XKFmRXXuldhSYycFzUrAe6R67KvTJsm10m3FviKCyzFoIlXyrvzFgDrR5d6+l7RWGLBg3guxPYHQTvhiKMq1DG9lutYbH82pgAsqchFGh+lpGcCex145AUS5+JhpNKfjv7rwwwPNZd8Pce9hQkoeJ0liOQaQs81SSKL3Y+I\/6RtbxoH8X1eIBbCiV8nJQnceW+fsZmDzvrQx5jxpyJdJTetJW2dJMBzRfi65bIlq6nqC0XJIFFgBo0bdt5DigXoNZgkcUv9obf\/B3i7ICbVvKA0FkLmkR3Vl9l2r5ODg5jDL1dgIE41f6SGKgYh63A6i2aweISdtH+8hot72KO6rphDT8JeYrZTZ0ts7PSIV2cYjQXQQkTR\/Ol6XUWdoqER9dlLBrbHMFhIHYZBnPE7njTt8WCLMq4WtMpdWSW5rYSpwaKKj407m3hzDECpwdmSIXyeUYrDLlfBGADTClGt6sqEv0RXp3cbUkZbwp86cOZ5G8VanAKwD6mrFDGg7vJxInF4lzVQ=="}
02091{"flow_id":36,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3543,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":412091,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"}
00455{"flow_id":36,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3544,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":412101,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gATUNACAGQCoBywEgSYsHmR3shSjf9ikmAJAAIZzuAAAGROP4wJOh23oBu4m0QGbs04n8gBAB69aPAAABAQgKCLeW3MLXQc0="}
00455{"flow_id":36,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3545,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":412109,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gATUNACAGQCoBywEgSYsHmR3shSjf9ikmAJAAIZzuAAAGROP4wJOh23oBu4m0QGbs0460gBAB5NHeAAABAQgKCLeW3MLXQc0="}
00541{"flow_id":35,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3546,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":412153,"pkt_caplen":150,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":150,"pkt_l4_len":96,"pkt":"qtsDr8lk5EKm5WPyht1gC0OFAGAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADYOtHmx54BuzYIqT5TJJpOgBgB9d2LAAABAQgKfyZLZMLXQcYUAwMAAQEXAwMANQT9482DaSeGfPdtMerjrv5LZSDOPGYBUxn1iMlz0FW5cLcaTs0foHF49wrtTXADpCjwLmA9"}
00455{"flow_id":35,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3547,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":412615,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gC0OFACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADYOtHmx54BuzYIqX5TJJpOgBEB9SAqAAABAQgKfyZLZMLXQcY="}
00584{"flow_id":34,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3548,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":412677,"pkt_caplen":178,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":178,"pkt_l4_len":124,"pkt":"qtsDr8lk5EKm5WPyht1gDP1bAHwGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADYOtHmx5wBu0pXqHout56rgBgB9QKpAAABAQgKfyZLZMLXQcEXAwMAV\/TMNjkH2omVQHg5ejZEyBQ2M5bgYdhurjUXmj4skXhZguuBakqFnb7UNfKRn4Fk1AkRI0mUPwhgfx42YGNKPp6j6AbZXlRPU8Uvi\/EbPChmpqXFMfH+fQ=="}
01020{"flow_id":34,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3549,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":412770,"pkt_caplen":500,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":500,"pkt_l4_len":446,"pkt":"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"}
01605{"flow_id":36,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3550,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":413628,"pkt_caplen":931,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":931,"pkt_l4_len":877,"pkt":"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"}
00455{"flow_id":36,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3551,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":413634,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gATUNACAGQCoBywEgSYsHmR3shSjf9ikmAJAAIZzuAAAGROP4wJOh23oBu4m0QGbs05IBgBAB7c6FAAABAQgKCLeW3cLXQc8="}
00457{"flow_id":34,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3624,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":442737,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAANg60eYqAcsBIEmLB5kd7IUo3\/YpAbvHnC63nqtKV6h6gBALOCOMAAABAQgKwtdB6n8mS2M="}
00457{"flow_id":35,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3631,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":452942,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAANg60eYqAcsBIEmLB5kd7IUo3\/YpAbvHnlMkmk42CKk+gBALMBcMAAABAQgKwtdB7n8mS2A="}
00459{"flow_id":35,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3632,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":452943,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAANg60eYqAcsBIEmLB5kd7IUo3\/YpAbvHnlMkmk42CKl\/gBALOBa\/AAABAQgKwtdB7n8mS2Q="}
00523{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3906,"source":"reddit.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":1,"flow_first_seen":1605291688611,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2606:2800:134:1a0d:1429:742:782:b6","src_port":39736,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00468{"flow_id":37,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3906,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":611238,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gDEO\/ACgGQCoBywEgSYsHmR3shSjf9ikmBigAATQaDRQpB0IHggC2mzgBu\/F3Z44AAAAAoAL9IIe6AAACBAWgBAIICvY2BR4AAAAAAQMDBw=="}
00467{"flow_id":37,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3908,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":654248,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSYGKAABNBoNFCkHQgeCALYqAcsBIEmLB5kd7IUo3\/YpAbubOJS20cTxd2ePoBJXgMFkAAACBAV4AQMDAwQCCArC10K+9jYFHg=="}
00456{"flow_id":37,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3910,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":654303,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDEO\/ACAGQCoBywEgSYsHmR3shSjf9ikmBigAATQaDRQpB0IHggC2mzgBu\/F3Z4+UttHFgBAB+0VLAAABAQgK9jYFScLXQr4="}
01150{"flow_id":37,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3911,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":654612,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"}
00854{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3911,"source":"reddit.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":4,"flow_first_seen":1605291688611,"flow_last_seen":1605291688654,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2606:2800:134:1a0d:1429:742:782:b6","src_port":39736,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Twitter","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"cdn.syndication.twimg.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
00456{"flow_id":37,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3996,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":695528,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSYGKAABNBoNFCkHQgeCALYqAcsBIEmLB5kd7IUo3\/YpAbubOJS20cXxd2mUgBALMDnoAAABAQgKwtdC5\/Y2BUk="}
00590{"flow_id":37,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3999,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":705717,"pkt_caplen":185,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":185,"pkt_l4_len":131,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAIMGPSYGKAABNBoNFCkHQgeCALYqAcsBIEmLB5kd7IUo3\/YpAbubOJS20cXxd2mUgBgLMHVeAAABAQgKwtdC6fY2BUkWAwMAWAIAAFQDA88hrXTlmmERvh2MAh5luJHCohEWeruMXgeeCeLIqDOcICkvsU+x9q1tILELIWe9u4V18z4rsB3VSuGPlE2gOpFxEwIAAAwAKwACAwQAMwACABcUAwMAAQE="}
00893{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":3999,"source":"reddit.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":6,"flow_first_seen":1605291688611,"flow_last_seen":1605291688705,"flow_tot_l4_data_len":824,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":137,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2606:2800:134:1a0d:1429:742:782:b6","src_port":39736,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Twitter","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.3","client_requested_server_name":"cdn.syndication.twimg.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"15af977ce25de452b96affa2addb1036","unsafe_cipher":0,"cipher":"TLS_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
00456{"flow_id":37,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4002,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":705748,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDEO\/ACAGQCoBywEgSYsHmR3shSjf9ikmBigAATQaDRQpB0IHggC2mzgBu\/F3aZSUttIogBAB+0KFAAABAQgK9jYFfMLXQuk="}
01158{"flow_id":37,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4008,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":706148,"pkt_caplen":609,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":609,"pkt_l4_len":555,"pkt":"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"}
00513{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4030,"source":"reddit.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":1,"flow_first_seen":1605291688712,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:808::2006","src_port":54726,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00466{"flow_id":38,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4030,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":712501,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gBqw+ACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACAG1cYBu1QhHQQAAAAAoAL9IGnKAAACBAWgBAIICoWLJ5EAAAAAAQMDBw=="}
00456{"flow_id":37,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4079,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":744114,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSYGKAABNBoNFCkHQgeCALYqAcsBIEmLB5kd7IUo3\/YpAbubOJS20ijxd2ufgBALcjbcAAABAQgKwtdDD\/Y2BX0="}
02105{"flow_id":37,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4122,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":747623,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"}
00457{"flow_id":37,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4128,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":747637,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDEO\/ACAGQCoBywEgSYsHmR3shSjf9ikmBigAATQaDRQpB0IHggC2mzgBu\/F3a5+UttbggBAB9Tt0AAABAQgK9jYFpsLXQxM="}
02107{"flow_id":37,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4137,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":748094,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"}
02107{"flow_id":37,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4138,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":748095,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"}
00457{"flow_id":37,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4140,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":748105,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDEO\/ACAGQCoBywEgSYsHmR3shSjf9ikmBigAATQaDRQpB0IHggC2mzgBu\/F3a5+UttuYgBAB9Ta7AAABAQgK9jYFp8LXQxM="}
00457{"flow_id":37,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4141,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":748109,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDEO\/ACAGQCoBywEgSYsHmR3shSjf9ikmBigAATQaDRQpB0IHggC2mzgBu\/F3a5+UtuBQgBAB8jIGAAABAQgK9jYFp8LXQxM="}
00513{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4145,"source":"reddit.pcap","alias":"nDPId-test","flow_id":39,"flow_packet_id":1,"flow_first_seen":1605291688749,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:805::2004","src_port":57282,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00467{"flow_id":39,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4145,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":749044,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gCJDMACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACAE38IBu+NAO7IAAAAAoAL9ICgwAAACBAWgBAIICm3\/yPIAAAAAAQMDBw=="}
00467{"flow_id":38,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4156,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":754068,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgIAAAAAAAAIAYqAcsBIEmLB5kd7IUo3\/YpAbvVxjGyAqhUIR0FoBJXgNU8AAACBAV4AQMDAwQCCArC10MXhYsnkQ=="}
00454{"flow_id":38,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4158,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":754101,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBqw+ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACAG1cYBu1QhHQUxsgKpgBAB+1kkAAABAQgKhYsnu8LXQxc="}
01151{"flow_id":38,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4161,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":754330,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"}
00834{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4161,"source":"reddit.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":4,"flow_first_seen":1605291688712,"flow_last_seen":1605291688754,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:808::2006","src_port":54726,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"static.doubleclick.net","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
00469{"flow_id":39,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4267,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":786435,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgFAAAAAAAAIAQqAcsBIEmLB5kd7IUo3\/YpAbvfwoEYYXPjQDuzoBJXgOVIAAACBAV4AQMDAwQCCArC10M\/bf\/I8g=="}
00455{"flow_id":39,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4268,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":786460,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCJDMACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACAE38IBu+NAO7OBGGF0gBAB+2k0AAABAQgKbf\/JGMLXQz8="}
01149{"flow_id":39,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4269,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":786633,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"qtsDr8lk5EKm5WPyht1gCJDMAiUGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACAE38IBu+NAO7OBGGF0gBgB+9LpAAABAQgKbf\/JGMLXQz8WAwECAAEAAfwDAxslW\/nV6n4TSU+WU427vUmpkTBTAfJMCiXCjsW6jsM1IDI9pBtUEgNPXXn3m6DfkXTykQkxvHtW6AlECtSxtZwqACB6ehMBEwITA8ArwC\/ALMAwzKnMqMATwBQAnACdAC8ANQEAAZPq6gAAAAAAEwARAAAOd3d3Lmdvb2dsZS5jb20AFwAA\/wEAAQAACgAKAAh6egAdABcAGAALAAIBAAAjAAAAEAAOAAwCaDIIaHR0cC8xLjEABQAFAQAAAAAADQASABAEAwgEBAEFAwgFBQEIBgYBABIAAAAzACsAKXp6AAEAAB0AIOcwVI1IhWdfqyJF52U0JaQN9BKpJPL3krZ3EsrflGwKAC0AAgEBACsACwq6ugMEAwMDAgMBABsAAwIAAvr6AAEAABUAzgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"}
00826{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4269,"source":"reddit.pcap","alias":"nDPId-test","flow_id":39,"flow_packet_id":4,"flow_first_seen":1605291688749,"flow_last_seen":1605291688786,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:805::2004","src_port":57282,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.google.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
00455{"flow_id":38,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4296,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":794873,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgIAAAAAAAAIAYqAcsBIEmLB5kd7IUo3\/YpAbvVxjGyAqlUIR8KgBALME23AAABAQgKwtdDSoWLJ7s="}
02100{"flow_id":38,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4414,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":813598,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"}
00875{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":4414,"source":"reddit.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":6,"flow_first_seen":1605291688712,"flow_last_seen":1605291688813,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:808::2006","src_port":54726,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"static.doubleclick.net","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
02093{"flow_id":38,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4415,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":813599,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"}
01078{"flow_id":38,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4416,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":813599,"pkt_caplen":546,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":546,"pkt_l4_len":492,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAewGPSoAFFBABwgIAAAAAAAAIAYqAcsBIEmLB5kd7IUo3\/YpAbvVxjGyDBlUIR8KgBgLMG5PAAABAQgKwtdDUYWLJ7sAWdSA9dP6l2hGNH1MScc+LBfToGcOsV4XAAaR7p7paqFbidCYEBprMy2tW\/eM1TAUSj\/+KZgcBOC4woJCh9RbxK\/sR3Qx+Z09th\/+PGt5Tz4GMzFuuEgmk4nnUuKdhERwiNqPe+J2r+fiqiXRInJDfjwwZlZ+x0LYsT4SsPfvT8ig7Vd8dlhkUXzfEWgs3ParQ0ZRzL30sEn\/mlCdNvjGW+gzzULVpDW5QW2Phd5lIX2HhCvkga+pdoiNryQtMtdyJ8XoSsSOZZtMsDKFUJQSov35Dk1W9abDJyOjIvea6sx1CXM0wXTd++ht8hdQGSo318njBm8YlQJReos58jWIMEuiEIZ8mWmov+du0OvSZcb98wkoJZGy4Zybu\/rOLa3ABSFkj1Vb3rH0Vg23EE58yIoYScZZWy4PHxZdQvSsAKBlBzlcbazWe45kPVgoLxoFu8pErPNpSVpClJOT\/jIKFqIfLJHpscEIPQd\/ucKrmi4sXieG7SK18qYUVqHuah+tNWegI348jnfNfzI2FIogMgeJW5Ln7PA5EZylscaV6op6JffT7Qc+MEDK84BqVVKyRPyf6Tg4CCfytahhmQlG5NA886ohE7a2oCvG"}
00454{"flow_id":38,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4418,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":813611,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBqw+ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACAG1cYBu1QhHwoxsgdhgBAB9VH4AAABAQgKhYsn9sLXQ1E="}
00455{"flow_id":38,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4419,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":813626,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBqw+ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACAG1cYBu1QhHwoxsgwZgBAB8k1DAAABAQgKhYsn9sLXQ1E="}
00455{"flow_id":38,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4420,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":813631,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBqw+ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACAG1cYBu1QhHwoxsg3lgBAB70t6AAABAQgKhYsn9sLXQ1E="}
00543{"flow_id":38,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4428,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":815709,"pkt_caplen":150,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":150,"pkt_l4_len":96,"pkt":"qtsDr8lk5EKm5WPyht1gBqw+AGAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACAG1cYBu1QhHwoxsg3lgBgB9QvCAAABAQgKhYsn+MLXQ1EUAwMAAQEXAwMANWxcOGJPb\/bnuwx+2gjxE3DRB+OYnyfDx1WN1ZWWBg8XqFZU3GGEx3VN8\/AD0LZF2XY0KMAe"}
00584{"flow_id":38,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4429,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":815816,"pkt_caplen":178,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":178,"pkt_l4_len":124,"pkt":"qtsDr8lk5EKm5WPyht1gBqw+AHwGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACAG1cYBu1QhH0oxsg3lgBgB9b7CAAABAQgKhYsn+MLXQ1EXAwMAV7DTKicdyIW9oddQezvsVCqOnBsYYNXBUX\/VeTmD0ji7eQF7bJ\/RBzIyz06PRPexQ6SFB18LSfT2xP7JpoMR9WY9qSF5V6lAi73Si+8b8DV8mVSE7oChjg=="}
00815{"flow_id":38,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4430,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":815910,"pkt_caplen":350,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":350,"pkt_l4_len":296,"pkt":"qtsDr8lk5EKm5WPyht1gBqw+ASgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACAG1cYBu1QhH6Yxsg3lgBgB9dztAAABAQgKhYsn+MLXQ1EXAwMBAwHGgS8JktvfhJS8HTbLgj6uoqDjdEf18UnkHBBik+lUriT5jTSaDF8DTTSaPFnnQE\/THCeaZwSWe2Qx5gktzbknDzgl0qSZvL43hTnvc6sKMpbI4hoqcvs1mtK6XA9ZTPZD\/qcqEY\/ovDS3gRdB84oNtU0XUs7CLp4pcnDoBjlyU\/UvpAtKVLeacATqoil3q0W2mi13oMQfs9ljUx4gBCLPxau2brTAO4vE6RmkIiawY1S29m9LWhjIgfeu1beb4kX2rd+jr9Gv0KKGJVjV5S4N\/SSfpikfvX0EKrxDX28Qz3HfasQcEZgQU2TQ3cT+WURQcEaaY0Jo4dPdHGjmgnxMadQ="}
00513{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4492,"source":"reddit.pcap","alias":"nDPId-test","flow_id":40,"flow_packet_id":1,"flow_first_seen":1605291688830,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:805::2001","src_port":58122,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00466{"flow_id":40,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4492,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":830061,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gBrB0ACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACAB4woBuyKqv5AAAAAAoAL9IFwjAAACBAWgBAIICu7gTZEAAAAAAQMDBw=="}
00513{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4499,"source":"reddit.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":1,"flow_first_seen":1605291688831,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:815::2016","src_port":52296,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00466{"flow_id":41,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4499,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":831210,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gDPOvACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFQAAAAAAACAWzEgBu0zLu+wAAAAAoAL9IM9TAAACBAWgBAIICkSadMcAAAAAAQMDBw=="}
00456{"flow_id":39,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4508,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":833881,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgFAAAAAAAAIAQqAcsBIEmLB5kd7IUo3\/YpAbvfwoEYYXTjQD24gBALMF3PAAABAQgKwtdDam3\/yRg="}
00513{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4537,"source":"reddit.pcap","alias":"nDPId-test","flow_id":42,"flow_packet_id":1,"flow_first_seen":1605291688843,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80c::2003","src_port":47302,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00468{"flow_id":42,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4537,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":843899,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gAjZHACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDAAAAAAAACADuMYBu5\/Vp\/oAAAAAoAL9IC3PAAACBAWgBAIICjfz93gAAAAAAQMDBw=="}
00513{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4538,"source":"reddit.pcap","alias":"nDPId-test","flow_id":43,"flow_packet_id":1,"flow_first_seen":1605291688843,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80c::2003","src_port":47304,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00466{"flow_id":43,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4538,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":843948,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gC3ZcACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDAAAAAAAACADuMgBu1ulIdYAAAAAoAL9IPghAAACBAWgBAIICjfz93gAAAAAAQMDBw=="}
02101{"flow_id":39,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4539,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":848925,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"}
00867{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":4539,"source":"reddit.pcap","alias":"nDPId-test","flow_id":39,"flow_packet_id":6,"flow_first_seen":1605291688749,"flow_last_seen":1605291688848,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:805::2004","src_port":57282,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"www.google.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
02099{"flow_id":39,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4540,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":848925,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"}
00455{"flow_id":39,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4542,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":848953,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCJDMACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACAE38IBu+NAPbiBGGYsgBAB9WINAAABAQgKbf\/JVsLXQ3E="}
00455{"flow_id":39,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4543,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":848977,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCJDMACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACAE38IBu+NAPbiBGGrkgBAB8l1YAAABAQgKbf\/JVsLXQ3E="}
00749{"flow_id":39,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4544,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":849286,"pkt_caplen":303,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":303,"pkt_l4_len":249,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAPkGPSoAFFBABwgFAAAAAAAAIAQqAcsBIEmLB5kd7IUo3\/YpAbvfwoEYauTjQD24gBgLMO9eAAABAQgKwtdDcW3\/yRj22CaIGkFKgjMJdIviOlFSxzfTtB1VAkH6FZG1EY5vqQWQu1W1qhNzxf1cXpO+\/Q1B+to4agaZY6goL3el3O99qqVao3uJh1S2EcZznbDnOJh7caS16vCgmMUjCOjnjLTMzjn+MN8ukKN4z2OC0vNIsrmNefATZbZ2khcKWlGoef+Y7hJA8RHzlkc5kqIGcpYReFXzxH8+1m6zn8p7T2hXcCFf0FsSXODpq+gBZ1oWOAWsXlG1NjeLCAN+lzap2wQ59SxOqQmDiEakQiYlFHUvcDyBPzqh3CcU"}
00456{"flow_id":39,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4547,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":849297,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCJDMACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACAE38IBu+NAPbiBGGu9gBAB9Vx7AAABAQgKbf\/JV8LXQ3E="}
00543{"flow_id":39,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4549,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":851832,"pkt_caplen":150,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":150,"pkt_l4_len":96,"pkt":"qtsDr8lk5EKm5WPyht1gCJDMAGAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACAE38IBu+NAPbiBGGu9gBgB9RHpAAABAQgKbf\/JWcLXQ3EUAwMAAQEXAwMANS7pbYekUrI79ZNEw3VzDbAZ58PddFvDuJcfrSKZm7mSjkQXpPd\/GQtaXLl3zlXxW5t7Z6pW"}
00584{"flow_id":39,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4554,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":852064,"pkt_caplen":178,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":178,"pkt_l4_len":124,"pkt":"qtsDr8lk5EKm5WPyht1gCJDMAHwGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACAE38IBu+NAPfiBGGu9gBgB9T6PAAABAQgKbf\/JWcLXQ3EXAwMAVyWhRzz0RSxcLhmCGRcey9SZMukJBxf8zaXPq+iTFZWDbnDj+F2oNI+2\/cMUzDH5UKi0awQ2XUbmqGo9KiB3ZPc7vNjp6txIhBg4qp6pEoJGLpLhkAIDuQ=="}
00843{"flow_id":39,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4557,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":852333,"pkt_caplen":372,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":372,"pkt_l4_len":318,"pkt":"qtsDr8lk5EKm5WPyht1gCJDMAT4GQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACAE38IBu+NAPlSBGGu9gBgB9YUJAAABAQgKbf\/JWsLXQ3EXAwMBGVeZOwPo2SFBU\/dwgOV0mRWcYfIJR8xqvjOm3GWUPmi1rxjok4Yyl5Dr8QKYbzb7CgdaKRYZaA\/\/jGlomXLpvZrz13MtIe8Sx7diX+zXgxCqzbMTR3pcJ7lqwy3sd5UyINRIpJSxFDXfMfPNeFpt8qQLqJGK\/BFTlDOVvcU0fG7CbBSJRtDBX44cM+fDF4rZk4fuXwqx+596dnCvpAmr8e+RXlT4j6Kh338gPFSmhIL7KjEfXC+U+qbC7gPqcA7XsLll1WFZjarIT7VxQlWtUGpIeReHXCkabMzFhxlSMUOEb1ATYBRqHnJHrqUK5ZwNHO40T28JhE5XOP0nenltfqqMakZycoISC+qdQnOk5lFkAguwNaRhUwwJ"}
00457{"flow_id":38,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4732,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":881499,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgIAAAAAAAAIAYqAcsBIEmLB5kd7IUo3\/YpAbvVxjGyDeVUIR9KgBALOEHDAAABAQgKwtdDfYWLJ\/g="}
00468{"flow_id":42,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4815,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":889230,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgMAAAAAAAAIAMqAcsBIEmLB5kd7IUo3\/YpAbu4xvp17E2f1af7oBJXgOZHAAACBAV4AQMDAwQCCArC10OnN\/P3eA=="}
00468{"flow_id":43,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4816,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":889231,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgMAAAAAAAAIAMqAcsBIEmLB5kd7IUo3\/YpAbu4yD8lZERbpSHXoBJXgPP1AAACBAV4AQMDAwQCCArC10OmN\/P3eA=="}
00457{"flow_id":39,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4818,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":889233,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgFAAAAAAAAIAQqAcsBIEmLB5kd7IUo3\/YpAbvfwoEYa73jQD34gBALOFLBAAABAQgKwtdDpm3\/yVk="}
00457{"flow_id":42,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4820,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":889272,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gAjZHACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDAAAAAAAACADuMYBu5\/Vp\/v6dexOgBAB+2orAAABAQgKN\/P3psLXQ6c="}
00456{"flow_id":43,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4821,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":889299,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gC3ZcACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDAAAAAAAACADuMgBu1ulIdc\/JWRFgBAB+3fZAAABAQgKN\/P3psLXQ6Y="}
01154{"flow_id":42,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4826,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":889651,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"qtsDr8lk5EKm5WPyht1gAjZHAiUGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDAAAAAAAACADuMYBu5\/Vp\/v6dexOgBgB+wBCAAABAQgKN\/P3psLXQ6cWAwECAAEAAfwDAznRqrI3BjpH0fMAjhWc3pmJOvHC\/\/j965\/A5lDlxh6gIDLxR7\/ypcsELHSllGpRYQ5lC32jGxm0ISoXtgzdDW32ACB6ehMBEwITA8ArwC\/ALMAwzKnMqMATwBQAnACdAC8ANQEAAZPKygAAAAAAFgAUAAARZm9udHMuZ3N0YXRpYy5jb20AFwAA\/wEAAQAACgAKAAh6egAdABcAGAALAAIBAAAjAAAAEAAOAAwCaDIIaHR0cC8xLjEABQAFAQAAAAAADQASABAEAwgEBAEFAwgFBQEIBgYBABIAAAAzACsAKXp6AAEAAB0AILgo0nok9EKnwiVyB76v1YPllAYprQfO501YUPqbQH86AC0AAgEBACsACwrKygMEAwMDAgMBABsAAwIAAtraAAEAABUAywAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"}
00829{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4826,"source":"reddit.pcap","alias":"nDPId-test","flow_id":42,"flow_packet_id":4,"flow_first_seen":1605291688843,"flow_last_seen":1605291688889,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80c::2003","src_port":47302,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"fonts.gstatic.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
01151{"flow_id":43,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4827,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":889830,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"}
00829{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4827,"source":"reddit.pcap","alias":"nDPId-test","flow_id":43,"flow_packet_id":4,"flow_first_seen":1605291688843,"flow_last_seen":1605291688889,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80c::2003","src_port":47304,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"fonts.gstatic.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
00467{"flow_id":40,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4856,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":893806,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgFAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbvjCkXQfikiqr+RoBJXgDd0AAACBAV4AQMDAwQCCArC10OZ7uBNkQ=="}
00454{"flow_id":40,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4858,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":893841,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBrB0ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACAB4woBuyKqv5FF0H4qgBAB+7tFAAABAQgK7uBN0cLXQ5k="}
01151{"flow_id":40,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4861,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":894065,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"qtsDr8lk5EKm5WPyht1gBrB0AiUGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACAB4woBuyKqv5FF0H4qgBgB+5EWAAABAQgK7uBN0cLXQ5kWAwECAAEAAfwDAw\/cwYtpk8EY2nFSet6HfhMTIva07YBjsHCyF\/EXCY4lIET\/tOg8vSE9lW4MNj+8zcNcKH9YOh6jVhMXDVw4Nj\/KACBqahMBEwITA8ArwC\/ALMAwzKnMqMATwBQAnACdAC8ANQEAAZP6+gAAAAAAEgAQAAANeXQzLmdncGh0LmNvbQAXAAD\/AQABAAAKAAoACEpKAB0AFwAYAAsAAgEAACMAAAAQAA4ADAJoMghodHRwLzEuMQAFAAUBAAAAAAANABIAEAQDCAQEAQUDCAUFAQgGBgEAEgAAADMAKwApSkoAAQAAHQAgNH1NsmWXDLZE3tZCuT77ObLFazHLQDqNeh9VcGafUUsALQACAQEAKwALCrq6AwQDAwMCAwEAGwADAgACWloAAQAAFQDPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"}
00824{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4861,"source":"reddit.pcap","alias":"nDPId-test","flow_id":40,"flow_packet_id":4,"flow_first_seen":1605291688830,"flow_last_seen":1605291688894,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:805::2001","src_port":58122,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.YouTube","breed":"Fun","category":"Media"},"tls": {"version":"TLSv1.2","client_requested_server_name":"yt3.ggpht.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
00467{"flow_id":41,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4865,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":894545,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgVAAAAAAAAIBYqAcsBIEmLB5kd7IUo3\/YpAbvMSCvRvaZMy7vtoBJXgIUlAAACBAV4AQMDAwQCCArC10OaRJp0xw=="}
00454{"flow_id":41,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4867,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":894570,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDPOvACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFQAAAAAAACAWzEgBu0zLu+0r0b2ngBAB+wj4AAABAQgKRJp1BsLXQ5o="}
01147{"flow_id":41,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4885,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":895701,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"}
00822{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4885,"source":"reddit.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":4,"flow_first_seen":1605291688831,"flow_last_seen":1605291688895,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:815::2016","src_port":52296,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.YouTube","breed":"Fun","category":"Media"},"tls": {"version":"TLSv1.2","client_requested_server_name":"i.ytimg.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
00455{"flow_id":42,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5519,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":954910,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgMAAAAAAAAIAMqAcsBIEmLB5kd7IUo3\/YpAbu4xvp17E6f1aoAgBALMF7QAAABAQgKwtdDyDfz96Y="}
00456{"flow_id":40,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5581,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":962330,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgFAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbvjCkXQfioiqsGWgBALMK\/YAAABAQgKwtdDzO7gTdE="}
00455{"flow_id":41,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5584,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":962332,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgVAAAAAAAAIBYqAcsBIEmLB5kd7IUo3\/YpAbvMSCvRvadMy73ygBALMP2JAAABAQgKwtdDzUSadQc="}
02092{"flow_id":40,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5588,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":963049,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"}
00865{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":5588,"source":"reddit.pcap","alias":"nDPId-test","flow_id":40,"flow_packet_id":6,"flow_first_seen":1605291688830,"flow_last_seen":1605291688963,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:805::2001","src_port":58122,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.YouTube","breed":"Fun","category":"Media"},"tls": {"version":"TLSv1.3","client_requested_server_name":"yt3.ggpht.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
02102{"flow_id":40,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5590,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":963050,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABNgGPSoAFFBABwgFAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbvjCkXQguIiqsGWgBgLMFKrAAABAQgKwtdD0u7gTdGJDtVHw4EQ3BpYfl2U4PvtKY8GTr3JsVY6DeC+ssrdDjq2pRMAypjpWCd7MyA7hfa9JdWnTME2vbGAoGru6VPlkdN3Mk95Ohv\/iPl\/HETlSv9RBdvCPouschfOCDFCHA6enI4wRjq0pFfYYQWxgRtdvTr9DZb3CKY5X2RHegCOq5d6\/LT6zZEEH70Ix9dc0BVewu9\/90vK8jlkxzHDogatul7aYRE47LkgNMNZvPPZW9\/gIBuFoEwuuFtlZ4e3ohvOQkiCwJm4yn8A0goLWAzHCehGRMYZEomHtXF6hzn\/7pwDB9n0a9CtqmSMRBdpQhcICNc6rsNvT1HCrZM\/jdkBBXf3wyZxYdi2IRUVSEtesC19e+tiwWn97ixpqodwspJtYqJIC7+x3VZbl9WDVm2\/0Zk29Sh6AMHC2X2KeD9VjfyRZgdl2YVV8fHSsL9gZNk1BKXPkFCkHnhlbabw7V8Lm2EhKfNloqZgqVd8Cfz8xi7mTKpdO52mNE8e85ifK\/rcTe0bv8k2w0hRIREi56kAzBDVnqrA1V3\/e\/QbWmrvj4QTkTMcBgwcb2vD1xN19zP6jHm5ZFho5b3S0HsSrP\/Av6HvTAEyK9OvoY3Ffy5kgRxsFIrfpG3Gg3XE2P+8it\/p4ncDuXfQ8l2TzD2OO6rSA6DBVsS9CdBPYpHnksIboZmp+e3TcAheIqtub+ZMuP5GUiTijW+0yZCc59fpAHuBKWCCqOptRjIevnS9b5Z+ycx\/zkVXJTIlrxntElf7+3K8z2f7YNut9+gSa\/Y66tT20lu1vyFtI3rzb68z27DqF4oq46tX++qKB3CrPszwE2Hw91wTAADpGB\/xWS5vjzWc8\/kMq77ceAtgBYeQ2+\/HhpjcZHUrWrHbedIMgtn9tqzzcM4XHwxwjBnxeaceEAzIysWgncv8b2uonzZcp37TBb+1w\/eRCHHIWl2ns5ejLa61tmex0TbuLfIT9ufi\/6vymA\/uOEWG5XWYnzSLV\/XjFt6KjrcUQdLvLfI8H3wsLIWOWjxYgDN0Chg4hccezGj0UzTtPB\/XH86dPTUChHuACPHT35pmvcA2tXUklPfjhvu+2PEPtfYpHGs7mXh8i94hLgksNOA5EBMuAJz9EQc5O6HYWb5QE\/JbFbIbuM\/xf18z8hd9yqDfsoZX6yFUXDlXbKQbhSdSdxFD+4TvKvVhRqBrE0vT8gpypNiyZplLvteuvKuf3VziBxr\/podGznZjq98LAYSdCOzBLhP5XenHxFrP++QRROp\/O8JVZC1NxZ9prWjp+KwW9lQCvAczngYnJcEPJEjK4bMjlmJbdgr30xJhyAvTRbySOLtj25tEqYiR43Xx1Qilm0YKEeCinM0f1pkG4DCD6yVOQcItQHBpQEF38mmmtnw53Kx+YuMHBnrsagDXTOrfFAnnHDIrusEAgLJZ4GTcLIJ3\/RXUWs0XMxlPmX+p+JdjLAOkhwDI+uCEee5rrcLhrVXDJXnGDsAHbTUzFlTB7w+hpXXOTz0VKCQnKKWSA9G0OXRjFOLpBxUgyNE4A6KiGkgKuZAewkq\/UqLhCo+GafjuwYOZ+7amRkyPsHg0fWyC2I9i2sLyuqR3N7Um5M9Sjw=="}
02095{"flow_id":40,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5592,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":963051,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"}
02094{"flow_id":40,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5594,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":963052,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"}
00455{"flow_id":40,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5596,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":963058,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBrB0ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACAB4woBuyKqwZZF0ILigBAB9bQQAAABAQgK7uBOFsLXQ9I="}
00455{"flow_id":40,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5598,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":963072,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBrB0ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACAB4woBuyKqwZZF0IeagBAB8q9aAAABAQgK7uBOF8LXQ9I="}
00455{"flow_id":40,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5600,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":963079,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBrB0ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACAB4woBuyKqwZZF0IxSgBAB66qpAAABAQgK7uBOF8LXQ9I="}
00455{"flow_id":40,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5602,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":963085,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBrB0ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACAB4woBuyKqwZZF0JEKgBAB5KX4AAABAQgK7uBOF8LXQ9I="}
00991{"flow_id":40,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5604,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":963101,"pkt_caplen":483,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":483,"pkt_l4_len":429,"pkt":"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"}
02103{"flow_id":41,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5606,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":963101,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"}
00863{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":5606,"source":"reddit.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":6,"flow_first_seen":1605291688831,"flow_last_seen":1605291688963,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:815::2016","src_port":52296,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.YouTube","breed":"Fun","category":"Media"},"tls": {"version":"TLSv1.3","client_requested_server_name":"i.ytimg.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
00455{"flow_id":43,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5607,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":963102,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgMAAAAAAAAIAMqAcsBIEmLB5kd7IUo3\/YpAbu4yD8lZEVbpSPcgBALMGx9AAABAQgKwtdDyDfz96Y="}
02099{"flow_id":41,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5608,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":963102,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"}
01375{"flow_id":41,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5610,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":963103,"pkt_caplen":765,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":765,"pkt_l4_len":711,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAscGPSoAFFBABwgVAAAAAAAAIBYqAcsBIEmLB5kd7IUo3\/YpAbvMSCvRxxdMy73ygBgLMEIyAAABAQgKwtdD1ESadQcZHHwFtm\/00a67Xaxe8sC42DcWT7JHFrsxcupGcs2bBk4tP1NcetWNIbS6kX6Yk6Yn7Pc8GJF5XoL07ox+lbVoD4r06nQb8+9Wy9+8cGz3S2l6TSC46Np73Ya8ZIZjtgDBV9ypfQWLL0gB9R\/UtWTmQsueauMdrMgPoqxNaDxtOtDWZ209hQskz8rQG0gbAdLRAmNwgzhdElKyLZH\/buQalNrLl+tdVn0j90zPGVo5msGCtGiijmd3C+BVJybFF\/QBZ4tJ0NjT\/cHjzNZcUnTn4sbg6sokS6WFhW4BEtAVVxDiRkcA3CHCcF0KkaOdV3Yar8yhsULdb1XfJjUGoG1h+cK\/9WxMhQ2KVhfWy+qSg1Z5bdcBgD6YKFAXtxoUZF9F3Ou25SJlb7iiuOXHeGx6KNHq65NKrGeYIpUsPAZrlRHj0CZvot1deS\/cAXr40ZFdVicdkV3dQONNThzAfSp45LDSWlavxLsJxbUsY+t9ig0xcbqklx+3nLbXAShXwPGQk+hCoYm0axsrGMpysIv52halabSHf7mMoSoQaF\/SsKzgKUnypU1rtg\/gzZIhQrPr1rfdzUnWCJ\/EOWG3ExUWUUIGi7JrPw6ny9D4OzD1+mSpnFEVI1\/WtDxLJgXJ+7qTPVFf7WmSvCRCkIurA6JmfMfT1JjnyplXpLnx6nmBKWmc3mD4rhKNo4+GxiXc6QahhOypns7iRr0qjYNkjTQ7uqQPl0Z4FwoOzEXYzx1bav7c3AE7FCCLi+Lrk6qp\/MAi7ei9KPZr6qh8WSxCVWJGh5N6z0GEZ63wymyUsYvfr++rTBCCW1la+F1r892stpNL2dK6w0gcsqwsXIHO4+cxTFjV+WyNdFziX8ig66Uq24AIoJQU4a1reVpdbp\/zFPbka3hv2Gt3"}
02093{"flow_id":42,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5611,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":963103,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"}
00870{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":5611,"source":"reddit.pcap","alias":"nDPId-test","flow_id":42,"flow_packet_id":6,"flow_first_seen":1605291688843,"flow_last_seen":1605291688963,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80c::2003","src_port":47302,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"fonts.gstatic.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
00455{"flow_id":40,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5612,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":963108,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBrB0ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACAB4woBuyKqwZZF0JKXgBAB4aRuAAABAQgK7uBOF8LXQ9I="}
00454{"flow_id":41,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5614,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":963115,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDPOvACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFQAAAAAAACAWzEgBu0zLvfIr0cJfgBAB9QHCAAABAQgKRJp1S8LXQ9Q="}
00455{"flow_id":41,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5615,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":963121,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDPOvACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFQAAAAAAACAWzEgBu0zLvfIr0ccXgBAB8v0MAAABAQgKRJp1S8LXQ9Q="}
00455{"flow_id":41,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5616,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":963127,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDPOvACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFQAAAAAAACAWzEgBu0zLvfIr0cm+gBAB7fpqAAABAQgKRJp1S8LXQ9Q="}
00456{"flow_id":42,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5617,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":963131,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gAjZHACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDAAAAAAAACADuMYBu5\/VqgD6dfEGgBAB9WMDAAABAQgKN\/P38MLXQ84="}
02098{"flow_id":42,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5619,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":963145,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"}
00822{"flow_id":42,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5620,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":963145,"pkt_caplen":355,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":355,"pkt_l4_len":301,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAS0GPSoAFFBABwgMAAAAAAAAIAMqAcsBIEmLB5kd7IUo3\/YpAbu4xvp19b6f1aoAgBgLMOzfAAABAQgKwtdDzjfz96bUsmxC081h5ZSDjxYRC0\/vv\/aVDshIdoJf6XkBZrgfA6CGMnWzHlpEnzbc7BqGk5ohBApcWitDvQJDlTjw5de+3Ihck2QENwDH1A1C99dPldt6z7bfhbLeNoAzjfAlcbEjEU7iHZTnGBK5E+u\/EHaxbynFMAXGohBOqzClJuJu+19rl8E\/YfUYDUX70sFkkMI6fVz9PgMVWLSyLEUNE43pLwnYGuSRqgOUJrL5ANkwcYvoklc3cngTRBKFb0tdKeqkLIFS9nnmzg+7jNZYc3US45+pndZTpBJ48U7HT3zpoSkQMHOarKLNSo9G0FVAClrU6ugD3cl0E+6zThNByss7DaYi9sm4ghjKTZUUTQ=="}
02100{"flow_id":43,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5621,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":963145,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"}
00870{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":5621,"source":"reddit.pcap","alias":"nDPId-test","flow_id":43,"flow_packet_id":6,"flow_first_seen":1605291688843,"flow_last_seen":1605291688963,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80c::2003","src_port":47304,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"fonts.gstatic.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
02100{"flow_id":43,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5622,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":963146,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"}
00821{"flow_id":43,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5623,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":963146,"pkt_caplen":355,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":355,"pkt_l4_len":301,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAS0GPSoAFFBABwgMAAAAAAAAIAMqAcsBIEmLB5kd7IUo3\/YpAbu4yD8lbbVbpSPcgBgLMCGjAAABAQgKwtdDzjfz96bPIEph5izz7ezvMZGFIrlXa6WBEFpLgQuikWGA5oQiJy+ofZfIezYUrEiSgkfiwC93def9fqnLfsL3nibiaPMaGj3P4lu2Ktst2eV899ca5jeu6XXaXgQo54RX4\/Qm7djxnj97n3fxSaIDTzrfA9eYtN+x2bZUZfyl4VbV1ZO8sMitpAtpVifZDuu+wj4MuteCH\/AiJ2Rbq4BUyn202RgkMsZw0IaXT\/2PGc3dduytbXCerx5uPUdp5l4lf9dhteRKTWkDkvAFgTeKK7LVvcT3RaTwnEv+opN0tRdVWTRuipaK7yQ0S3Wd1AVCtzeZqIyh2Vce2sWyV7YBLOaBpD2MTQJgJrwvxbU3LOuUdg=="}
00457{"flow_id":42,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5625,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":963152,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gAjZHACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDAAAAAAAACADuMYBu5\/VqgD6dfW+gBAB8l5OAAABAQgKN\/P38MLXQ84="}
00457{"flow_id":42,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5626,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":963157,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gAjZHACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDAAAAAAAACADuMYBu5\/VqgD6dfbLgBAB8F1DAAABAQgKN\/P38MLXQ84="}
00456{"flow_id":43,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5627,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":963159,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gC3ZcACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDAAAAAAAACADuMgBu1ulI9w\/JWj9gBAB9XCwAAABAQgKN\/P38MLXQ84="}
00457{"flow_id":43,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5628,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":963162,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gC3ZcACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDAAAAAAAACADuMgBu1ulI9w\/JW21gBAB8mv7AAABAQgKN\/P38MLXQ84="}
00457{"flow_id":43,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5629,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":963165,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gC3ZcACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDAAAAAAAACADuMgBu1ulI9w\/JW7CgBAB8GrwAAABAQgKN\/P38MLXQ84="}
00544{"flow_id":41,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5632,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":974859,"pkt_caplen":150,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":150,"pkt_l4_len":96,"pkt":"qtsDr8lk5EKm5WPyht1gDPOvAGAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFQAAAAAAACAWzEgBu0zLvfIr0cm+gBgB9UKHAAABAQgKRJp1VsLXQ9QUAwMAAQEXAwMANSQF9LAxFquz90lsA+3Bn1jOTlFW\/zyg43dEw+G6xOIF77JK5E\/qWe8aImWD\/qGb5Bi1Tl+e"}
00546{"flow_id":42,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5633,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":975746,"pkt_caplen":150,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":150,"pkt_l4_len":96,"pkt":"qtsDr8lk5EKm5WPyht1gAjZHAGAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDAAAAAAAACADuMYBu5\/VqgD6dfbLgBgB9WtZAAABAQgKN\/P3\/MLXQ84UAwMAAQEXAwMANag\/zot3eO2xQUGPM6bVrD+vsIB02CvxdTsR8l7fF2zwPAX2HEW535Yri2kq\/gyqka03EszC"}
00548{"flow_id":43,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5634,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":976372,"pkt_caplen":150,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":150,"pkt_l4_len":96,"pkt":"qtsDr8lk5EKm5WPyht1gC3ZcAGAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDAAAAAAAACADuMgBu1ulI9w\/JW7CgBgB9aZCAAABAQgKN\/P3\/cLXQ84UAwMAAQEXAwMANbUf01yQTavdZEcoPfGW3YGfmMqFlu\/\/PwheKuZvuCwsVVD\/0YptIUsRmnVW+hu81Lrqh\/nb"}
00458{"flow_id":43,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5636,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":976577,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gC3ZcACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDAAAAAAAACADuMgBu1ulJBw\/JW7CgBEB9WqdAAABAQgKN\/P3\/cLXQ84="}
00585{"flow_id":41,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5637,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":976610,"pkt_caplen":178,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":178,"pkt_l4_len":124,"pkt":"qtsDr8lk5EKm5WPyht1gDPOvAHwGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFQAAAAAAACAWzEgBu0zLvjIr0cm+gBgB9eg5AAABAQgKRJp1WMLXQ9QXAwMAV4XUA8y\/H3rV3I7A+4+L3+6xTIDkH3fhQx0Sg72p0g9WgvejHYF0uMsIVfg6aVnEoGaa6YMGbB8R0N7hoUjdx8L+Tc\/+DVxCs5pFlZAihihNoS\/XgXDNzQ=="}
00588{"flow_id":42,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5638,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":976672,"pkt_caplen":178,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":178,"pkt_l4_len":124,"pkt":"qtsDr8lk5EKm5WPyht1gAjZHAHwGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDAAAAAAAACADuMYBu5\/VqkD6dfbLgBgB9YiaAAABAQgKN\/P3\/cLXQ84XAwMAV9gbbZns+ezhodF9W5kAdJPIX+uM60i\/xfsqUHL4Us2BItuyjw2dFWYGEgZku9XHLH1EkgI+lba9OoQXHPNKqfo5waZIyAQx\/WM2t2\/NmGuPFdtka9wbMw=="}
00868{"flow_id":41,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5639,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":976798,"pkt_caplen":389,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":389,"pkt_l4_len":335,"pkt":"qtsDr8lk5EKm5WPyht1gDPOvAU8GQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFQAAAAAAACAWzEgBu0zLvo4r0cm+gBgB9fwpAAABAQgKRJp1WMLXQ9QXAwMBKmAOORkVWjvJC\/+Bh28LIPleVhCL4+OL6Q7So3eAPyMAOaH7MtZpTv2f1uP7hJYkded\/HWJknwsOOxWE51ZAGjxqDuyS2Vt1NsA167fvegyJRGW\/McyTHthmZutbD+eLTN\/eGPylWeRlkjQwyhiV2s9126oRErYRrLuT0WPUjLONPHqIHBqIUZ2DgOx7V8FrBaeGl+cxryrNW9hSYdbdGf9uomfBBaMZ4uhJ84c\/dCzYcrlYLBzRJ1Beq6\/QEBTQI+heyw96HLEIOLbLZzLtZFgbPdBAGf0iXuo5qpQRcXNcW5a6Nm7D+FhMCtP+QS5YAJkh+rgvV+tGhQbiTkTQMIBj0MhqRan3p8T7hYqR22LGd9TTDWTNij6ah0EgcX0JZH4R+5BxoaJ+Eyw="}
00869{"flow_id":42,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5640,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":976846,"pkt_caplen":387,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":387,"pkt_l4_len":333,"pkt":"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"}
00571{"flow_id":42,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5641,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":977019,"pkt_caplen":167,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":167,"pkt_l4_len":113,"pkt":"qtsDr8lk5EKm5WPyht1gAjZHAHEGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDAAAAAAAACADuMYBu5\/Vq8n6dfbLgBgB9e5VAAABAQgKN\/P3\/cLXQ84XAwMATEURRg2y7c4DOFmEgEKFboIMyKQIBVehNZ0+V9Dl\/5oq+kmXaTN0jgajODmhaoPq4MRH6Ny0DoOV3\/IyV6g+ZrLODZm4PKlLUTtbuPE="}
00455{"flow_id":43,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5645,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291689,"pkt_ts_usec":4303,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgMAAAAAAAAIAMqAcsBIEmLB5kd7IUo3\/YpAbu4yD8lbsJbpSQcgBALOGENAAABAQgKwtdEHDfz9\/0="}
00455{"flow_id":43,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5650,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291689,"pkt_ts_usec":4726,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgMAAAAAAAAIAMqAcsBIEmLB5kd7IUo3\/YpAbu4yD8lbsJbpSQdgBALOGEMAAABAQgKwtdEHDfz9\/0="}
00454{"flow_id":41,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5651,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291689,"pkt_ts_usec":4726,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgVAAAAAAAAIBYqAcsBIEmLB5kd7IUo3\/YpAbvMSCvRyb5My74ygBALOPCMAAABAQgKwtdEHESadVY="}
00507{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7094,"source":"reddit.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":1,"flow_first_seen":1605291689408,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56640,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00466{"flow_id":44,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7094,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291689,"pkt_ts_usec":408040,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gCYSFACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3UABuxOPoYYAAAAAoAL9IMRnAAACBAWgBAIICql08xMAAAAAAQMDBw=="}
00468{"flow_id":44,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7110,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291689,"pkt_ts_usec":433785,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdQHZ86cETj6GHoBJXgAFCAAACBAV4AQMDAwQCCArC10XLqXTzEw=="}
00454{"flow_id":44,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7111,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291689,"pkt_ts_usec":433808,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCYSFACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3UABuxOPoYd2fOnCgBAB+4U5AAABAQgKqXTzLcLXRcs="}
01147{"flow_id":44,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7112,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291689,"pkt_ts_usec":434011,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"}
00830{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":7112,"source":"reddit.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":4,"flow_first_seen":1605291689408,"flow_last_seen":1605291689434,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56640,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"gateway.reddit.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
00456{"flow_id":44,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8668,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291689,"pkt_ts_usec":577974,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdQHZ86cITj6OMgBALMHnhAAABAQgKwtdF6al08y0="}
01863{"flow_id":44,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8671,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291689,"pkt_ts_usec":577976,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"}
00886{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":8671,"source":"reddit.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":6,"flow_first_seen":1605291689408,"flow_last_seen":1605291689577,"flow_tot_l4_data_len":1773,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":295,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56640,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"gateway.reddit.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
01874{"flow_id":44,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8673,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291689,"pkt_ts_usec":577976,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABDgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdQHZ87doTj6OMgBgLMLNUAAABAQgKwtdF66l08y1lcnQuY29tMEYGCCsGAQUFBzAChjpodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRTSEEyU2VjdXJlU2VydmVyQ0EuY3J0MAwGA1UdEwEB\/wQCMAAwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdgD2XJQv0XcwIhRUGAgwlFaO400TGTO\/3wwvIAvMTvFk4wAAAXQrSzGvAAAEAwBHMEUCIA4cEDk5PHlewpHzj26HOiQYpOqP2omD5+Ok3XvOGjvLAiEAscSe5jGq7+A1eA9CosURVXiFG10O2uG7a3d0exugn8YAdwBc3EOS\/uarRUSxXprUVuYQN\/vV+kfcoXOUsl7m9scOygAAAXQrSzHWAAAEAwBIMEYCIQCxbG96NckU2JDBIgJPBbdq8isaryVs6CFbEIVpmICYFgIhAK4\/cwv3QOvL6\/r1eBSuNjH8ea1wkWPPafYHa\/T2zS4cMA0GCSqGSIb3DQEBCwUAA4IBAQDJdKHctElcuqyCkmp8mpTUGkGnB3LVzx6AlsMpQm1P2E\/FO7nlknf9cCDmw9zsWs4Vwy0WyWm2VITQHFibHvPRL9Dqdq57g8bbFomQLOayWwM4ymsEk1sOwkg9GmGUttJoxtFhWMTaKNgiwa1KzMnOenD0aOCisNjqYwuAwjXNR4prj\/NaGsDOdAIquq\/5ysyZ9ZTflWiVnQbilOt4e\/blGzRhaSd4gTYdYkgV\/84UmKwjSekYiL2ioVV1mVoDRtSfMV9CdwjyekkC849Oi21tKfCnsyl+9Ipp3oESKGdNZ5966KOZhQo0yght\/ROeeRQR8c5vS0fKeKnkHGBz240cAASYMIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBhMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBDQTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIgU2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANyuWJBNwcQwFZA1W248ghX1LFy949v\/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83nf36QYSvx6+M\/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bdKpPDkC55gIDvEwRqFDu1m5K+wgdlTvza\/P96"}
00454{"flow_id":44,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8676,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291689,"pkt_ts_usec":578008,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCYSFACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3UABuxOPo4x2fO3agBAB9X5yAAABAQgKqXTzvcLXRes="}
00454{"flow_id":44,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8677,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291689,"pkt_ts_usec":578012,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCYSFACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3UABuxOPo4x2fPHygBAB83pcAAABAQgKqXTzvcLXRes="}
01869{"flow_id":44,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8678,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291689,"pkt_ts_usec":578047,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABDgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdQHZ88fITj6OMgBgLMCvaAAABAQgKwtdF66l08y2u3Fx+VTEM6DkHpNe+L9MLatKx31\/+V3RTOzWA3a6ORJiznw7T2uDX9Gspq0SnS1iEbZJLgcPac4sSl0iQBEV1Gt03MZeS6M1UDTvkwT85Xi6481x+EI6GQQCNRWZHsKFlzqCqKQlO85fr6C6rD3KnMA76x\/T9FHfDpFsoV8Kz+YL9t0VYmwIDAQABo4IBWjCCAVYwEgYDVR0TAQH\/BAgwBgEB\/wIBADAOBgNVHQ8BAf8EBAMCAYYwNAYIKwYBBQUHAQEEKDAmMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wewYDVR0fBHQwcjA3oDWgM4YxaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0R2xvYmFsUm9vdENBLmNybDA3oDWgM4YxaHR0cDovL2NybDQuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0R2xvYmFsUm9vdENBLmNybDA9BgNVHSAENjA0MDIGBFUdIAAwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAdBgNVHQ4EFgQUD4BhHIIxYdUvKOeNRji0LOHG2eIwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUwDQYJKoZIhvcNAQELBQADggEBACM+30vSMUKltn5CXBpEzGnRaLRdS+AEIWxL4m3MseCXj6ZTCc2qKmXlOU8eg6VuXJiiJCbm+6Htk8cuAsZNSr+wQt942rOo+W3\/IYVTNmBMds7sONzWUYDwxdbl1E0nZKubxz5x+0iXuDNtyRMH7paiGxgV9lxMQO2zwuz\/ccHjR\/\/UuQC0N0LaIMnqboruFAaufaJZmIioG28t9PLJFF8mzyyNfu03wKnVObmCvxkM6jSvACFo+K1z4sky2jglC1XTmh3waIbtLkE073ylUB2\/OvnTwQgM5u0eilgl5Lh3rS1u9VLdtHSPq0kunTuTNCgfeM6U6se908ltHN5cMvMWAwMB3xYAAdsBAAHXMIIB0woBAKCCAcwwggHIBgkrBgEFBQcwAQEEggG5MIIBtTCBnqIWBBQPgGEcgjFh1S8o541GOLQs4cbZ4hgPMjAyMDExMDgwMjAyNTFaMHMwcTBJMAkGBSsOAwIaBQAEFBBfpnqACJ21J581zoMLQ4ieo8cNBBQPgGEcgjFh1S8o541GOLQs4cbZ4gIQDR33xPAIHf0NQOujujRTcYAAGA8yMDIwMTEwODAyMDI1MVqgERgPMjAyMDExMTUwMTE3NTFaMA0GCSqGSIb3DQEBCwUAA4IBAQBY+1SnH0u3ho+Y8niHMzRj8wWXBoT45DsNzWXZsZidgbnEjA4\/L6gnKwvitI4d+SX6Al6xofYE"}
01155{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":8678,"source":"reddit.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":10,"flow_first_seen":1605291689408,"flow_last_seen":1605291689578,"flow_tot_l4_data_len":3997,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":399,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56640,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"gateway.reddit.com","server_names":"reddit.com,*.reddit.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Reddit Inc., CN=*.reddit.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"DB:E9:D5:FE:EB:EF:68:34:55:FD:62:BA:C9:BB:04:D4:E3:22:18:81"}}
01159{"flow_id":44,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8683,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291689,"pkt_ts_usec":578048,"pkt_caplen":601,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":601,"pkt_l4_len":547,"pkt":"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"}
00455{"flow_id":44,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8686,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291689,"pkt_ts_usec":578053,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCYSFACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3UABuxOPo4x2fPYKgBAB7XZKAAABAQgKqXTzvcLXRes="}
00455{"flow_id":44,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8688,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291689,"pkt_ts_usec":578060,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCYSFACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3UABuxOPo4x2fPgNgBAB6XRLAAABAQgKqXTzvcLXRes="}
00583{"flow_id":44,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8757,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291689,"pkt_ts_usec":580568,"pkt_caplen":179,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":179,"pkt_l4_len":125,"pkt":"qtsDr8lk5EKm5WPyht1gCYSFAH0GQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3UABuxOPo4x2fPgNgBgB9ecwAAABAQgKqXTzwMLXResWAwMAJRAAACEgXdr5tAznIsP0ZYcFVU0Vp9mW5dinaB\/IC0Txi4uVK0MUAwMAAQEWAwMAKAAAAAAAAAAAYObURD76P7BRqmy0nANK1AwCnpZf9yXzOJlnIkFwHnE="}
00591{"flow_id":44,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8759,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291689,"pkt_ts_usec":581165,"pkt_caplen":185,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":185,"pkt_l4_len":131,"pkt":"qtsDr8lk5EKm5WPyht1gCYSFAIMGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3UABuxOPo+l2fPgNgBgB9WkEAAABAQgKqXTzwcLXResXAwMAXgAAAAAAAAABu4ekuHoVU7jS8MR7sSH27XAbRL1e69fImX+DRf\/j0WZSraMLPQfRpqZpC6EyneH36Ab4Rdmg5rWFB23meVfCGPLJ5PocjEgqrduJb0R75yBt8s5nrqQ="}
00513{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9080,"source":"reddit.pcap","alias":"nDPId-test","flow_id":45,"flow_packet_id":1,"flow_first_seen":1605291690373,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:805::2002","src_port":51006,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00466{"flow_id":45,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9080,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":373466,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gB68TACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACACxz4Buz6Su2UAAAAAoAL9IFr7AAACBAWgBAIIClRf7UgAAAAAAQMDBw=="}
00513{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9081,"source":"reddit.pcap","alias":"nDPId-test","flow_id":46,"flow_packet_id":1,"flow_first_seen":1605291690384,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80b::2002","src_port":59336,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00466{"flow_id":46,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9081,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":384370,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gCvtsACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICwAAAAAAACAC58gBu5uynDEAAAAAoAL9IAqWAAACBAWgBAIICgxmJysAAAAAAQMDBw=="}
00468{"flow_id":45,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9082,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":396189,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgFAAAAAAAAIAIqAcsBIEmLB5kd7IUo3\/YpAbvHPls7Xl4+krtmoBJXgDq4AAACBAV4AQMDAwQCCArC10mNVF\/tSA=="}
00455{"flow_id":45,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9083,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":396234,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gB68TACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACACxz4Buz6Su2ZbO15fgBAB+76yAAABAQgKVF\/tX8LXSY0="}
01152{"flow_id":45,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9084,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":396643,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"}
00831{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":9084,"source":"reddit.pcap","alias":"nDPId-test","flow_id":45,"flow_packet_id":4,"flow_first_seen":1605291690373,"flow_last_seen":1605291690396,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:805::2002","src_port":51006,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"adservice.google.fr","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
00468{"flow_id":46,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9086,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":402898,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgLAAAAAAAAIAIqAcsBIEmLB5kd7IUo3\/YpAbvnyP\/5OOmbspwyoBJXgGsCAAACBAV4AQMDAwQCCArC10mUDGYnKw=="}
00455{"flow_id":46,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9087,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":402927,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCvtsACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICwAAAAAAACAC58gBu5uynDL\/+TjqgBAB++8BAAABAQgKDGYnPcLXSZQ="}
01150{"flow_id":46,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9088,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":403285,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"}
00832{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":9088,"source":"reddit.pcap","alias":"nDPId-test","flow_id":46,"flow_packet_id":4,"flow_first_seen":1605291690384,"flow_last_seen":1605291690403,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80b::2002","src_port":59336,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"adservice.google.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
00507{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9089,"source":"reddit.pcap","alias":"nDPId-test","flow_id":47,"flow_packet_id":1,"flow_first_seen":1605291690405,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::345f:7ca5","src_port":46646,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00466{"flow_id":47,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9089,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":405354,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gBYjGACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAA0X3yltjYBu5sO15YAAAAAoAL9IOjCAAACBAWgBAIICgKUPwEAAAAAAQMDBw=="}
00513{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9090,"source":"reddit.pcap","alias":"nDPId-test","flow_id":48,"flow_packet_id":1,"flow_first_seen":1605291690421,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80b::2001","src_port":59624,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00466{"flow_id":48,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9090,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":421002,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gBJW4ACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICwAAAAAAACAB6OgBu5zTDYMAAAAAoAL9IIEIAAACBAWgBAIICl8E6ogAAAAAAQMDBw=="}
00455{"flow_id":45,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9091,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":433317,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgFAAAAAAAAIAIqAcsBIEmLB5kd7IUo3\/YpAbvHPls7Xl8+kr1rgBALMLNSAAABAQgKwtdJs1Rf7V8="}
00456{"flow_id":46,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9092,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":440083,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgLAAAAAAAAIAIqAcsBIEmLB5kd7IUo3\/YpAbvnyP\/5OOqbsp43gBALMOOjAAABAQgKwtdJtwxmJz4="}
00470{"flow_id":47,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9093,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":440084,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAADRffKUqAcsBIEmLB5kd7IUo3\/YpAbu2Nv\/zx++bDteXoBJXgLoLAAACBAV4AQMDAwQCCArC10m3ApQ\/AQ=="}
00456{"flow_id":47,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9094,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":440123,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBYjGACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAA0X3yltjYBu5sO15f\/88fwgBAB+z36AAABAQgKApQ\/JMLXSbc="}
01150{"flow_id":47,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9095,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":440589,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"}
00835{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":9095,"source":"reddit.pcap","alias":"nDPId-test","flow_id":47,"flow_packet_id":4,"flow_first_seen":1605291690405,"flow_last_seen":1605291690440,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::345f:7ca5","src_port":46646,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"aax-eu.amazon-adsystem.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
02102{"flow_id":45,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9096,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":448852,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"}
00872{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":9096,"source":"reddit.pcap","alias":"nDPId-test","flow_id":45,"flow_packet_id":6,"flow_first_seen":1605291690373,"flow_last_seen":1605291690448,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:805::2002","src_port":51006,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"adservice.google.fr","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
00455{"flow_id":45,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9097,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":448875,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gB68TACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACACxz4Buz6SvWtbO2MXgBAB8redAAABAQgKVF\/tk8LXSbo="}
00467{"flow_id":48,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9098,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":449108,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgLAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbvo6PvOtUOc0w2EoBJXgGkiAAACBAV4AQMDAwQCCArC10m3XwTqiA=="}
02107{"flow_id":46,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9099,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":449109,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABNgGPSoAFFBABwgLAAAAAAAAIAIqAcsBIEmLB5kd7IUo3\/YpAbvnyP\/5OOqbsp43gBgLMP6lAAABAQgKwtdJvQxmJz4WAwMAegIAAHYDAy7\/17WiiRblDSpQfOoKBCNx8tklS2ncQgRI6\/e2r4UiIBwq2w1JrwHlb\/2ndJG1eusXeLh3OPImRURXIKxQ06mYEwEAAC4AMwAkAB0AIGMeaissDij6D2XU1E\/g\/Y7F93upHQhVfHmiX\/zfZWV4ACsAAgMEFAMDAAEBFwMDDmdH6bvfNg6cMAFfiF+P9BuvYpKX16zf3EVvI\/Dy3I20gYyAYQ2SS4m+Cv+x713p2duvTI1Vwzh4v4\/ZSD8C3AOJlula4CW6RNYnXzu5kdvjoWB1YCZXT1eeu0+uJwIeBcokQp\/\/puxkxDooaln3NTvgtVQN9JBoCulqvpxm47Vc4bPHRSeC+PI3asSAcc5C4SWQYKdVYYPSvHNh1X1GGAgysIJiLpD08G91kisgkxFY0TodcFGChpHfLWdLYUpF\/PSjpkEfw+XvgdIUNyneyrfi2hmO2nfS7JaVALdxHuhbsJ9YjdMXYV9RjL6BSIh0N5QMrkFEEFmEqcL\/tfaP3LxYKTv3Q72XLhjBeRZi2DXvkEIBpiXGE2RQA5EkD8ZdrD4lDZVjRzE+OQrQ9Rvn5z6kWftR3SrPnAZEc+\/z6S294b\/kACtvrnXntvpaDUJsoQvIWhmeuK6xdmkaiYMpiOAqm7izHf5BfPJAa0+NF9Qe4CTGMgPymvMzpNeNVZ\/qITRJP33dMzgS0UOzm8SanXYiOTf3QaYMKjG\/ZqIfRcIESqvtaAqtpg3w9ME1B1VLXioFgBR8vVXyhMmhKFRkR0sMtvwC\/acn5Y3Xp\/oEpRdO1Kp7QWSXsvAUqDJPzNmKH96ttC08vxMlJcd\/HYzFAKDcR+mqFXoXxwLMkEGp7aMdx2\/yVxJLeqyA1jWh636WuM3S1kP5BHtuFBpRPChocCfM2MrkGgzi3Qrt8m4THAJOahciYqyWC6rYE1JsLUj\/U\/GkteLcThYToH01mUFEaQFuJj5UMcyxykDU18sMpsKYMLGZO\/8U\/cOHzdGf9Z7Yo0ZUQfdN4CBuXe5v2jPRiGdoeTGlhbIo0q1Bq8HG5EjHw\/624zkSvQ1L0Rhy6PV2mtObnRwGcyj5zD7u5Ogo7A87+7GlX\/s81J7oDAwqros0AHnFRdyJrvlGS\/EnrrZreXljifO5kb+YGeZ\/A1oUtK2JLB9WW3Mk6x4uZl0sRt99FA2R8zjwXshGGtZJef2uSY8DKL5CmU+jdCPgH4C4eRriJbgWYkbqYMtZ86HCwiMGaZi72Kw0gZXtYHXIQvjSOinEo7HndOiHkkQGEC8Y6jYWwIRGDiMe9fBE7SUgVcg6ntyXVKpXJGkbz2KuwJ\/2TA4yXNWNJb+qyMFQXkZny5NOfvb59bMVF8p9UbZA5PxztXLC5gI2tF7jIaWhTw9fC6Fcn3rjp2+yOWbjUnBORY1\/P9kn1CxZLZavucJDPz9VMHCOO\/\/p4YuDltkyHcnSp3+0FJ+fSJ71kuyIxiE3uko0XhThsVS+t3mQjEcLmbHPzSw0HF76FQLkmxx\/W7A3BYMpgx8royJuYvqbSlEVQGTcr080kiCVZHBCzPW4h5h8dDhkbOwbhoaRdM4W9B6f0PK2SK2wiUfZM9H4AkFsRg=="}
00873{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":9099,"source":"reddit.pcap","alias":"nDPId-test","flow_id":46,"flow_packet_id":6,"flow_first_seen":1605291690384,"flow_last_seen":1605291690449,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80b::2002","src_port":59336,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"adservice.google.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
02101{"flow_id":46,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9100,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":449110,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"}
02103{"flow_id":45,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9101,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":449111,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"}
02096{"flow_id":46,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9102,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":449112,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"}
00757{"flow_id":45,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9103,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":449112,"pkt_caplen":305,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":305,"pkt_l4_len":251,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAPsGPSoAFFBABwgFAAAAAAAAIAIqAcsBIEmLB5kd7IUo3\/YpAbvHPls7Z88+kr1rgBgLMOHzAAABAQgKwtdJulRf7V9tB3H5DPpTeBo0wVpYnMhUOmaxIICljpIa34pVBkZpLMoFgZl\/uikyKGGq68+zSJCNTfecY5zW9\/5+j86lCFPVd0F+gw994LnfuEM5\/tuhsyZVPkdpC4YF2pX+qW\/5Ck2bgbFYpnXwC75r2jPmrNPeZUTImQeRrmznGP0MPoJh2WkWJZgik8c0QNTvqPby7AAbmch6z5MqaxGa5ivVyLsxu1FbdJFZVyqiAzTOkskyEPZPOJpIbKrsq5T7GmY\/XwgvYRrEmUTafl\/gkbF2F5jvVtHihPI++Ntyb\/Q="}
00734{"flow_id":46,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9104,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":449113,"pkt_caplen":287,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":287,"pkt_l4_len":233,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAOkGPSoAFFBABwgLAAAAAAAAIAIqAcsBIEmLB5kd7IUo3\/YpAbvnyP\/5RxKbsp43gBgLMNPCAAABAQgKwtdJvQxmJz7mcN\/1bhMhxOy0\/ci6g3QPSjFpHbaK6ZM2uunEJ\/pU035RHYT7s2wmMK2NY0vyIygioZi1migRrvYm3RLl8Qw9BLudW1lBI9+nikcObi1DjppgKERzgQMLpzF+WsLjhBhcZ7vBMffpub8kO5ySiGCE\/9BpI6CGvOAW4R28KMUYmedt24XNP07n+TmfvxEcl+9xsPvCbUuRbaU6I6WhtRYut3AZUT3N\/vNuj8wYTfGXkwok8QHe\/KehuxZZhIEIxivGq7MBEM2\/Ux0="}
00454{"flow_id":48,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9105,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":449141,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBJW4ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICwAAAAAAACAB6OgBu5zTDYT7zrVEgBAB++0WAAABAQgKXwTqpcLXSbc="}
00456{"flow_id":46,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9106,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":449160,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCvtsACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICwAAAAAAACAC58gBu5uynjf\/+T2igBAB9efyAAABAQgKDGYnbMLXSb0="}
00456{"flow_id":46,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9107,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":449170,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCvtsACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICwAAAAAAACAC58gBu5uynjf\/+UJagBAB8uM9AAABAQgKDGYnbMLXSb0="}
00456{"flow_id":45,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9108,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":449176,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gB68TACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACACxz4Buz6SvWtbO2fPgBAB9bLhAAABAQgKVF\/tlMLXSbo="}
00456{"flow_id":46,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9109,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":449184,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCvtsACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICwAAAAAAACAC58gBu5uynjf\/+UcSgBAB696MAAABAQgKDGYnbMLXSb0="}
00456{"flow_id":45,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9110,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":449191,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gB68TACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACACxz4Buz6SvWtbO2iqgBAB9bIGAAABAQgKVF\/tlMLXSbo="}
00456{"flow_id":46,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9111,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":449198,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCvtsACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICwAAAAAAACAC58gBu5uynjf\/+UfbgBAB6t3EAAABAQgKDGYnbMLXSb0="}
01148{"flow_id":48,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9112,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":449801,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"}
00914{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":9112,"source":"reddit.pcap","alias":"nDPId-test","flow_id":48,"flow_packet_id":4,"flow_first_seen":1605291690421,"flow_last_seen":1605291690449,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80b::2001","src_port":59624,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"8a755a3fef0b189d8ab5b0d10758f68a.safeframe.googlesyndication.co","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
00542{"flow_id":45,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9113,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":455992,"pkt_caplen":150,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":150,"pkt_l4_len":96,"pkt":"qtsDr8lk5EKm5WPyht1gB68TAGAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACACxz4Buz6SvWtbO2iqgBgB9TUeAAABAQgKVF\/tmsLXSboUAwMAAQEXAwMANd4NjEUeIX74ArFsjp+bUZypXFq6lPI8rim6QYxU2JflDdSJkL4uoUd0SO3Tzk5FC5enP3u6"}
00542{"flow_id":46,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9114,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":457870,"pkt_caplen":150,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":150,"pkt_l4_len":96,"pkt":"qtsDr8lk5EKm5WPyht1gCvtsAGAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICwAAAAAAACAC58gBu5uynjf\/+UfbgBgB9ThEAAABAQgKDGYndMLXSb0UAwMAAQEXAwMANcxNdd7n6D1SmPZcrLqPmYCKaa74qo41V7hB0y4VKzGdmGo6hjvJ1yYndqthGOKxBj6SlG4s"}
00587{"flow_id":45,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9115,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":458127,"pkt_caplen":178,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":178,"pkt_l4_len":124,"pkt":"qtsDr8lk5EKm5WPyht1gB68TAHwGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACACxz4Buz6SvatbO2iqgBgB9UhjAAABAQgKVF\/tncLXSboXAwMAV+MBBQym7s2H\/DCrgROb2ZwrQ\/FB21xLJaDmMmBrKCOTrbKZm8OcMm2NY3jGeiNNfuEdz0KZrzuIEJzAfjmeAzV5sqaYsfYtFcZ\/Pih+9\/gndd6PGV693w=="}
00585{"flow_id":46,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9116,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":458289,"pkt_caplen":178,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":178,"pkt_l4_len":124,"pkt":"qtsDr8lk5EKm5WPyht1gCvtsAHwGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICwAAAAAAACAC58gBu5uynnf\/+UfbgBgB9WDkAAABAQgKDGYndcLXSb0XAwMAV9HGxsWLmQ5QoTCKjodxhKrE\/DLWsJPHHWL6HgT4T+L1xrHpr+lwSl5DcFLZ2jlzbbuuJKv16AXW+JlIoS8AV8+s8CL4N4J4acNhUHwRR1ML7O\/asDwFhw=="}
00831{"flow_id":45,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9117,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":458472,"pkt_caplen":363,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":363,"pkt_l4_len":309,"pkt":"qtsDr8lk5EKm5WPyht1gB68TATUGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACACxz4Buz6SvgdbO2iqgBgB9dPMAAABAQgKVF\/tncLXSboXAwMBEA5bIC1YuXYNoVa4kGZipWjrCUoy5VvCqWq\/3Xp9Yj7L4RKgWdM9ci7zfUevkVKWxsjYBpOrQH0FcfgGsLsCdKGu\/5XXNA+NnpQSyd2mVCc0gJUANqHILJ16he9cv8n1O6Iu5w2r6za7ODRE8zIna\/jKpUdvsVEQpKMEifNVTYv3gUV7meYY2P0p+6Yd47LFSl7UZHYRsQ4ZuRhtAL+mHMpzoPUrW3jB3pz2FW+oYKpdJEpDEw9oqGqSaCtW93bIenRf8DYSunWG5FNICVIdfNcxhup\/a8UmA4yx4YVJiHm7C+vHBe9Iw2xAZQVjh4DeK+IkBtxyIcsxLkSlKmiS2fWAYAnNdJjl6sDUKNgSmgK7"}
00456{"flow_id":45,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9119,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":482167,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgFAAAAAAAAIAIqAcsBIEmLB5kd7IUo3\/YpAbvHPls7aKo+kr2rgBALOKhYAAABAQgKwtdJ31Rf7Zo="}
00458{"flow_id":47,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9120,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":482348,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAADRffKUqAcsBIEmLB5kd7IUo3\/YpAbu2Nv\/zx\/CbDtmcgBALMDKbAAABAQgKwtdJ3AKUPyQ="}
00455{"flow_id":48,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9121,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":482349,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgLAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbvo6PvOtUSc0w+JgBALMOG0AAABAQgKwtdJ318E6qU="}
02094{"flow_id":48,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9134,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":483975,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"}
00955{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":9134,"source":"reddit.pcap","alias":"nDPId-test","flow_id":48,"flow_packet_id":6,"flow_first_seen":1605291690421,"flow_last_seen":1605291690483,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80b::2001","src_port":59624,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"8a755a3fef0b189d8ab5b0d10758f68a.safeframe.googlesyndication.co","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
00454{"flow_id":48,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9137,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":484022,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBJW4ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICwAAAAAAACAB6OgBu5zTD4n7zrn8gBAB8uYSAAABAQgKXwTqx8LXSeU="}
02100{"flow_id":48,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9138,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":484046,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"}
00454{"flow_id":48,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9139,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":484052,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBJW4ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICwAAAAAAACAB6OgBu5zTD4n7zr60gBAB6eFjAAABAQgKXwTqx8LXSeU="}
01086{"flow_id":48,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9141,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":484682,"pkt_caplen":548,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":548,"pkt_l4_len":494,"pkt":"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"}
00455{"flow_id":48,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9142,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":484695,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBJW4ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICwAAAAAAACAB6OgBu5zTD4n7zsCCgBAB7d+QAAABAQgKXwTqyMLXSeU="}
00543{"flow_id":48,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9143,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":489320,"pkt_caplen":150,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":150,"pkt_l4_len":96,"pkt":"qtsDr8lk5EKm5WPyht1gBJW4AGAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICwAAAAAAACAB6OgBu5zTD4n7zsCCgBgB9bQQAAABAQgKXwTqzcLXSeUUAwMAAQEXAwMANavSbPLcV0lXYF5mSNdTiFDKnxOg1\/0REvCqXU3KPBAoCM1n7lUa17po\/KA8M22nvSHrHXgO"}
00583{"flow_id":48,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9144,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":489533,"pkt_caplen":178,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":178,"pkt_l4_len":124,"pkt":"qtsDr8lk5EKm5WPyht1gBJW4AHwGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICwAAAAAAACAB6OgBu5zTD8n7zsCCgBgB9YxQAAABAQgKXwTqzcLXSeUXAwMAV3v7\/U+JPp9qd1ALpOBGiCL5krLY40yH2E6QQ+EaRpOYbsIvkzSHg6H653NWchAmLo3jH8F3YR8JVmYQeHzBTQMnj3YkDygNZxvE9PfOFpYwwkd7P6Exxw=="}
00934{"flow_id":48,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9145,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":489757,"pkt_caplen":436,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":436,"pkt_l4_len":382,"pkt":"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"}
02292{"flow_id":47,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9160,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":501383,"pkt_caplen":1446,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1446,"pkt_l4_len":1392,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABXAGPQBk\/5sAAAAAAAAAADRffKUqAcsBIEmLB5kd7IUo3\/YpAbu2Nv\/zx\/CbDtmcgBgLMIPFAAABAQgKwtdJ9wKUPyQWAwMAUAIAAEwDA+yYFdzW9eST+R6ukW7w9JqRWIuF\/\/vXe+\/b95tk5Yh0AMAvAAAk\/wEAAQAACwAEAwABAgAjAAAABQAAABAACwAJCGh0dHAvMS4xFgMDE0YLABNCABM\/AAXXMIIF0zCCBLugAwIBAgIQDeiPuDY50sQOtIPmNSQSdTANBgkqhkiG9w0BAQsFADBGMQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIgQ0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMDA2MTUwMDAwMDBaFw0yMTA2MTUxMjAwMDBaMCUxIzAhBgNVBAMTGmFheC1ldS5hbWF6b24tYWRzeXN0ZW0uY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCleb8Q8KytAwlr9ngnFkavcx4avpb7VotrcU6abTQNlAsCFCbcmokXmc1R8Mc9w+LaLzf31Z4dsrHsAi7eiANL\/yuxwpeMQUXC\/RvIYrAMXzOFLS9dQMEQdEN5SnPar6mLnb\/lQ2t\/EVvauG+WxcmtKpP+xCHrafO0uJeCVtin\/OOW3uEXGinxAWORHocW5d5VJ5YtexSqUXUNx8W9HJfRGNWev4WA4\/AHGxADmxN62MMzIAoHdQlftA7dZdunAD7jDxcbsXUNKW+aE9nq1vB4rln8GoXLR+o1NQRZzzK84WvUgo+9OBuUT3+1ng\/BffFCCI+qxRfQY5X+ZUM30DwIDAQABo4IC3DCCAtgwHwYDVR0jBBgwFoAUWaRmBlKge5WSPKOUByeWdFv5PdAwHQYDVR0OBBYEFO9QrAQo+YKhUJCPaB05\/MffvAqkMHwGA1UdEQR1MHOCGmFheC1ldS5hbWF6b24tYWRzeXN0ZW0uY29tghdhYXguYW1hem9uLWFkc3lzdGVtLmNvbYIbYWF4LWNwbS5hbWF6b24tYWRzeXN0ZW0uY29tgh9hYXgtZHRiLXdlYi5hbWF6b24tYWRzeXN0ZW0uY29tMA4GA1UdDwEB\/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3JsMCAGA1UdIAQZMBcwCwYJYIZIAYb9bAECMAgGBmeBDAECATB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnNjYTFiLmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3J0MAwGA1UdEwEB\/wQCMAAwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdQD2XJQv0XcwIhRUGAgwlFaO400TGTO\/3wwvIAvMTvFk4wAAAXK4+hzLAAAEAwBGMEQCIGFKTza+viDDYq9XbPKMQmX55DEfJN+l8ftdYZzW56moAiBYDH1CyVSQ+sIYNqTB7va0UuokLThNe8us0ipAMA8juwB2AFzcQ5L+5qtFRLFemtRW5hA3+9X6R9yhc5SyXub2xw7KAAABcrj6HMoAAAQDAEcwRQIgZOsIHbo0YiikgUk6LjtiIIEmMUkdw6IpbWY8tTXeIO0CIQCsKa5L8gY2i1UFeO+JAkbuYZInqHszCbxw4uIRPRkP2DANBgkqhkiG9w0BAQsFAAOCAQEAm0B9GXm8ET3n8ec5IH8SHE6yrpnY"}
00891{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":9160,"source":"reddit.pcap","alias":"nDPId-test","flow_id":47,"flow_packet_id":6,"flow_first_seen":1605291690405,"flow_last_seen":1605291690501,"flow_tot_l4_data_len":2085,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1392,"flow_avg_l4_data_len":347,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::345f:7ca5","src_port":46646,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"aax-eu.amazon-adsystem.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"49b45fc1ab090aa3a159778313fc9b9e","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
02288{"flow_id":47,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9161,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":501384,"pkt_caplen":1446,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1446,"pkt_l4_len":1392,"pkt":"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"}
00456{"flow_id":47,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9162,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":501403,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBYjGACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAA0X3yltjYBu5sO2Zz\/881AgBAB9TYuAAABAQgKApQ\/YcLXSfc="}
00456{"flow_id":47,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9163,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":501434,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBYjGACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAA0X3yltjYBu5sO2Zz\/89KQgBAB8TDiAAABAQgKApQ\/YcLXSfc="}
02287{"flow_id":47,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9164,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":502228,"pkt_caplen":1446,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1446,"pkt_l4_len":1392,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABXAGPQBk\/5sAAAAAAAAAADRffKUqAcsBIEmLB5kd7IUo3\/YpAbu2Nv\/z0pCbDtmcgBgLMK7ZAAABAQgKwtdJ9wKUPyRKKifN8\/rCrisB+QjuucTGMA0GCSqGSIb3DQEBCwUAMIGYMQswCQYDVQQGEwJVUzEQMA4GA1UECBMHQXJpem9uYTETMBEGA1UEBxMKU2NvdHRzZGFsZTElMCMGA1UEChMcU3RhcmZpZWxkIFRlY2hub2xvZ2llcywgSW5jLjE7MDkGA1UEAxMyU3RhcmZpZWxkIFNlcnZpY2VzIFJvb3QgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IC0gRzIwHhcNMTUwNTI1MTIwMDAwWhcNMzcxMjMxMDEwMDAwWjA5MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRkwFwYDVQQDExBBbWF6b24gUm9vdCBDQSAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsniAccp41eNxr0eAUHR9btjXiHb0mWj3WCFg+XSEAS+sAi2G06BDek6ypNA2ugG+jdtIyAcXNkz07ogjxz7rN\/W1GfhJaLDe17l2OB1hnqT+gjal5UpW5EXh+f20Fvp02pybNTkv+rAgUAZsetCAsqb5r+xHGY9QOAfcooc5WPi61an5SGcwlu6UeF5viaNRwDCGZqFFZrpU66PDkflI3P\/R6DAtfS10cDXXiCT3nsRZbrtzhxfyMkYouEP6tx2qyrTynyQOLUv3cVxeaf\/qlQLLOIquUDhv2\/stYhvFxx5U4XfgZ8gPnIcj1j9AIH8ggMSATD47JCaOBK5smsiqDQIDAQABo4IBMTCCAS0wDwYDVR0TAQH\/BAUwAwEB\/zAOBgNVHQ8BAf8EBAMCAYYwHQYDVR0OBBYEFIQYzIU07LwMlJQuCFmcx7IQTgoIMB8GA1UdIwQYMBaAFJxfAN+qAdcwKziIorhtSpzyEZGDMHgGCCsGAQUFBwEBBGwwajAuBggrBgEFBQcwAYYiaHR0cDovL29jc3Aucm9vdGcyLmFtYXpvbnRydXN0LmNvbTA4BggrBgEFBQcwAoYsaHR0cDovL2NydC5yb290ZzIuYW1hem9udHJ1c3QuY29tL3Jvb3RnMi5jZXIwPQYDVR0fBDYwNDAyoDCgLoYsaHR0cDovL2NybC5yb290ZzIuYW1hem9udHJ1c3QuY29tL3Jvb3RnMi5jcmwwEQYDVR0gBAowCDAGBgRVHSAAMA0GCSqGSIb3DQEBCwUAA4IBAQBiN0JcvBC1Poss6QybbEXiBwB6+cVYC7kIjD7tsyU8tW9Q5M01aqeTNJYyIalIRKuc7T20qnNt5H8WgIlszygDGINHeaMQfjBbrDuwYOB31Aim4R18XsC7+Zp7Ip2nAAl+rEYXg9ycJleZMDlilo\/t2t6qxcwbPspDaGxXFrzVDiAu\/v\/Cal0uoEptFFiHlOY5MV98c8uQiGqEEZYnpu3ZgUamfqNyAApSPoOIB2N3iWkXDzmF0qsIRU3QUTr9XV03ZEx+MLJVJEKdNrBdnBeBYfHK+RACJKvrDXSRjXtFKVA5iLKmiTUlHhRqRyMxL1ya+q2aDmJRpCqpxPk0nSEYAAR5MIIEdTCCA12gAwIBAgIJAKcOSkw0grd\/MA0GCSqGSIb3DQEBCwUAMGgxCzAJBgNVBAYTAlVTMSUwIwYDVQQKExxTdGFyZmllbGQgVGVjaG5vbG9naWVzLCBJbmMuMTIwMAYDVQQLEylTdGFyZmllbGQgQ2xhc3MgMiBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0wOTA5MDIwMDAwMDBaFw0zNDA2MjgxNzM5MTZaMIGYMQswCQYDVQQGEwJVUzEQMA4GA1UE"}
00457{"flow_id":47,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9165,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":502241,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBYjGACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAA0X3yltjYBu5sO2Zz\/89fggBAB7SuVAAABAQgKApQ\/YsLXSfc="}
02293{"flow_id":47,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9166,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":502750,"pkt_caplen":1446,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1446,"pkt_l4_len":1392,"pkt":"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"}
01195{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":9166,"source":"reddit.pcap","alias":"nDPId-test","flow_id":47,"flow_packet_id":12,"flow_first_seen":1605291690405,"flow_last_seen":1605291690502,"flow_tot_l4_data_len":6357,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1392,"flow_avg_l4_data_len":529,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::345f:7ca5","src_port":46646,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"aax-eu.amazon-adsystem.com","server_names":"aax-eu.amazon-adsystem.com,aax.amazon-adsystem.com,aax-cpm.amazon-adsystem.com,aax-dtb-web.amazon-adsystem.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"49b45fc1ab090aa3a159778313fc9b9e","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Amazon, OU=Server CA 1B, CN=Amazon","issuerDN":"CN=aax-eu.amazon-adsystem.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"5D:18:8E:CB:B7:91:5C:79:26:B5:08:49:FF:2C:24:D8:06:54:91:8B"}}
01025{"flow_id":47,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9167,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":502751,"pkt_caplen":501,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":501,"pkt_l4_len":447,"pkt":"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"}
00457{"flow_id":47,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9168,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":502763,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBYjGACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAA0X3yltjYBu5sO2Zz\/890wgBAB9SY9AAABAQgKApQ\/YsLXSfc="}
00457{"flow_id":47,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9169,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":502787,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBYjGACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAA0X3yltjYBu5sO2Zz\/897PgBAB9SSeAAABAQgKApQ\/YsLXSfc="}
00457{"flow_id":48,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9173,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":511700,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgLAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbvo6PvOwIKc0w\/JgBALONXkAAABAQgKwtdKAV8E6s0="}
00513{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9279,"source":"reddit.pcap","alias":"nDPId-test","flow_id":49,"flow_packet_id":1,"flow_first_seen":1605291690926,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:808::2001","src_port":46806,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00467{"flow_id":49,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9279,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":926655,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gDDgdACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABttYBu\/eX0dQAAAAAoAL9IKwyAAACBAWgBAIIChrDFp8AAAAAAQMDBw=="}
00513{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9280,"source":"reddit.pcap","alias":"nDPId-test","flow_id":50,"flow_packet_id":1,"flow_first_seen":1605291690926,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:808::2001","src_port":46808,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00466{"flow_id":50,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9280,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":926734,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gDtx5ACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABttgBu8JSReQAAAAAoAL9IG1mAAACBAWgBAIIChrDFp8AAAAAAQMDBw=="}
00513{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9281,"source":"reddit.pcap","alias":"nDPId-test","flow_id":51,"flow_packet_id":1,"flow_first_seen":1605291690926,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:808::2001","src_port":46810,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00466{"flow_id":51,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9281,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":926769,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gDhnPACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABttoBu0y3s24AAAAAoAL9IHV1AAACBAWgBAIIChrDFp8AAAAAAQMDBw=="}
00513{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9282,"source":"reddit.pcap","alias":"nDPId-test","flow_id":52,"flow_packet_id":1,"flow_first_seen":1605291690926,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:808::2001","src_port":46812,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00466{"flow_id":52,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9282,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":926802,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gAc2lACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABttwBu9DGzOkAAAAAoAL9INfoAAACBAWgBAIIChrDFp8AAAAAAQMDBw=="}
00513{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9283,"source":"reddit.pcap","alias":"nDPId-test","flow_id":53,"flow_packet_id":1,"flow_first_seen":1605291690926,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:808::2001","src_port":46814,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00466{"flow_id":53,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9283,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":926830,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gClWEACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABtt4BuzO7JFQAAAAAoAL9IB2IAAACBAWgBAIIChrDFp8AAAAAAQMDBw=="}
00513{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9284,"source":"reddit.pcap","alias":"nDPId-test","flow_id":54,"flow_packet_id":1,"flow_first_seen":1605291690926,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:811::200a","src_port":38166,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00466{"flow_id":54,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9284,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":926867,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gBhSQACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIEQAAAAAAACAKlRYBu2QKygYAAAAAoAL9IOOcAAACBAWgBAIICqpUDK0AAAAAAQMDBw=="}
00513{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9285,"source":"reddit.pcap","alias":"nDPId-test","flow_id":55,"flow_packet_id":1,"flow_first_seen":1605291690926,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80f::2001","src_port":36964,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00466{"flow_id":55,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9285,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":926912,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gBnVWACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGQBuyvivtsAAAAAoAL9IO7kAAACBAWgBAIICriVOzQAAAAAAQMDBw=="}
00513{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9286,"source":"reddit.pcap","alias":"nDPId-test","flow_id":56,"flow_packet_id":1,"flow_first_seen":1605291690926,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80f::2001","src_port":36966,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00466{"flow_id":56,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9286,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":926944,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gDhWZACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGYBu2Ns154AAAAAoAL9IJ6VAAACBAWgBAIICriVOzQAAAAAAQMDBw=="}
00513{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9287,"source":"reddit.pcap","alias":"nDPId-test","flow_id":57,"flow_packet_id":1,"flow_first_seen":1605291690926,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80f::2001","src_port":36968,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00466{"flow_id":57,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9287,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":926978,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gB5miACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGgBu54QLUEAAAAAoAL9IA5NAAACBAWgBAIICriVOzQAAAAAAQMDBw=="}
00513{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9288,"source":"reddit.pcap","alias":"nDPId-test","flow_id":58,"flow_packet_id":1,"flow_first_seen":1605291690926,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80f::2001","src_port":36970,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00466{"flow_id":58,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9288,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":926998,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gCQMiACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGoBuxhoCyUAAAAAoAL9ILYPAAACBAWgBAIICriVOzQAAAAAAQMDBw=="}
00468{"flow_id":49,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9293,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":952219,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgIAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbu21pGefV\/3l9HVoBJXgDRiAAACBAV4AQMDAwQCCArC10u2GsMWnw=="}
00455{"flow_id":49,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9294,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":952238,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDDgdACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABttYBu\/eX0dWRnn1ggBAB+7hZAAABAQgKGsMWucLXS7Y="}
01147{"flow_id":49,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9298,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":953297,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"}
00820{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":9298,"source":"reddit.pcap","alias":"nDPId-test","flow_id":49,"flow_packet_id":4,"flow_first_seen":1605291690926,"flow_last_seen":1605291690953,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:808::2001","src_port":46806,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"cdn.ampproject.org","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
00467{"flow_id":50,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9300,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":954541,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgIAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbu22KVwltPCUkXloBJXgMhIAAACBAV4AQMDAwQCCArC10u9GsMWnw=="}
00454{"flow_id":50,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9301,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":954562,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDtx5ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABttgBu8JSReWlcJbUgBAB+0w+AAABAQgKGsMWu8LXS70="}
00467{"flow_id":51,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9302,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":954643,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgIAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbu22it1t9ZMt7NvoBJXgClQAAACBAV4AQMDAwQCCArC10u9GsMWnw=="}
00467{"flow_id":52,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9303,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":954643,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgIAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbu23LTmo6vQxszqoBJXgBZ9AAACBAV4AQMDAwQCCArC10u9GsMWnw=="}
00454{"flow_id":51,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9304,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":954649,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDhnPACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABttoBu0y3s28rdbfXgBAB+61FAAABAQgKGsMWu8LXS70="}
00454{"flow_id":52,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9305,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":954655,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gAc2lACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABttwBu9DGzOq05qOsgBAB+5pyAAABAQgKGsMWu8LXS70="}
01149{"flow_id":50,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9306,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":954747,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"}
00820{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":9306,"source":"reddit.pcap","alias":"nDPId-test","flow_id":50,"flow_packet_id":4,"flow_first_seen":1605291690926,"flow_last_seen":1605291690954,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:808::2001","src_port":46808,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"cdn.ampproject.org","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
01147{"flow_id":51,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9307,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":954937,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"}
00820{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":9307,"source":"reddit.pcap","alias":"nDPId-test","flow_id":51,"flow_packet_id":4,"flow_first_seen":1605291690926,"flow_last_seen":1605291690954,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:808::2001","src_port":46810,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"cdn.ampproject.org","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
01148{"flow_id":52,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9308,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":955129,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"}
00820{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":9308,"source":"reddit.pcap","alias":"nDPId-test","flow_id":52,"flow_packet_id":4,"flow_first_seen":1605291690926,"flow_last_seen":1605291690955,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:808::2001","src_port":46812,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"cdn.ampproject.org","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
00467{"flow_id":53,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9309,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":955375,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgIAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbu23lfa6eczuyRVoBJXgHLsAAACBAV4AQMDAwQCCArC10u9GsMWnw=="}
00455{"flow_id":53,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9310,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":955404,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gClWEACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABtt4BuzO7JFVX2unogBAB+\/bgAAABAQgKGsMWvMLXS70="}
00467{"flow_id":54,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9311,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":955522,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgRAAAAAAAAIAoqAcsBIEmLB5kd7IUo3\/YpAbuVFgHH2llkCsoHoBJXgJ6iAAACBAV4AQMDAwQCCArC10u9qlQMrQ=="}
00454{"flow_id":54,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9312,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":955530,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBhSQACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIEQAAAAAAACAKlRYBu2QKygcBx9pagBAB+yKXAAABAQgKqlQMysLXS70="}
01146{"flow_id":53,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9313,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":955637,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"}
00820{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":9313,"source":"reddit.pcap","alias":"nDPId-test","flow_id":53,"flow_packet_id":4,"flow_first_seen":1605291690926,"flow_last_seen":1605291690955,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:808::2001","src_port":46814,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"cdn.ampproject.org","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
01151{"flow_id":54,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9314,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":955751,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"}
00843{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":9314,"source":"reddit.pcap","alias":"nDPId-test","flow_id":54,"flow_packet_id":4,"flow_first_seen":1605291690926,"flow_last_seen":1605291690955,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:811::200a","src_port":38166,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.GoogleServices","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"fonts.googleapis.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
00468{"flow_id":55,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9315,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":956447,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgPAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbuQZEy\/C8or4r7coBJXgC2BAAACBAV4AQMDAwQCCArC10u+uJU7NA=="}
00467{"flow_id":56,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9316,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":956447,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgPAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbuQZgWfUkJjbNefoBJXgN3ZAAACBAV4AQMDAwQCCArC10u+uJU7NA=="}
00454{"flow_id":55,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9317,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":956458,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBnVWACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGQBuyvivtxMvwvLgBAB+7F0AAABAQgKuJU7UsLXS74="}
00454{"flow_id":56,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9318,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":956464,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDhWZACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGYBu2Ns158Fn1JDgBAB+2HNAAABAQgKuJU7UsLXS74="}
01149{"flow_id":55,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9319,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":956563,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"}
00837{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":9319,"source":"reddit.pcap","alias":"nDPId-test","flow_id":55,"flow_packet_id":4,"flow_first_seen":1605291690926,"flow_last_seen":1605291690956,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80f::2001","src_port":36964,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"tpc.googlesyndication.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
01148{"flow_id":56,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9320,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":956668,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"}
00837{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":9320,"source":"reddit.pcap","alias":"nDPId-test","flow_id":56,"flow_packet_id":4,"flow_first_seen":1605291690926,"flow_last_seen":1605291690956,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80f::2001","src_port":36966,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"tpc.googlesyndication.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
00468{"flow_id":58,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9321,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":957467,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgPAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbuQan0Owi4YaAsmoBJXgA33AAACBAV4AQMDAwQCCArC10u\/uJU7NA=="}
00467{"flow_id":57,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9322,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":957467,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgPAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbuQaPhCx3meEC1CoBJXgOW1AAACBAV4AQMDAwQCCArC10u+uJU7NA=="}
00454{"flow_id":58,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9323,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":957477,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCQMiACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGoBuxhoCyZ9DsIvgBAB+5HpAAABAQgKuJU7U8LXS78="}
00454{"flow_id":57,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9324,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":957484,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gB5miACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGgBu54QLUL4Qsd6gBAB+2moAAABAQgKuJU7U8LXS74="}
01150{"flow_id":58,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9325,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":957577,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"}
00837{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":9325,"source":"reddit.pcap","alias":"nDPId-test","flow_id":58,"flow_packet_id":4,"flow_first_seen":1605291690926,"flow_last_seen":1605291690957,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80f::2001","src_port":36970,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"tpc.googlesyndication.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
01148{"flow_id":57,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9326,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":957682,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"}
00837{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":9326,"source":"reddit.pcap","alias":"nDPId-test","flow_id":57,"flow_packet_id":4,"flow_first_seen":1605291690926,"flow_last_seen":1605291690957,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80f::2001","src_port":36968,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"tpc.googlesyndication.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
00455{"flow_id":49,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9329,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":983708,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgIAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbu21pGefWD3l9PagBALMKz6AAABAQgKwtdL2hrDFro="}
00455{"flow_id":50,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9342,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":987243,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgIAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbu22KVwltTCUkfqgBALMEDkAAABAQgKwtdL3RrDFrs="}
00455{"flow_id":51,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9343,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":989609,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgIAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbu22it1t9dMt7V0gBALMKHqAAABAQgKwtdL3hrDFrs="}
02092{"flow_id":49,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9344,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":990862,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABNgGPSoAFFBABwgIAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbu21pGefWD3l9PagBgLMNLzAAABAQgKwtdL4BrDFroWAwMAegIAAHYDA36OILDTPGPpThReB3qawdzc+8ModY5sz6dKgAy5UTz7IDI6n9jVTXE+7b4jG8xDV1LuLRTUARgCyh8fXh42V1VjEwEAAC4AMwAkAB0AIKb7TxZlLfXhHxUcpFoHIR+tf8HFJ46mwItrHXJGk604ACsAAgMEFAMDAAEBFwMDHFrW1gBFr+UU\/Gyk71woNE6PnZpc+DzGDmCn9YDCgQj6c\/ucg+bTZrteQFWKBAiAZliV2QbMCrB54l7dza4Cx7\/L7The++JNe1GwdsCw2aQE0Y2A5LCwwQDYd0oIyePfcpL4hs191txSWPssF1q3j++i0mR5CCPSEYT8EE6Evi6ST3gc9KyNYuXrUJf1OGJpBZRuyAUedyp3ZqH\/8xcsDDjTif3U3vfK4fk1IpmQcwTP\/ItmSkN01Y3sBgZZOTmZHtxJ6mFQ5WB41EVRDT1tM+hXYgGHVvC\/hDI8duczVG6PbtSe0MG0uAeE8a74L5psd7N\/x48Y3qdDH05tOlNgBJNT9HPOT4KopAH5LqaDOflG+5NsZKqcMrgtgo8ZCVQbSSSj4ZRPw5dl94ORMafRG\/+8rNew1gaD30iaBr003OVwMY\/DGdJ7Cv4avYCZzjDCDenrG964w1s9dTkUrRdflAOSm9F5jMyPSFY0DxJLbqt8Rqhi4iQVLEYqk66+KvCi88aQrOjt6qbe01oGZMHI5czVuq0L3A86nE5KVdjN1Ch9lbkoHV2aTNOkrGzRO5u7m0kCLkJ598yBxq9fb4bjPaQg1rLkN3kVRnThjpZ1xopWatpTjyWdMmnP2VrgX\/9EpSqGVYvii7zd89rZDs3UQRsRuu7aPoF4wt4Y\/Ybvda2wxjVCivnsXghmah+3pkAZMs3hGXOcrLmatPDASeA5LrmbNlZnZ1Zj2R9R3DO3G4mN5YRHwpPTar8GqtfU2Xo1lXbt4YQTVWRp4IKN0OqkMdkbgWro3LWwdWS4P4FB9GhwRC1cVffKPdaZl3dmVgkQS\/H5seOGdZSSk\/NUw7wYXdzRmEru8uoubkA8RMkZ0vjJT4Z1FSNWKcOLVQXdcafYa2yRfBcnS4Ps+xx8+47aaKKkL1iR1Ckkc3evSt755sQmkDYEqrqPO6cAVAW4wcWUv4gnmf7Sbr7xjTWb9KILBkayyg+qbXI6H+iicAf0gIHJ6HZt7yIeGjxIpEXNE7ZaoPgN6CUPkRb7JCSsXgnV9zzhQkXrxvugVydEgH+YX2zpcvaV6uxBIOrjbBAPRTbTqAe5QBI6Qp1cI0JUQCiq502x7OJ3BxP9W3jy00H\/5IVTEYf7\/n07p\/ijgkT0sx33aHMHskNv5FWC77f7niC8OfVL+Cue+Se3WaBASwC3bnl1F+74N9QWrJMoEwqy0H1Hfe5Fs+gAz1CsC765SqOVxIEtACfxo8LmxZTzdq0HtZo8tKFepVhOZonRc1hZ5b77iZq9E0JNp2LTyUwEiGLX6lhhFEUGFCK6rAR2h1J157aLGvA8oJQCUS8CRGWaW2XIi4cRWFK4ZRGM7uKLQxi\/n7uxf7Ju72YMCl1VibfYg4aE7z\/Lby7d\/Xbiz3Cmbn2T7i3eF1lLX05Y3jBSqexkVg=="}
00861{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":9344,"source":"reddit.pcap","alias":"nDPId-test","flow_id":49,"flow_packet_id":6,"flow_first_seen":1605291690926,"flow_last_seen":1605291690990,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:808::2001","src_port":46806,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"cdn.ampproject.org","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
02100{"flow_id":49,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9345,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":990863,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"}
00455{"flow_id":49,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9346,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":990883,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDDgdACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABttYBu\/eX09qRnoIYgBAB9bFSAAABAQgKGsMW38LXS+A="}
00455{"flow_id":49,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9347,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":990919,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDDgdACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABttYBu\/eX09qRnobQgBAB8qydAAABAQgKGsMW38LXS+A="}
02098{"flow_id":49,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9348,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":990990,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"}
02102{"flow_id":49,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9349,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":990991,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"}
02096{"flow_id":49,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9350,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":990992,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"}
02094{"flow_id":49,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9351,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":990992,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"}
00657{"flow_id":49,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9352,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":990993,"pkt_caplen":234,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":234,"pkt_l4_len":180,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAALQGPSoAFFBABwgIAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbu21pGembD3l9PagBgLMLDYAAABAQgKwtdL4BrDFrpzOADvEFIyS2jokc7Yshgt7jJFkX3YKXvQ5VzVWLFWS4G32VuzE32WbxYI+HC\/5SI3dQ\/kpep3unsjkwp3HosjWMHNW6GcwJQUdeSXIFqoob0MAaAbfTSoF5dQCnNsQCPUrFnued4nxFlGvPTvQkjMFBYtHM1qG770t6OeCjEucsPkg7l8llAIInZZXkr9tf3xTqVU"}
00456{"flow_id":49,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9353,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":991006,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDDgdACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABttYBu\/eX09qRnouIgBAB66fsAAABAQgKGsMW38LXS+A="}
00455{"flow_id":52,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9355,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":991527,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgIAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbu23LTmo6zQxs7vgBALMI8TAAABAQgKwtdL4RrDFrw="}
00455{"flow_id":53,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9356,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":992341,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgIAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbu23lfa6egzuyZagBALMOuCAAABAQgKwtdL4RrDFrw="}
00513{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9357,"source":"reddit.pcap","alias":"nDPId-test","flow_id":59,"flow_packet_id":1,"flow_first_seen":1605291690992,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80f::2001","src_port":36972,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00466{"flow_id":59,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9357,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":992851,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gDPazACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGwBu4uuzGcAAAAAoAL9IIFCAAACBAWgBAIICriVO3YAAAAAAQMDBw=="}
00455{"flow_id":54,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9358,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":993446,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgRAAAAAAAAIAoqAcsBIEmLB5kd7IUo3\/YpAbuVFgHH2lpkCswMgBALMBc4AAABAQgKwtdL4qpUDMo="}
02095{"flow_id":50,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9359,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":994995,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"}
00861{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":9359,"source":"reddit.pcap","alias":"nDPId-test","flow_id":50,"flow_packet_id":6,"flow_first_seen":1605291690926,"flow_last_seen":1605291690994,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:808::2001","src_port":46808,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"cdn.ampproject.org","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
02095{"flow_id":50,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9360,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":994996,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"}
02091{"flow_id":50,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9361,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":994997,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"}
02105{"flow_id":50,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9362,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":994997,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"}
02106{"flow_id":50,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9363,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":994998,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"}
00455{"flow_id":50,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9364,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":995013,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDtx5ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABttgBu8JSR+qlcJuMgBAB9UU5AAABAQgKGsMW48LXS+M="}
00455{"flow_id":50,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9365,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":995040,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDtx5ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABttgBu8JSR+qlcKBEgBAB8kCEAAABAQgKGsMW48LXS+M="}
00455{"flow_id":50,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9366,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":995051,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDtx5ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABttgBu8JSR+qlcKT8gBAB6zvTAAABAQgKGsMW48LXS+M="}
00455{"flow_id":50,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9367,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":995059,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDtx5ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABttgBu8JSR+qlcKm0gBAB5DciAAABAQgKGsMW48LXS+M="}
00455{"flow_id":50,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9368,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":995066,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDtx5ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABttgBu8JSR+qlcK5sgBAB2zJzAAABAQgKGsMW48LXS+M="}
02094{"flow_id":51,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9373,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":996121,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"}
00861{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":9373,"source":"reddit.pcap","alias":"nDPId-test","flow_id":51,"flow_packet_id":6,"flow_first_seen":1605291690926,"flow_last_seen":1605291690996,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:808::2001","src_port":46810,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"cdn.ampproject.org","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
02099{"flow_id":51,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9374,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":996122,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"}
02097{"flow_id":51,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9375,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":996123,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"}
02096{"flow_id":51,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9376,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":996124,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"}
02102{"flow_id":51,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9377,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":996125,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABNgGPSoAFFBABwgIAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbu22it1yrdMt7V0gBgLMNycAAABAQgKwtdL5BrDFrtrWlJvjeV1zU75mK0ucBXR0pFD8KyV6KsZ+ZSv06xGSRZRb6ITCLnOu2qwxUL3Ob19d9+l7Ev0SGNINORmvum6+xn\/ANw2lwiPtSqQ9g\/Bry2\/IaJmKNkQawt\/8FDfRIXZrxqJLuYja3rb9KVwMa2TWJK1mKaB9cnpDoGJgOsCvwiwgHKf71mAuchMtZYzXYEZUhkBg\/Kj6uuhkArIjbuaIQCDJAkXgyF\/zMn+UTLIylg6gkANZuDX\/Wq6l4qhoUeOASkxChbAuHdCud8gayAwMFHIS3RmoYUN3QL\/9ibCSpUuF6\/2FopwDWG\/dCpu+xnK2UqjJDZcbF6JLrMTynVoAsB528zMlhElkglpGGFFVfHkO+86jZjIIx2EUg\/fyoIP07yRh3N7dBAaekBBxfd9tClQ+29uEx3xyveEMW4R2tiznk26ydFwE3ZKrxnRInCQr0JBrZAJFqrJ42c4v51pG0RLkcXJmW\/pVkKw9fFgWQHNwZTPpwxuOnAIVCRjQaYGxhKTpruNJBDJHqvA1w43j\/ZniH5s11zgnQNI7fjaFmTAooW\/2SKm0Pt1UinZeAgndzs5zc4Ro6oXySdZi7ItYSz6WJzUIAxIj+d4Z2ZNQxhezmfm4aRGQ4M9Mak174lLlM84x0WzTBwQH1PXlMJIURAZKuj0odMAvTdNCVGMD5\/9KZHcbaHQaqITA7clB7ohIipGIld7UxAMKTVoFWel3clhHKeO+ifzIB9B7Gy+VMVzXtdqez8Uz9vyGxQ0DUSD5s5UFtBTe8dmSx4gSQ8QrlsXgqXqh\/o75EPadzhVgliLuPcGLFibM2d3nWCEKP4nCTKy65SMkOtXc5deCuHXn9JYQIjhcn5aRUaUlYfE48lD2kbgnw6Q+gfyhdLNco1x7X1thvItzB8jxpuXDQY13aNi2dbu+J5REvN3blaELX1w+n+IwQ+Jl3aa5HnIkcMnpZaRfI8lcvS5rz3OmoiMPMbpAO8iVafapnnDSWOfbda0yLAY3ImxckgmR\/Y54lDNjEUomiWU2\/m5pnIM\/KmGeKieN6SVnQvFknWTRO0IhhHObxQMJgafGi2IlfLLmaaE8wXjUbYlHlteq5DDBd7yfFgH7wiwTfntwWqaxs7MR7w0Zuac05JzjEO1BbzrOC5afs5CzZnN56iBH\/h+7o99BxcfpKm0AT0UOApOy2un93wJ7hmMWS44gTsWaBF5x1HImuvOMIDsMAXfLrQW+xHxR8vE5bDdAJVg2YTMu01yxXQRbY9gfPmmHdv4B7OWOF2RnNcK73uP00bjv\/CD\/YobO33as5yv\/MYSi4Tu3zeMC2ZtMFMugyFiHOK29u+5ukt8H+SAYwZcmML5TfR+6AEz3jxeJDyGV7ZDiU28UEnbTEd8T0\/7gwdA8Tw5uWMDdzfh7eQYVtU6Z40iDbRrvTNkGJr9x8MOblEIj5s\/r28ulz06k6eOUu\/BaEcNqhEvBsdJ\/tyArhDCQ6fWdpFm1mig3WImSxO8vNPE6iDEdbCMpAeH2nCViiFacJbMh4c1\/QoWICrniq4AehLBIXtaqisffpEfuBxcUwNne9rzvluPnNDV9gG8GEtIHDm0JUE2RyOLSG4Emp8UdQ=="}
02089{"flow_id":51,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9378,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":996126,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"}
00455{"flow_id":51,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9379,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":996151,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDhnPACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABttoBu0y3tXQrdbyPgBAB9aY9AAABAQgKGsMW5cLXS+Q="}
00455{"flow_id":51,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9380,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":996179,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDhnPACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABttoBu0y3tXQrdcFHgBAB8qGIAAABAQgKGsMW5cLXS+Q="}
00456{"flow_id":51,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9381,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":996193,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDhnPACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABttoBu0y3tXQrdcX\/gBAB65zXAAABAQgKGsMW5cLXS+Q="}
00455{"flow_id":51,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9382,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":996200,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDhnPACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABttoBu0y3tXQrdcq3gBAB5JgmAAABAQgKGsMW5cLXS+Q="}
00456{"flow_id":55,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9386,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":996246,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgPAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbuQZEy\/C8sr4sDhgBALMKYUAAABAQgKwtdL5LiVO1I="}
00455{"flow_id":56,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9388,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":996826,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgPAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbuQZgWfUkNjbNmkgBALMFZsAAABAQgKwtdL5biVO1I="}
00455{"flow_id":57,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9390,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":998160,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgPAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbuQaPhCx3qeEC9HgBALMF5GAAABAQgKwtdL5riVO1M="}
02098{"flow_id":52,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9391,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":998161,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"}
00861{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":9391,"source":"reddit.pcap","alias":"nDPId-test","flow_id":52,"flow_packet_id":6,"flow_first_seen":1605291690926,"flow_last_seen":1605291690998,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:808::2001","src_port":46812,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"cdn.ampproject.org","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
00455{"flow_id":58,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9392,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":998162,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgPAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbuQan0Owi8YaA0rgBALMIaIAAABAQgKwtdL5riVO1M="}
00454{"flow_id":52,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9393,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":998182,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gAc2lACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABttwBu9DGzu+05qhkgBAB9ZNmAAABAQgKGsMW58LXS+Y="}
02099{"flow_id":52,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9394,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":998224,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"}
02095{"flow_id":52,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9395,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":998225,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"}
00455{"flow_id":52,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9396,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":998232,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gAc2lACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABttwBu9DGzu+05q0cgBAB8o6xAAABAQgKGsMW58LXS+Y="}
00455{"flow_id":52,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9397,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":998242,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gAc2lACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABttwBu9DGzu+05rHUgBAB64oAAAABAQgKGsMW58LXS+Y="}
02099{"flow_id":52,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9398,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":998780,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"}
02096{"flow_id":52,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9399,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":998781,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"}
00455{"flow_id":52,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9400,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":998804,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gAc2lACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABttwBu9DGzu+05raMgBAB5IVPAAABAQgKGsMW58LXS+Y="}
00455{"flow_id":52,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9401,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":998826,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gAc2lACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABttwBu9DGzu+05rtEgBAB3oCdAAABAQgKGsMW58LXS+Y="}
02106{"flow_id":53,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9406,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":999060,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"}
00861{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":9406,"source":"reddit.pcap","alias":"nDPId-test","flow_id":53,"flow_packet_id":6,"flow_first_seen":1605291690926,"flow_last_seen":1605291690999,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:808::2001","src_port":46814,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"cdn.ampproject.org","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
02093{"flow_id":53,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9407,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":999061,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"}
00455{"flow_id":53,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9408,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":999074,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gClWEACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABtt4BuzO7JlpX2u6ggBAB9e\/TAAABAQgKGsMW6MLXS+c="}
00454{"flow_id":53,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9409,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":999093,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gClWEACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABtt4BuzO7JlpX2vNYgBAB8useAAABAQgKGsMW6MLXS+c="}
02092{"flow_id":53,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9410,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":999345,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"}
02100{"flow_id":53,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9411,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":999346,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"}
00455{"flow_id":53,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9412,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":999362,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gClWEACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABtt4BuzO7JlpX2vgQgBAB6+ZtAAABAQgKGsMW6MLXS+c="}
00455{"flow_id":53,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9413,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":999380,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gClWEACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABtt4BuzO7JlpX2vzIgBAB5OG8AAABAQgKGsMW6MLXS+c="}
02098{"flow_id":53,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9414,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":999501,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"}
02105{"flow_id":53,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9415,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":999502,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"}
02101{"flow_id":54,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9417,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":999503,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"}
00884{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":9417,"source":"reddit.pcap","alias":"nDPId-test","flow_id":54,"flow_packet_id":6,"flow_first_seen":1605291690926,"flow_last_seen":1605291690999,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:811::200a","src_port":38166,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.GoogleServices","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"fonts.googleapis.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
00454{"flow_id":54,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9421,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":999552,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBhSQACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIEQAAAAAAACAKlRYBu2QKzAwBx98SgBAB9RuJAAABAQgKqlQM9sLXS+g="}
02099{"flow_id":54,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9422,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":999578,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABNgGPSoAFFBABwgRAAAAAAAAIAoqAcsBIEmLB5kd7IUo3\/YpAbuVFgHH3xJkCswMgBgLMJ1pAAABAQgKwtdL6KpUDMpAFeHdssfdxb9MImKe6uM\/Z+81ffR4UINiyhAWzkqEms3ugRpI3WNYxD5oYKG942wqE8ZJGV9wEzMg0U64IbWDFKQ0e8y2HEzZCQCoTxGu4e73m0Rr82hKHso8GUbSc3CtYxuvwju1GftthiyLgg8E\/TDqPIqTYBJN1vuEvaXc2Czw0qomxPi0uV8f5h1w\/ZGSXNg9\/4raYZIrh0iVdyJExYS76rzKgs8pbQz\/cLa5qJszkgx+VyVN2f04pNxG8CqJME5\/Af1cGgJi8SzQOKbh+MbgRm9rhWEsJeq4rKL9Z0BDGEXdQ7gyDXBym1wRBBEJvZ8MXyD6Up2Obsa5awKiYqv8wnIWBH3rgx22kFj5FFeS3n4\/1JsDxKRMQUwxa9bXQ7cONCf5LnlKRCBvzsB9AuQ8HgIXLCucWcDrmct+vlrW0uCHgvlkSSpA6raRQ0WQVPhDeZfPulpWaRBfAyI\/VI6zcWuLNcBLsfT8PPuMiWJ7rriYGcU0o88+CWlheas9oIvTP+j6uQWRfhJymFFKyPk7H0Mu6zFJvRoVyiAkYPRPQRvV3Ik5MJpI25UNNXAPbgV8lKeb1D5mBv3IEMEsVYh\/xYs3NzHcMflyD1LH88V8kcYRQrBNjE7vvP8KBxzBaIUwL3WPCp9tvrDlifh7AhzKGRKxBUNrCTlxLsMrtjzeZV06DX5JapdB0Z\/RQVF2hCXi08JtHrP7V1iR1KQfIf4zfU27TuYiBTx2g8d3bB77qQ9KAN0YKAtGeOVDnlormxj+B958gF87DV0dUWm0Ii7VHKL\/Q6Y2r6fdK30CA+KkztsSyJ248A3O05kZhEiMIoQyG4s3wlWHhE+E4UQQsOim2kAvMBAtLCAnTXTT\/STsFumohVCxeaYTwdfpBK4FB3azRdPaG7FWnE4UCzHC9o8PGmAE30jbUXWbYi+j9r6lk2NDenpkiQDg4bBgKnAcSHVWFksUmXIwmJYazR4hvq1cLp7lzwi\/P3Tllc+2BRjD6D5AF0d+Zg82OBCWXyGUWrE25DMlhy493mf22th+jmPHPPlZ7xi09dLYgp6ztJuhx+oqiRu2sFisIrJdWRPT3bDNqJBXX+36nbYGKbHdLQ1ZXQL9iXc+jLsEYnCJj00CBbC+UDVK8HwAOwSiBk77rTRyc5os3\/e58lRGoVa9QKX1ohnD99KP8pvYIlUUy68gyFow2s144n1HSQHOc5UoV5r9EnsvZK7YfY+wS+qEuvcHl2zDdB77eotQ6wanED67SQEJi6UtIXthEXxGdICrIyU72KWN3yE5E9a\/Y1sBXgpcR\/2xNCau2eGEsn+OMXJYKc3vRHrD53fBL7k5Wan8JVh8kf\/JbWbyGqV4s5wcU\/2zdtWSLzD+q5gzfMSycVzDosKt067Qkm4w4rSOCA6d43Uu\/fMudT\/dt3rU28FrbrfUU8U1OHXKWduD3P2yKE2JGIYaLh+k2K8LzsmQburh+gsgc5hgxa1mMXvTlkikd7vmbOMhQL\/c+YUX\/74SwOZ7Y90VYgaiLY\/cp\/ntCq2y1elj8j0e1szVVch60guzsiaQWXFIKk\/wudatWN0aFfKk0AgYSFmG+2VB37\/WZiOxfZBPN7krbQ=="}
00454{"flow_id":54,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9423,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":999585,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBhSQACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIEQAAAAAAACAKlRYBu2QKzAwBx+PKgBAB7BbaAAABAQgKqlQM9sLXS+g="}
01139{"flow_id":54,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9424,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":166,"pkt_caplen":586,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":586,"pkt_l4_len":532,"pkt":"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"}
00452{"flow_id":54,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9425,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":180,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBhSQACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIEQAAAAAAACAKlRYBu2QKzAwBx+W+gBAB6RToAAABAQgKqlQM98LXS+g="}
02097{"flow_id":55,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9427,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":2443,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"}
00878{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":9427,"source":"reddit.pcap","alias":"nDPId-test","flow_id":55,"flow_packet_id":6,"flow_first_seen":1605291690926,"flow_last_seen":1605291691002,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80f::2001","src_port":36964,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"tpc.googlesyndication.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
02102{"flow_id":55,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9428,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":2444,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"}
00781{"flow_id":55,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9429,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":2445,"pkt_caplen":325,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":325,"pkt_l4_len":271,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAQ8GPSoAFFBABwgPAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbuQZEy\/FTsr4sDhgBgLMF2vAAABAQgKwtdL6riVO1KFCUBjSZHSTS7FYDB69m5ne2IcPwkugv9ufCPNKlhnkKiGdCY0\/TjFV1mwZRTbi4FN5your0dzLXXaobS6QQiMKB6ZssDxSPbQUpqNTwD1ghfndMUOxdvzSRWHuJbgIOOOkBTfOwzw9zuAsyGt7orYshsE9funI9KJ8SpHbhaHaXeu6wo0hnlzXEqZLrZfSDaYlwaqEY2GU4FY0aAzE+zp5T4VrDN96JJZyvwW\/g1Dyz1iICtiDTHEnmffmKalxvdpWwFpA\/CcKy33yW99Eoq4k\/QpOU1dWZ88FCRMl82WbQ2bjAxERDK6oX32whVlDQ=="}
00452{"flow_id":55,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9430,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":2460,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBnVWACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGQBuyviwOFMvxCDgBAB9apjAAABAQgKuJU7gMLXS+o="}
00453{"flow_id":55,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9431,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":2480,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBnVWACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGQBuyviwOFMvxU7gBAB8qWuAAABAQgKuJU7gMLXS+o="}
00453{"flow_id":55,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9432,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":2490,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBnVWACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGQBuyviwOFMvxYqgBAB8aTAAAABAQgKuJU7gMLXS+o="}
02096{"flow_id":56,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9434,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":3085,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"}
00878{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":9434,"source":"reddit.pcap","alias":"nDPId-test","flow_id":56,"flow_packet_id":6,"flow_first_seen":1605291690926,"flow_last_seen":1605291691003,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80f::2001","src_port":36966,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"tpc.googlesyndication.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
02086{"flow_id":56,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9435,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":3086,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABNgGPSoAFFBABwgPAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbuQZgWfVvtjbNmkgBgLMHb5AAABAQgKwtdL7LiVO1K4OIwPpoULkgqNX2ZISP6NqcXKYiebCh9Wx0IUMWFutSzm7XcJ8x9pW9cISKPUY+6sEKJxOnN8meQCL8z78UcVeVQAFOkcysNDRFjMtHw7RrJULpuobSlMPoefxatrOeq0kGYicskxUGAitiVaLIXOrUTPfKPZ6C15cW9UzqXYLEJzxzx06NqOvhLxnf2haihXb2WVxc+KzIS2BdShwS\/6oT8kORwULX4FdHERvfM1395My4xYWSm9YyXLWtToc+CLsC7Hxv9dKVs+uOerzlw0VjcAZ2f9WENn\/Rv7OvN8MOMvPdGjib3d0FMKFdTtTmhna+A1UW1TqvF1rlbocaFNrpV9dvGP2HurirOwiQY\/7H7qTXg16K7Tu4ff2MKZz9BF676uN9M4Axe2ofFLPEsmtpQ7sng1sbIk28bhbJXvKx3VfRYHJK4zBqcIRKYYeP3LKV2e455FNV9opcy57oxiuVR1sVOqaKn7F9qDGKJUB4uKCV4w0iRcmtZ4h5aSBJCf81asUoTvBy5EGdPtHNpxHD+qQxFH5VrMPflGZcyWVLuductTejfUsEcbQXcmv7roDfb50X2ij6dpRuZf2\/SmaKGa\/E\/m5rBCehuAQmnxkFq6L3KDMsqOSKfOGZeVSY6LR3aixjGw3c+yYgOL+phG970SVBuCdEZtZTYxkzIuWR90IJHGArzWAuDrR\/N6McuxsDkfpup\/n8qKMSQRUrlfgTDWqvTmGPgBD+pJdZ2kyxbXtyvEccfZeL6kVzNcCpyUVj3poKIHozQihoM6EQQEoFaDuL81CkHBlTZJNQJLF8ghZCNazs8tCC8J\/PsKPUoB7U8nruxcwSoob+zeBGtd6Tw8\/mwb5nWJ5HKI+c5ppakIsqTvjCH8Wh\/qbeY4rTzBiM6NCdvMYkeYHRjwAQwfeVlFLj0So1NHpDyXe2PL9d4\/o0v6dN+7z8YwyaWLm4jahBX8qhQzZFs0vBdGRT4qccWKceod5Ls6kHOUMcIaz3YRcxgvFlYo2wBp1f7C9ao8EE9zR5goSia1cd3YBUxGf5QexEXziFYrRkkcb26KRyO22hbs+How+5sPJSTHEF7HVE5ju\/hk4p6VuM6+KcIoizlbgpvRiBnJcLa1+\/zbrSz\/MxDp+YjB8aqnbbqr97u8F3RkcjsSCBjOhtPTZ+4EoSrciHSB0KTk28TbWS+QizHQtSNUmATJ5LP6yVqtFfw52A7hNNbb8Gvm20GXzeRmCKjhP5BGZrfMSzje8aun5zCQqDJzHKZK93Ikb8Jg2XSjAS+v2mzwEkANDmXmnvju5ScimtVS35lk6JBwYFgtOxNIb4h9bqlTmZ4Tq1UeSES64qWIk7RV2OaAfzNVoAuTzbJ79Q1DVDUGI0fQE7McqJS92xnnNbrsAdfwtxSVIL9e9AivP5HFTzuhTgbwiHAKrKsfgD+CwMwUY7MpHo0chQNcpV2Z2ZIVxG85izeWaPIQzNcxXvwK2ekNQApd7xzFqKBya3dnWfSJ2InKKfsOxkb+8lRzueGfJ0oeooipJUunosNdEqkdlTHTKyrxhG2XQcP2MJN+7OhmzBZCTDIdKZz1asWoRXgCn+SQx2DPKOHaNBx5sgWHOg=="}
02102{"flow_id":58,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9436,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":3087,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"}
00878{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":9436,"source":"reddit.pcap","alias":"nDPId-test","flow_id":58,"flow_packet_id":6,"flow_first_seen":1605291690926,"flow_last_seen":1605291691003,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80f::2001","src_port":36970,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"tpc.googlesyndication.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
00782{"flow_id":56,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9437,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":3087,"pkt_caplen":326,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":326,"pkt_l4_len":272,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAARAGPSoAFFBABwgPAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbuQZgWfW7NjbNmkgBgLMNynAAABAQgKwtdL7LiVO1JU1jc6XrD2wXmbYDR2pMF84bOcpSbK9hhJqfIkBXNuFr3F04boTslSEt8bzc1owuQGIkaX41lcijADD4RKEYOmBIJUA5VXzaRzaQgYVANMhu1T6ORX1FfISMaRJexWjHTaeJeyt8n94xUPEtkpRl9p4XhRDteYG\/L5Sva5Z\/iYVt9Ty6\/77VR9wVqBBca\/M3RePv+XQQUkKG1mlSqbqfLfK0+TsArGgMP2U0SLkSoaMaEsGibISRlcDreZVcFDjcbQYD83Dt9ILPFvEHtHoaQa5UY7DjHaFxkC2zpaAlCbLd0mV\/\/B7pbmmOrKDn6hncY="}
02101{"flow_id":58,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9438,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":3088,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"}
00780{"flow_id":58,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9439,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":3089,"pkt_caplen":325,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":325,"pkt_l4_len":271,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAQ8GPSoAFFBABwgPAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbuQan0Oy58YaA0rgBgLME4vAAABAQgKwtdL7LiVO1NLYki1QRHzVravWZjwvZBOm5hOjQZh1BXxAtNFyVwsGyhbWHb9b4OK4R1BqfuFaXguGa\/NKYRnUqzYL+eeBO4mesNP1VjUQahgnfZgnt2WAnXPGV4TYVyXvsOcH\/7lESvmaNKdD4CjyxLy4xgeaDVtpm4W6hUus+eNJ2miCfrnqn9vXytBSeG+fnuD3TjmbYS1kGVyE8QDiDfkSE\/6\/4HAXkcOvhweDqJ7OrrkNq73Jhjf67WSuGD+G3u9kHhzgXvUUQc7MK5uX47BnTNfzEgIlXiloWPiOYPFuMsKbA0ul8VWOKpgwmaLq4v7Mb5dVw=="}
00452{"flow_id":56,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9440,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":3105,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDhWZACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGYBu2Ns2aQFn1b7gBAB9Vq5AAABAQgKuJU7gcLXS+w="}
00453{"flow_id":56,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9441,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":3125,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDhWZACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGYBu2Ns2aQFn1uzgBAB8lYEAAABAQgKuJU7gcLXS+w="}
00452{"flow_id":58,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9442,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":3132,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCQMiACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGoBuxhoDSt9DsbngBAB9YrXAAABAQgKuJU7gcLXS+w="}
00453{"flow_id":56,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9443,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":3141,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDhWZACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGYBu2Ns2aQFn1yjgBAB8VUVAAABAQgKuJU7gcLXS+w="}
00453{"flow_id":58,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9444,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":3147,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCQMiACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGoBuxhoDSt9DsufgBAB8oYiAAABAQgKuJU7gcLXS+w="}
00453{"flow_id":58,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9445,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":3154,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCQMiACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGoBuxhoDSt9DsyOgBAB8YU0AAABAQgKuJU7gcLXS+w="}
02098{"flow_id":57,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9446,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":4686,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"}
00878{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":9446,"source":"reddit.pcap","alias":"nDPId-test","flow_id":57,"flow_packet_id":6,"flow_first_seen":1605291690926,"flow_last_seen":1605291691004,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80f::2001","src_port":36968,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"tpc.googlesyndication.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
02090{"flow_id":57,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9447,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":4687,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"}
00778{"flow_id":57,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9448,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":4688,"pkt_caplen":324,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":324,"pkt_l4_len":270,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAQ4GPSoAFFBABwgPAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbuQaPhC0OqeEC9HgBgLMI0oAAABAQgKwtdL7biVO1MsfuU\/h\/0EgEpFattDsbIEbY3flbv1Gxud6QKPVnyQvC45AO1yoL55TVPOXciCPrwu+Ouerjym+4Mu7U7poDJn3JrNUV2GB7xpQLT7NPwLS2XfQ+wkNdcCtPKIxgklIUMtbM64S4hq4grtGtzGUyb09qOSRnki\/d3KFnDy5T31A6Uq5Ne\/M3MkDYvZCUiBtq8UlKoj1U5aHhS3pGLBeEB\/jDdsju6RrIGpBifBRBmDds\/WTENGGCAUwfTmmycKnpcY5XOSBsq1FJwZ4x9tsCK2OXIQeJzHpm6DAcYYmvE9TwTyVjpVPzakA3UT94+V"}
00452{"flow_id":57,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9449,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":4701,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gB5miACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGgBu54QL0f4QswygBAB9WKTAAABAQgKuJU7gsLXS+0="}
00453{"flow_id":57,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9450,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":4722,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gB5miACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGgBu54QL0f4QtDqgBAB8l3eAAABAQgKuJU7gsLXS+0="}
00453{"flow_id":57,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9451,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":4731,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gB5miACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGgBu54QL0f4QtHYgBAB8VzxAAABAQgKuJU7gsLXS+0="}
00542{"flow_id":54,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9462,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":16595,"pkt_caplen":150,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":150,"pkt_l4_len":96,"pkt":"qtsDr8lk5EKm5WPyht1gBhSQAGAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIEQAAAAAAACAKlRYBu2QKzAwBx+W+gBgB9ZnrAAABAQgKqlQNB8LXS+gUAwMAAQEXAwMANRf8NdfYlUQALYOTVKD4GHwbJdPb71k2rsZH+NlQYljC\/EYWE\/Ay9Y3IsNq4wss4JfLDftQn"}
00541{"flow_id":55,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9463,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":19135,"pkt_caplen":150,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":150,"pkt_l4_len":96,"pkt":"qtsDr8lk5EKm5WPyht1gBnVWAGAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGQBuyviwOFMvxYqgBgB9b\/hAAABAQgKuJU7kcLXS+oUAwMAAQEXAwMANXWYreaI15TFK9hnYpxwrDfO4ntWP9BTQfuuFqco8pGbJX7GTFeG8is1Hca6L5QuYgg2qc1y"}
00542{"flow_id":56,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9464,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":21360,"pkt_caplen":150,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":150,"pkt_l4_len":96,"pkt":"qtsDr8lk5EKm5WPyht1gDhWZAGAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGYBu2Ns2aQFn1yjgBgB9TLlAAABAQgKuJU7k8LXS+wUAwMAAQEXAwMANQNTG8c9T4iLGClYz\/BRK3dmWJDvjxQ0RK8tlylAPFQteGDCKaBnNU\/k7dD7wG403TRq+MDb"}
00541{"flow_id":58,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9465,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":23481,"pkt_caplen":150,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":150,"pkt_l4_len":96,"pkt":"qtsDr8lk5EKm5WPyht1gCQMiAGAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGoBuxhoDSt9DsyOgBgB9eMKAAABAQgKuJU7lcLXS+wUAwMAAQEXAwMANcH+vIoJ1CA41siAcHiBIczKFyzQpOyxX2aB\/dlyZwmI0k2UmeiDvahq8qizpw1w99smpLhC"}
00542{"flow_id":57,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9466,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":25686,"pkt_caplen":150,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":150,"pkt_l4_len":96,"pkt":"qtsDr8lk5EKm5WPyht1gB5miAGAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGgBu54QL0f4QtHYgBgB9WuzAAABAQgKuJU7l8LXS+0UAwMAAQEXAwMANZ6JqQ+YyEPwKCf\/G+KqQ5olT1Ne07DXzwyYlbPxfZsI0PHsHXuudiNf3OPwTvMK7RQqf\/Uw"}
00454{"flow_id":56,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9467,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":26066,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDhWZACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGYBu2Ns2eQFn1yjgBEB9VS6AAABAQgKuJU7l8LXS+w="}
00454{"flow_id":58,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9468,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":26189,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCQMiACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGoBuxhoDWt9DsyOgBEB9YTYAAABAQgKuJU7mMLXS+w="}
00454{"flow_id":57,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9469,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":26278,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gB5miACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGgBu54QL4f4QtHYgBEB9VyWAAABAQgKuJU7mMLXS+0="}
00584{"flow_id":54,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9470,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":26356,"pkt_caplen":178,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":178,"pkt_l4_len":124,"pkt":"qtsDr8lk5EKm5WPyht1gBhSQAHwGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIEQAAAAAAACAKlRYBu2QKzEwBx+W+gBgB9Y\/zAAABAQgKqlQNEcLXS+gXAwMAV1q7\/x\/8p1IAMzClobSR5+R2ntFiusD2lIxb6KgEg9frAw0iCkykUg9pbjAFU82XHQ0E62x9i8AHtDZMxbyIy3bXsDgUT6HKHyjOAWAehvwC4PiVFlkGeg=="}
00585{"flow_id":55,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9471,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":26575,"pkt_caplen":178,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":178,"pkt_l4_len":124,"pkt":"qtsDr8lk5EKm5WPyht1gBnVWAHwGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGQBuyviwSFMvxYqgBgB9VV+AAABAQgKuJU7mMLXS+oXAwMAV+cFICpUiF+GdNlsz5J\/EsfkYEcb8580Nr89q7jv\/RaMxc06Pikcu4V\/JNJ7zdUKMH4p4t8hKHYCVilNXsOmt0CHa5nE0Lk\/RkxVuBl+JqQlGOitiL6Idg=="}
00839{"flow_id":54,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9472,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":27234,"pkt_caplen":369,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":369,"pkt_l4_len":315,"pkt":"qtsDr8lk5EKm5WPyht1gBhSQATsGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIEQAAAAAAACAKlRYBu2QKzKgBx+W+gBgB9WCOAAABAQgKqlQNEsLXS+gXAwMBFmDsopAndzT88MTn8oP7EaWKZMn4wqihHbphGqCh9Erffp0eeHHr1hoLGbLI56jybU07Oj1RBTW29xXe2J9RlLnpZEJB6NsBUwUDwSHLl0MPAuDBwPl9\/U9hngvkR9n5r79U2MMuPiI\/TwqPQQbPoyy+Cerfg+3dNIS2IIYaS2m\/eH3+l1Trv6sJdxNups+MjeNOHGFalJDQ3jf3TmlM54Bk0fXr2jlomHn3yDVGga4LeGwyoqGN8r3mBjH2VtVuLPOL\/zWBpgQy+2zJuL9hByN46\/xHqzCtP2EMPLSnlzFGyhfly1B5YAsVjNRzl\/AL7g29aBDgBQCanzoHZPh5d7uLrnXkrw15kzkvqXSpJsoHK9y2n7Qk"}
00886{"flow_id":55,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9473,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":27452,"pkt_caplen":405,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":405,"pkt_l4_len":351,"pkt":"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"}
00867{"flow_id":55,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9474,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":27669,"pkt_caplen":389,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":389,"pkt_l4_len":335,"pkt":"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"}
00466{"flow_id":59,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9475,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":29572,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgPAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbuQbO1037mLrsxooBJXgErvAAACBAV4AQMDAwQCCArC10wIuJU7dg=="}
00438{"flow_id":59,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9476,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":29601,"pkt_caplen":74,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":74,"pkt_l4_len":20,"pkt":"qtsDr8lk5EKm5WPyht1gBfK\/ABQGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGwBu4uuzGgAAAAAUAQAANo6AAA="}
00455{"flow_id":54,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9521,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":43955,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgRAAAAAAAAIAoqAcsBIEmLB5kd7IUo3\/YpAbuVFgHH5b5kCsxMgBALOAsjAAABAQgKwtdMDqpUDQc="}
00455{"flow_id":56,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9532,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":47853,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgPAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbuQZgWfXKNjbNnkgBALOEtWAAABAQgKwtdMEriVO5M="}
01244{"flow_id":56,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9539,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":48044,"pkt_caplen":666,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":666,"pkt_l4_len":612,"pkt":"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"}
00455{"flow_id":58,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9548,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":51567,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgPAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbuQan0OzI4YaA1rgBALOHtnAAABAQgKwtdMHriVO5U="}
01241{"flow_id":58,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9553,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":54527,"pkt_caplen":666,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":666,"pkt_l4_len":612,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAmQGPSoAFFBABwgPAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbuQan0OzI4YaA1rgBgLOOvoAAABAQgKwtdMH7iVO5UXAwMCAZAcfi0uwAAwFivFc4YhCppadXBIuIK7T\/8f1HDeuB+5qzO1DGNLL5zuOujdx\/TprXEB1eJeH6+wpCfhguFEJioc6w8leGFw\/JJK7FQHFE+otEwIMWGekXm7Z9uRtCzwzyBf7QNDDHNLJ5V15v+PlM\/KEQkm2Z9ZpQsAMvvs9Ls3KZ3e2yPXGBsc4lOGsGSzCp0DRxU48RWxrBBY14xRcKl48Km+nisNbc5XUUctzvY271fQdK3QD5rQt5NfsKq6EZadXhJq\/iXRmNj67BDq7Cw7Uu0Ecp6YexUjWgAenUZGyOA3NR290x08LsGaT3MavV1Xo0HIxLqg1Yv9t9BwTEy+\/DC3Lw9oLftquAFE9Pzc489smBInZLcv+\/wXSm2Q0quM78q3t8VleKi6u9RkqnCixEg6Gb95WgNyQGTUUzXPfbG2A+qKo5Fbz2vhbSWV1uUmFhiek4xvmoMRCQKLBlzZPjgYVjsPjXocCGJQ8wTw8\/bWP6fcdIQ0HpPj+hg8xoV3k\/Vu9ZMzywY85vXbYVrMGM81nC15OV8eeV\/gAA9rBkzmvfe1V4aZl1dysolmigs6XhwFExY84G5+vEeisamMNbrVd058uWzllhirMTa57sthS7odBP2klIj+SJRb4hJTry6ZCb9N9Zs7BX+Ta68XUL8zHMTH0ahlsSujzf9DABcDAwA5E8idCfDkKhlap\/NHKo7P3Iix98blFdwqTBsnUrodT0PB1ZUP8n9wDfI4KMISNb772WRXooelPd3R"}
00455{"flow_id":57,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9555,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":61013,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgPAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbuQaPhC0dieEC9HgBALMFN6AAABAQgKwtdMJbiVO4I="}
00455{"flow_id":57,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9557,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":61016,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgPAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbuQaPhC0dieEC+IgBALOFMcAAABAQgKwtdMJbiVO5c="}
00508{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":11226,"source":"reddit.pcap","alias":"nDPId-test","flow_id":60,"flow_packet_id":1,"flow_first_seen":1605291696948,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::34d3:acec","src_port":47006,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00467{"flow_id":60,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11226,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291696,"pkt_ts_usec":948991,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gDNdJACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAA006zst54Bu3jHKBQAAAAAoAL9IL45AAACBAWgBAIIClIhuaMAAAAAAQMDBw=="}
00469{"flow_id":60,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11227,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291696,"pkt_ts_usec":965238,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAADTTrOwqAcsBIEmLB5kd7IUo3\/YpAbu3nh9OKxV4xygVoBJXgPOCAAACBAV4AQMDAwQCCArC12M3UiG5ow=="}
00455{"flow_id":60,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11228,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291696,"pkt_ts_usec":965302,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDNdJACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAA006zst54Bu3jHKBUfTisWgBAB+3eDAAABAQgKUiG5tMLXYzc="}
01152{"flow_id":60,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11229,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291696,"pkt_ts_usec":965939,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"}
00816{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":11229,"source":"reddit.pcap","alias":"nDPId-test","flow_id":60,"flow_packet_id":4,"flow_first_seen":1605291696948,"flow_last_seen":1605291696965,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::34d3:acec","src_port":47006,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"d9.flashtalking.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
00456{"flow_id":60,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11230,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291697,"pkt_ts_usec":12854,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAADTTrOwqAcsBIEmLB5kd7IUo3\/YpAbu3nh9OKxZ4xyoagBALMGwaAAABAQgKwtdjZlIhubQ="}
02330{"flow_id":60,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11233,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291697,"pkt_ts_usec":33621,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"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"}
00872{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":11233,"source":"reddit.pcap","alias":"nDPId-test","flow_id":60,"flow_packet_id":6,"flow_first_seen":1605291696948,"flow_last_seen":1605291697033,"flow_tot_l4_data_len":2113,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":352,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::34d3:acec","src_port":47006,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"d9.flashtalking.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
02327{"flow_id":60,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11234,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291697,"pkt_ts_usec":33623,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"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"}
02247{"flow_id":60,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11235,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291697,"pkt_ts_usec":33624,"pkt_caplen":1406,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1406,"pkt_l4_len":1352,"pkt":"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"}
00454{"flow_id":60,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11236,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291697,"pkt_ts_usec":33649,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDNdJACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAA006zst54Bu3jHKhofTjCCgBAB9W+SAAABAQgKUiG5+MLXY3k="}
00455{"flow_id":60,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11237,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291697,"pkt_ts_usec":33677,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDNdJACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAA006zst54Bu3jHKhofTjXugBAB8GorAAABAQgKUiG5+MLXY3k="}
00455{"flow_id":60,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11238,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291697,"pkt_ts_usec":33689,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDNdJACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAA006zst54Bu3jHKhofTjsWgBAB5mUNAAABAQgKUiG5+MLXY3k="}
02330{"flow_id":60,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11239,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291697,"pkt_ts_usec":34463,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABYwGPQBk\/5sAAAAAAAAAADTTrOwqAcsBIEmLB5kd7IUo3\/YpAbu3nh9OOxZ4xyoagBgLMLKgAAABAQgKwtdje1IhubTpH6CGU7vvfP9pC+BIw7eTC8gKVMSsXRRnN2zKpS8xCDeqbm+MvJviV10kga+Xl5yErWysN0xm82GRESDkvjCfeqQpCbDhNF9kdxhAUd+MMKavAAQEMIIEADCCAuigAwIBAgIBADANBgkqhkiG9w0BAQUFADBjMQswCQYDVQQGEwJVUzEhMB8GA1UEChMYVGhlIEdvIERhZGR5IEdyb3VwLCBJbmMuMTEwLwYDVQQLEyhHbyBEYWRkeSBDbGFzcyAyIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTA0MDYyOTE3MDYyMFoXDTM0MDYyOTE3MDYyMFowYzELMAkGA1UEBhMCVVMxITAfBgNVBAoTGFRoZSBHbyBEYWRkeSBHcm91cCwgSW5jLjExMC8GA1UECxMoR28gRGFkZHkgQ2xhc3MgMiBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTCCASAwDQYJKoZIhvcNAQEBBQADggENADCCAQgCggEBAN6d1+pXGEmhW+vXX0iG6r7d\/+TvZxz0ZWizV3GgXne77ZtJ6XCAPVYYYwhv2vLM0D9\/AlQiVBDYsoHUwHU9S3\/Hd8M+eKsaA7Ugay9qK7HFiH7Eux6wwdhFJ2+qN1j3hybX2C32qRe3H3I2TqYXP2WYktsqbl2i\/ojgC95\/5Y0V4evLOtXiEqITLdiOr18SPaAIBQi2XKVlOARFmR6jYGB0xUGlcmIbYsUfb18aQr4CUWWoriMYavx4A6lNf4DD+qta\/KFApMoZFv6yyO9ecw3ud72a9nmYvLEHZ6IVDd2gWMZEewo+YihfukEHU1jPEX44dMX4\/7VpkI+EdOqXG68CAQOjgcAwgb0wHQYDVR0OBBYEFNLEsNKR1EwRcbNhyz2h\/t2oatTjMIGNBgNVHSMEgYUwgYKAFNLEsNKR1EwRcbNhyz2h\/t2oatTjoWekZTBjMQswCQYDVQQGEwJVUzEhMB8GA1UEChMYVGhlIEdvIERhZGR5IEdyb3VwLCBJbmMuMTEwLwYDVQQLEyhHbyBEYWRkeSBDbGFzcyAyIENlcnRpZmljYXRpb24gQXV0aG9yaXR5ggEAMAwGA1UdEwQFMAMBAf8wDQYJKoZIhvcNAQEFBQADggEBADJL87LKPpH8EsahB4yOd6AzBhRckB4Y9wimPQoZ+YeAEW5p5JYXMP80kWNyOO7MHAGjHZQopDH2esRU1\/blMVgDoszOYtuURXO1v0XJJLXVggKtI3lpjbi2Tc7PTMozI+gciKqdi0FuFskg5YmezTvacPd+mSYgFFQlq25zheabIZ0KbIIOqPjCDPoQHmyW74cNxA9hi63ugyuV+I6ShHI56yDqg+2DzZduCLzrTia2cyvk0\/ZM\/iZx4mERdEr\/VxqHD3VILs9RaRegAhJhldXRQLIQTO7ErBBDpqWeCtWVYpoNz4iCxTIM5CufReYNnyicsbkqWletNw+vHX\/bvZ8WAwMBTQwAAUkDABdBBPsFY9pNvX5TtOPGsdk0hQPimXVO1fDXg3y+4Qd02kZZ40mokItWMy7I15bFq21bT\/3COnOUMPou6Uj5xvknpKsGAQEAMrOj5sSvcFdF0U19ZTVROOOIDYtnm+9xE1WJQS24eWeidJew6MUniEdOO9fBLW478k5QK8WG16jIRnve5HQ9JKB6z59Qd18UKZIoo3qVOhufw1q5wtBEP0FP9R4875RMavMB1L2cA4C4jwqgk4yXT0gl3zoMSTMrH5ndrG0UJpWnLHKdsdsYDy3etcr1mBwJ1OQbvH90ER54whVNScImkpnkqX3vr5dM1ujT8HZrXy7fdK2qyHvnih6uoc0urDn+nQ=="}
01285{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":11239,"source":"reddit.pcap","alias":"nDPId-test","flow_id":60,"flow_packet_id":12,"flow_first_seen":1605291696948,"flow_last_seen":1605291697034,"flow_tot_l4_data_len":6401,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":533,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::34d3:acec","src_port":47006,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"d9.flashtalking.com","server_names":"tag.device9.com,www.tag.device9.com,fp.zenaps.com,the.sciencebehindecommerce.com,d9.flashtalking.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., OU=http:\/\/certs.godaddy.com\/repository\/, CN=Go Daddy Secure Certificate Authority - G2","issuerDN":"OU=Domain Control Validated, CN=tag.device9.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"8B:5C:A4:62:70:92:3A:09:C3:72:49:B2:A2:22:32:16:22:87:9D:F3"}}
00556{"flow_id":60,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11240,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291697,"pkt_ts_usec":34464,"pkt_caplen":158,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":158,"pkt_l4_len":104,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAGgGPQBk\/5sAAAAAAAAAADTTrOwqAcsBIEmLB5kd7IUo3\/YpAbu3nh9OQIJ4xyoagBgLMG3YAAABAQgKwtdje1IhubSBt0obLL+WIiPG6AQ56SzS1GkUMIPNBkq1N9IMlEKIOpEbi45nD5zJkYriLO4a7hmSKY4Uz5bfrMdnA+ZKZmoWAwMABA4AAAA="}
00455{"flow_id":60,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11241,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291697,"pkt_ts_usec":34480,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDNdJACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAA006zst54Bu3jHKhofTkCCgBAB3F+oAAABAQgKUiG5+cLXY3s="}
00455{"flow_id":60,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11242,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291697,"pkt_ts_usec":34499,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDNdJACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAA006zst54Bu3jHKhofTkDKgBAB3F9gAAABAQgKUiG5+cLXY3s="}
00534{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":11682,"source":"reddit.pcap","alias":"nDPId-test","flow_id":39,"flow_packet_id":39,"flow_first_seen":1605291688749,"flow_last_seen":1605291688963,"flow_tot_l4_data_len":12230,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":313,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:805::2004","src_port":57282,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00533{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":11682,"source":"reddit.pcap","alias":"nDPId-test","flow_id":46,"flow_packet_id":33,"flow_first_seen":1605291690384,"flow_last_seen":1605291690520,"flow_tot_l4_data_len":7714,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":233,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80b::2002","src_port":59336,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00530{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":11682,"source":"reddit.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":782,"flow_first_seen":1605291687514,"flow_last_seen":1605291688963,"flow_tot_l4_data_len":621328,"flow_min_l4_data_len":32,"flow_max_l4_data_len":6320,"flow_avg_l4_data_len":794,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:789d","src_port":48240,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00534{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":11682,"source":"reddit.pcap","alias":"nDPId-test","flow_id":55,"flow_packet_id":85,"flow_first_seen":1605291690926,"flow_last_seen":1605291691284,"flow_tot_l4_data_len":39821,"flow_min_l4_data_len":32,"flow_max_l4_data_len":2502,"flow_avg_l4_data_len":468,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80f::2001","src_port":36964,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00532{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":11682,"source":"reddit.pcap","alias":"nDPId-test","flow_id":56,"flow_packet_id":20,"flow_first_seen":1605291690926,"flow_last_seen":1605291691053,"flow_tot_l4_data_len":4437,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":221,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80f::2001","src_port":36966,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00532{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":11682,"source":"reddit.pcap","alias":"nDPId-test","flow_id":57,"flow_packet_id":19,"flow_first_seen":1605291690926,"flow_last_seen":1605291691064,"flow_tot_l4_data_len":4415,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":232,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80f::2001","src_port":36968,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00532{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":11682,"source":"reddit.pcap","alias":"nDPId-test","flow_id":58,"flow_packet_id":20,"flow_first_seen":1605291690926,"flow_last_seen":1605291691062,"flow_tot_l4_data_len":4436,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":221,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80f::2001","src_port":36970,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00547{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":11682,"source":"reddit.pcap","alias":"nDPId-test","flow_id":59,"flow_packet_id":3,"flow_first_seen":1605291690992,"flow_last_seen":1605291691029,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":20,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80f::2001","src_port":36972,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"}}
00527{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":11682,"source":"reddit.pcap","alias":"nDPId-test","flow_id":59,"flow_packet_id":3,"flow_first_seen":1605291690992,"flow_last_seen":1605291691029,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":20,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80f::2001","src_port":36972,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00527{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":11682,"source":"reddit.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":27,"flow_first_seen":1605291687934,"flow_last_seen":1605291688340,"flow_tot_l4_data_len":7503,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":277,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::1736:86f1","src_port":44264,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00529{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":11682,"source":"reddit.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":847,"flow_first_seen":1605291684452,"flow_last_seen":1605291698703,"flow_tot_l4_data_len":509140,"flow_min_l4_data_len":32,"flow_max_l4_data_len":6277,"flow_avg_l4_data_len":601,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56558,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00535{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":11682,"source":"reddit.pcap","alias":"nDPId-test","flow_id":42,"flow_packet_id":114,"flow_first_seen":1605291688843,"flow_last_seen":1605291691232,"flow_tot_l4_data_len":72894,"flow_min_l4_data_len":32,"flow_max_l4_data_len":2448,"flow_avg_l4_data_len":639,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80c::2003","src_port":47302,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00526{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":11682,"source":"reddit.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":17,"flow_first_seen":1605291684481,"flow_last_seen":1605291684654,"flow_tot_l4_data_len":5087,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":299,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56560,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00532{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":11682,"source":"reddit.pcap","alias":"nDPId-test","flow_id":43,"flow_packet_id":19,"flow_first_seen":1605291688843,"flow_last_seen":1605291689005,"flow_tot_l4_data_len":4446,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":234,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80c::2003","src_port":47304,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00525{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":11682,"source":"reddit.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":15,"flow_first_seen":1605291686035,"flow_last_seen":1605291686148,"flow_tot_l4_data_len":4641,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":309,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56562,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00533{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":11682,"source":"reddit.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1442,"flow_first_seen":1605291686035,"flow_last_seen":1605291696381,"flow_tot_l4_data_len":1968519,"flow_min_l4_data_len":32,"flow_max_l4_data_len":11560,"flow_avg_l4_data_len":1365,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56564,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00525{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":11682,"source":"reddit.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":17,"flow_first_seen":1605291686035,"flow_last_seen":1605291686148,"flow_tot_l4_data_len":4681,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":275,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56566,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00525{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":11682,"source":"reddit.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":18,"flow_first_seen":1605291686035,"flow_last_seen":1605291686148,"flow_tot_l4_data_len":4701,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":261,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56568,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00525{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":11682,"source":"reddit.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":17,"flow_first_seen":1605291686035,"flow_last_seen":1605291686149,"flow_tot_l4_data_len":4681,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":275,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56570,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00526{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":11682,"source":"reddit.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":18,"flow_first_seen":1605291686035,"flow_last_seen":1605291686156,"flow_tot_l4_data_len":4701,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":261,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56572,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00526{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":11682,"source":"reddit.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":23,"flow_first_seen":1605291686060,"flow_last_seen":1605291686196,"flow_tot_l4_data_len":5289,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":229,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56574,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00526{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":11682,"source":"reddit.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":23,"flow_first_seen":1605291686060,"flow_last_seen":1605291686196,"flow_tot_l4_data_len":5289,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":229,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56576,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00531{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":11682,"source":"reddit.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":133,"flow_first_seen":1605291686060,"flow_last_seen":1605291697854,"flow_tot_l4_data_len":103287,"flow_min_l4_data_len":32,"flow_max_l4_data_len":10512,"flow_avg_l4_data_len":776,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56578,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00526{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":11682,"source":"reddit.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":17,"flow_first_seen":1605291686060,"flow_last_seen":1605291686196,"flow_tot_l4_data_len":4703,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":276,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56580,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00533{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":11682,"source":"reddit.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":5480,"flow_first_seen":1605291686064,"flow_last_seen":1605291695840,"flow_tot_l4_data_len":5898915,"flow_min_l4_data_len":32,"flow_max_l4_data_len":9464,"flow_avg_l4_data_len":1076,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56582,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00526{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":11682,"source":"reddit.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":23,"flow_first_seen":1605291686064,"flow_last_seen":1605291686203,"flow_tot_l4_data_len":5263,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":228,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56584,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00526{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":11682,"source":"reddit.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":15,"flow_first_seen":1605291686064,"flow_last_seen":1605291686203,"flow_tot_l4_data_len":4625,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56586,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00526{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":11682,"source":"reddit.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":15,"flow_first_seen":1605291686064,"flow_last_seen":1605291686203,"flow_tot_l4_data_len":4625,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56588,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00526{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":11682,"source":"reddit.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":23,"flow_first_seen":1605291686084,"flow_last_seen":1605291686232,"flow_tot_l4_data_len":5289,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":229,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56590,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00528{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":11682,"source":"reddit.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":37,"flow_first_seen":1605291686084,"flow_last_seen":1605291686283,"flow_tot_l4_data_len":11120,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":300,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56592,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00533{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":11682,"source":"reddit.pcap","alias":"nDPId-test","flow_id":48,"flow_packet_id":35,"flow_first_seen":1605291690421,"flow_last_seen":1605291690571,"flow_tot_l4_data_len":9215,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":263,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80b::2001","src_port":59624,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00529{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":11682,"source":"reddit.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":112,"flow_first_seen":1605291686301,"flow_last_seen":1605291696305,"flow_tot_l4_data_len":44526,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":397,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56594,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00527{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":11682,"source":"reddit.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":45,"flow_first_seen":1605291689408,"flow_last_seen":1605291689979,"flow_tot_l4_data_len":9793,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":217,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56640,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00545{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":11682,"source":"reddit.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":27,"flow_first_seen":1605291688344,"flow_last_seen":1605291688502,"flow_tot_l4_data_len":8092,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":299,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2600:9000:219c:ee00:6:44e3:f8c0:93a1","src_port":56186,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00529{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":11682,"source":"reddit.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":118,"flow_first_seen":1605291686996,"flow_last_seen":1605291688354,"flow_tot_l4_data_len":97928,"flow_min_l4_data_len":32,"flow_max_l4_data_len":5584,"flow_avg_l4_data_len":829,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::6853:b3b6","src_port":38320,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00527{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":11682,"source":"reddit.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":45,"flow_first_seen":1605291687800,"flow_last_seen":1605291692129,"flow_tot_l4_data_len":9892,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":219,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::68f4:2ac8","src_port":56782,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00528{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":11682,"source":"reddit.pcap","alias":"nDPId-test","flow_id":47,"flow_packet_id":27,"flow_first_seen":1605291690405,"flow_last_seen":1605291690626,"flow_tot_l4_data_len":10193,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1392,"flow_avg_l4_data_len":377,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::345f:7ca5","src_port":46646,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00543{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":11682,"source":"reddit.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":36,"flow_first_seen":1605291688611,"flow_last_seen":1605291688858,"flow_tot_l4_data_len":8763,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":243,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2606:2800:134:1a0d:1429:742:782:b6","src_port":39736,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00534{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":11682,"source":"reddit.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":69,"flow_first_seen":1605291687642,"flow_last_seen":1605291687853,"flow_tot_l4_data_len":38231,"flow_min_l4_data_len":32,"flow_max_l4_data_len":2448,"flow_avg_l4_data_len":554,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:816::2008","src_port":39520,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00534{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":11682,"source":"reddit.pcap","alias":"nDPId-test","flow_id":40,"flow_packet_id":71,"flow_first_seen":1605291688830,"flow_last_seen":1605291698440,"flow_tot_l4_data_len":21093,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":297,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:805::2001","src_port":58122,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00530{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":11682,"source":"reddit.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":146,"flow_first_seen":1605291687485,"flow_last_seen":1605291690985,"flow_tot_l4_data_len":126179,"flow_min_l4_data_len":32,"flow_max_l4_data_len":5584,"flow_avg_l4_data_len":864,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::acd9:12c2","src_port":51026,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00527{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":11682,"source":"reddit.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":42,"flow_first_seen":1605291688324,"flow_last_seen":1605291688572,"flow_tot_l4_data_len":7396,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":176,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::d83a:d1e6","src_port":51100,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00527{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":11682,"source":"reddit.pcap","alias":"nDPId-test","flow_id":60,"flow_packet_id":23,"flow_first_seen":1605291696948,"flow_last_seen":1605291697249,"flow_tot_l4_data_len":8369,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":363,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::34d3:acec","src_port":47006,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00526{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":11682,"source":"reddit.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":19,"flow_first_seen":1605291688336,"flow_last_seen":1605291688453,"flow_tot_l4_data_len":4638,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":244,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::d83a:d1e6","src_port":51102,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00536{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":11682,"source":"reddit.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":174,"flow_first_seen":1605291688831,"flow_last_seen":1605291698470,"flow_tot_l4_data_len":129359,"flow_min_l4_data_len":32,"flow_max_l4_data_len":3656,"flow_avg_l4_data_len":743,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:815::2016","src_port":52296,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00533{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":11682,"source":"reddit.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":53,"flow_first_seen":1605291684451,"flow_last_seen":1605291698602,"flow_tot_l4_data_len":10044,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":189,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80a::200a","src_port":40028,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00531{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":11682,"source":"reddit.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":19,"flow_first_seen":1605291684451,"flow_last_seen":1605291684592,"flow_tot_l4_data_len":4678,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":246,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80a::200a","src_port":40030,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00527{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":11682,"source":"reddit.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":21,"flow_first_seen":1605291687761,"flow_last_seen":1605291687902,"flow_tot_l4_data_len":5688,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":270,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::6853:b3d1","src_port":32970,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00546{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":11682,"source":"reddit.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":44,"flow_first_seen":1605291687933,"flow_last_seen":1605291688585,"flow_tot_l4_data_len":16169,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":367,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2620:116:800d:21:f916:5049:f87f:108e","src_port":48648,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00533{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":11682,"source":"reddit.pcap","alias":"nDPId-test","flow_id":54,"flow_packet_id":35,"flow_first_seen":1605291690926,"flow_last_seen":1605291691119,"flow_tot_l4_data_len":7497,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":214,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:811::200a","src_port":38166,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00527{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":11682,"source":"reddit.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":73,"flow_first_seen":1605291686985,"flow_last_seen":1605291690314,"flow_tot_l4_data_len":43592,"flow_min_l4_data_len":32,"flow_max_l4_data_len":2808,"flow_avg_l4_data_len":597,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::df9:21c6","src_port":43492,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00533{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":11682,"source":"reddit.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":31,"flow_first_seen":1605291688712,"flow_last_seen":1605291688927,"flow_tot_l4_data_len":6013,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":193,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:808::2006","src_port":54726,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00537{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":11682,"source":"reddit.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":636,"flow_first_seen":1605291687931,"flow_last_seen":1605291698785,"flow_tot_l4_data_len":768921,"flow_min_l4_data_len":32,"flow_max_l4_data_len":7280,"flow_avg_l4_data_len":1208,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:806::200e","src_port":54862,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00527{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":11682,"source":"reddit.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":31,"flow_first_seen":1605291687896,"flow_last_seen":1605291688326,"flow_tot_l4_data_len":7711,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":248,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::2278:cf94","src_port":39626,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00538{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":11682,"source":"reddit.pcap","alias":"nDPId-test","flow_id":49,"flow_packet_id":104,"flow_first_seen":1605291690926,"flow_last_seen":1605291691154,"flow_tot_l4_data_len":114469,"flow_min_l4_data_len":32,"flow_max_l4_data_len":10904,"flow_avg_l4_data_len":1100,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:808::2001","src_port":46806,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00532{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":11682,"source":"reddit.pcap","alias":"nDPId-test","flow_id":50,"flow_packet_id":28,"flow_first_seen":1605291690926,"flow_last_seen":1605291691043,"flow_tot_l4_data_len":9432,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":336,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:808::2001","src_port":46808,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00532{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":11682,"source":"reddit.pcap","alias":"nDPId-test","flow_id":51,"flow_packet_id":28,"flow_first_seen":1605291690926,"flow_last_seen":1605291691043,"flow_tot_l4_data_len":9431,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":336,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:808::2001","src_port":46810,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00532{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":11682,"source":"reddit.pcap","alias":"nDPId-test","flow_id":52,"flow_packet_id":27,"flow_first_seen":1605291690926,"flow_last_seen":1605291691043,"flow_tot_l4_data_len":9412,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":348,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:808::2001","src_port":46812,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00532{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":11682,"source":"reddit.pcap","alias":"nDPId-test","flow_id":53,"flow_packet_id":27,"flow_first_seen":1605291690926,"flow_last_seen":1605291691044,"flow_tot_l4_data_len":9413,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":348,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:808::2001","src_port":46814,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00535{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":11682,"source":"reddit.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":164,"flow_first_seen":1605291686985,"flow_last_seen":1605291698522,"flow_tot_l4_data_len":50634,"flow_min_l4_data_len":32,"flow_max_l4_data_len":2365,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:805::2002","src_port":50960,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00533{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":11682,"source":"reddit.pcap","alias":"nDPId-test","flow_id":45,"flow_packet_id":31,"flow_first_seen":1605291690373,"flow_last_seen":1605291690520,"flow_tot_l4_data_len":6692,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":215,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:805::2002","src_port":51006,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00129{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":11682,"source":"reddit.pcap","alias":"nDPId-test"}