1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
|
00455{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"snmp.pcap","alias":"nDPId-test","max-flows-per-thread":2048,"max-idle-flows-per-thread":64,"tick-resolution":1000,"reader-thread-count":1,"flow-scan-interval":10000,"generic-max-idle-time":600000,"icmp-max-idle-time":120000,"udp-max-idle-time":180000,"tcp-max-idle-time":7560000,"max-packets-per-flow-to-send":3,"max-packets-per-flow-to-process":32,"global_ts_msec":0}
00541{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":1,"source":"snmp.pcap","alias":"nDPId-test","packets-captured":1,"packets-processed":0,"total-skipped-flows":0,"total-l4-data-len":0,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":0,"total-detection-updates":0,"total-updates":0,"current-active-flows":0,"total-active-flows":0,"total-idle-flows":0,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":2,"global_ts_msec":1597326815572}
00575{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"snmp.pcap","alias":"nDPId-test","flow_id":1,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1597326815572,"flow_last_seen":1597326815572,"flow_idle_time":180000,"flow_min_l4_payload_len":43,"flow_max_l4_payload_len":43,"flow_tot_l4_payload_len":43,"flow_avg_l4_payload_len":43,"midstream":0,"thread_ts_msec":1597326815572,"l3_proto":"ip4","src_ip":"176.211.60.43","dst_ip":"97.0.115.163","src_port":43015,"dst_port":161,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3}
00488{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"snmp.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_last_seen":1597326815572,"flow_idle_time":180000,"pkt_oversize":false,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"thread_ts_msec":1597326815572,"pkt":"AAAAmdpxAAwpCIFqCABFAABHM75AAEARRUaw0zwrYQBzo6gHAKEAM+IpMCkCAQAEBnB1YmxpY6EcAgRLeBpuAgEAAgEAMA4wDAYIKwYBAgEBBQAFAA=="}
00634{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"snmp.pcap","alias":"nDPId-test","flow_id":1,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1597326815572,"flow_last_seen":1597326815572,"flow_idle_time":180000,"flow_min_l4_payload_len":43,"flow_max_l4_payload_len":43,"flow_tot_l4_payload_len":43,"flow_avg_l4_payload_len":43,"midstream":0,"thread_ts_msec":1597326815572,"l3_proto":"ip4","src_ip":"176.211.60.43","dst_ip":"97.0.115.163","src_port":43015,"dst_port":161,"l4_proto":"udp","ndpi": {"confidence": {"4":"DPI"},"proto":"SNMP","breed":"Acceptable","category":"Network"}}
00504{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"snmp.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":2,"flow_last_seen":1597326815678,"flow_idle_time":180000,"pkt_oversize":false,"pkt_caplen":99,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":99,"pkt_l4_len":65,"thread_ts_msec":1597326815678,"pkt":"AAwpCIFqAAAAmdpxCABFAABVAAIAAP8R+fNhAHOjsNM8KwChqAcAQdFWMDcCAQAEBnB1YmxpY6IqAgRLeBpuAgEAAgEAMBwwGgYIKwYBAgEBBgAEDkdsb2JvbWFudGljc0hR"}
00488{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"snmp.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":3,"flow_last_seen":1597326815679,"flow_idle_time":180000,"pkt_oversize":false,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"thread_ts_msec":1597326815679,"pkt":"AAAAmdpxAAwpCIFqCABFAABHM+lAAEARRRuw0zwrYQBzo6gHAKEAM+EqMCkCAQAEBnB1YmxpY6AcAgRLeBpvAgEAAgEAMA4wDAYIKwYBAgEBBQAFAA=="}
00576{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5,"source":"snmp.pcap","alias":"nDPId-test","flow_id":2,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1597326838035,"flow_last_seen":1597326838035,"flow_idle_time":180000,"flow_min_l4_payload_len":43,"flow_max_l4_payload_len":43,"flow_tot_l4_payload_len":43,"flow_avg_l4_payload_len":43,"midstream":0,"thread_ts_msec":1597326838035,"l3_proto":"ip4","src_ip":"65.2.162.193","dst_ip":"130.70.149.185","src_port":59988,"dst_port":161,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3}
00488{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"snmp.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_last_seen":1597326838035,"flow_idle_time":180000,"pkt_oversize":false,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"thread_ts_msec":1597326838035,"pkt":"AAAAl9K2AAwpQXJyCABFAABHTItAAEAR8ldBAqLBgkaVuepUAKEAM4b6MCkCAQEEBnB1YmxpY6EcAgRQZ9ZcAgEAAgEAMA4wDAYIKwYBAgEBBQAFAA=="}
00635{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":5,"source":"snmp.pcap","alias":"nDPId-test","flow_id":2,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1597326838035,"flow_last_seen":1597326838035,"flow_idle_time":180000,"flow_min_l4_payload_len":43,"flow_max_l4_payload_len":43,"flow_tot_l4_payload_len":43,"flow_avg_l4_payload_len":43,"midstream":0,"thread_ts_msec":1597326838035,"l3_proto":"ip4","src_ip":"65.2.162.193","dst_ip":"130.70.149.185","src_port":59988,"dst_port":161,"l4_proto":"udp","ndpi": {"confidence": {"4":"DPI"},"proto":"SNMP","breed":"Acceptable","category":"Network"}}
00504{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"snmp.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":2,"flow_last_seen":1597326838141,"flow_idle_time":180000,"pkt_oversize":false,"pkt_caplen":99,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":99,"pkt_l4_len":65,"thread_ts_msec":1597326838141,"pkt":"AAwpQXJyAAAAl9K2CABFAABVAAQAAP8Rv9CCRpW5QQKiwQCh6lQAQXYnMDcCAQEEBnB1YmxpY6IqAgRQZ9ZcAgEAAgEAMBwwGgYIKwYBAgEBBgAEDkdsb2JvbWFudGljc0hR"}
00488{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"snmp.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":3,"flow_last_seen":1597326838143,"flow_idle_time":180000,"pkt_oversize":false,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"thread_ts_msec":1597326838143,"pkt":"AAAAl9K2AAwpQXJyCABFAABHTNhAAEAR8gpBAqLBgkaVuepUAKEAM4X7MCkCAQEEBnB1YmxpY6AcAgRQZ9ZdAgEAAgEAMA4wDAYIKwYBAgEBBQAFAA=="}
00575{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9,"source":"snmp.pcap","alias":"nDPId-test","flow_id":3,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1597326858008,"flow_last_seen":1597326858008,"flow_idle_time":180000,"flow_min_l4_payload_len":43,"flow_max_l4_payload_len":43,"flow_tot_l4_payload_len":43,"flow_avg_l4_payload_len":43,"midstream":0,"thread_ts_msec":1597326858008,"l3_proto":"ip4","src_ip":"176.211.60.43","dst_ip":"97.0.115.163","src_port":37224,"dst_port":161,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3}
00488{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"snmp.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_last_seen":1597326858008,"flow_idle_time":180000,"pkt_oversize":false,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"thread_ts_msec":1597326858008,"pkt":"AAAAmdpxAAwpCIFqCABFAABHgc9AAEAR9zSw0zwrYQBzo5FoAKEAMzYdMCkCAQAEBnB1YmxpY6EcAgQJUAlZAgEAAgEAMA4wDAYIKwYBAgEBBAAFAA=="}
00634{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":9,"source":"snmp.pcap","alias":"nDPId-test","flow_id":3,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1597326858008,"flow_last_seen":1597326858008,"flow_idle_time":180000,"flow_min_l4_payload_len":43,"flow_max_l4_payload_len":43,"flow_tot_l4_payload_len":43,"flow_avg_l4_payload_len":43,"midstream":0,"thread_ts_msec":1597326858008,"l3_proto":"ip4","src_ip":"176.211.60.43","dst_ip":"97.0.115.163","src_port":37224,"dst_port":161,"l4_proto":"udp","ndpi": {"confidence": {"4":"DPI"},"proto":"SNMP","breed":"Acceptable","category":"Network"}}
00505{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"snmp.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":2,"flow_last_seen":1597326858136,"flow_idle_time":180000,"pkt_oversize":false,"pkt_caplen":97,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":97,"pkt_l4_len":63,"thread_ts_msec":1597326858136,"pkt":"AAwpCIFqAAAAmdpxCABFAABTAAYAAP8R+fFhAHOjsNM8KwChkWgAP8oWMDUCAQAEBnB1YmxpY6IoAgQJUAlZAgEAAgEAMBowGAYIKwYBAgEBBQAEDFIxLmxhYi5sb2NhbA=="}
00489{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"snmp.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":3,"flow_last_seen":1597326858140,"flow_idle_time":180000,"pkt_oversize":false,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"thread_ts_msec":1597326858140,"pkt":"AAAAmdpxAAwpCIFqCABFAABHgiVAAEAR9t6w0zwrYQBzo5FoAKEAMzUeMCkCAQAEBnB1YmxpY6AcAgQJUAlaAgEAAgEAMA4wDAYIKwYBAgEBBAAFAA=="}
00577{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":13,"source":"snmp.pcap","alias":"nDPId-test","flow_id":4,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1597326863415,"flow_last_seen":1597326863415,"flow_idle_time":180000,"flow_min_l4_payload_len":43,"flow_max_l4_payload_len":43,"flow_tot_l4_payload_len":43,"flow_avg_l4_payload_len":43,"midstream":0,"thread_ts_msec":1597326863415,"l3_proto":"ip4","src_ip":"65.2.162.193","dst_ip":"130.70.149.185","src_port":58433,"dst_port":161,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3}
00489{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"snmp.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_last_seen":1597326863415,"flow_idle_time":180000,"pkt_oversize":false,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"thread_ts_msec":1597326863415,"pkt":"AAAAl9K2AAwpQXJyCABFAABHlH1AAEARqmVBAqLBgkaVueRBAKEAM6R0MCkCAQEEBnB1YmxpY6EcAgQesaH7AgEAAgEAMA4wDAYIKwYBAgEBBAAFAA=="}
00636{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":13,"source":"snmp.pcap","alias":"nDPId-test","flow_id":4,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1597326863415,"flow_last_seen":1597326863415,"flow_idle_time":180000,"flow_min_l4_payload_len":43,"flow_max_l4_payload_len":43,"flow_tot_l4_payload_len":43,"flow_avg_l4_payload_len":43,"midstream":0,"thread_ts_msec":1597326863415,"l3_proto":"ip4","src_ip":"65.2.162.193","dst_ip":"130.70.149.185","src_port":58433,"dst_port":161,"l4_proto":"udp","ndpi": {"confidence": {"4":"DPI"},"proto":"SNMP","breed":"Acceptable","category":"Network"}}
00505{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"snmp.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":2,"flow_last_seen":1597326863591,"flow_idle_time":180000,"pkt_oversize":false,"pkt_caplen":97,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":97,"pkt_l4_len":63,"thread_ts_msec":1597326863591,"pkt":"AAwpQXJyAAAAl9K2CABFAABTAAgAAP8Rv86CRpW5QQKiwQCh5EEAPzhuMDUCAQEEBnB1YmxpY6IoAgQesaH7AgEAAgEAMBowGAYIKwYBAgEBBQAEDFIxLmxhYi5sb2NhbA=="}
00489{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"snmp.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":3,"flow_last_seen":1597326863597,"flow_idle_time":180000,"pkt_oversize":false,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"thread_ts_msec":1597326863597,"pkt":"AAAAl9K2AAwpQXJyCABFAABHlIBAAEARqmJBAqLBgkaVueRBAKEAM6N1MCkCAQEEBnB1YmxpY6AcAgQesaH8AgEAAgEAMA4wDAYIKwYBAgEBBAAFAA=="}
00577{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":17,"source":"snmp.pcap","alias":"nDPId-test","flow_id":5,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1597326976979,"flow_last_seen":1597326976979,"flow_idle_time":180000,"flow_min_l4_payload_len":64,"flow_max_l4_payload_len":64,"flow_tot_l4_payload_len":64,"flow_avg_l4_payload_len":64,"midstream":0,"thread_ts_msec":1597326976979,"l3_proto":"ip4","src_ip":"30.54.142.240","dst_ip":"250.58.112.87","src_port":56251,"dst_port":161,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3}
00520{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"snmp.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_last_seen":1597326976979,"flow_idle_time":180000,"pkt_oversize":false,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"thread_ts_msec":1597326976979,"pkt":"AAAAuxzeAAwpBeNBCABFAABcyKtAAEARWi0eNo7w+jpwV9u7AKEASImwMD4CAQMwEQIEbJr1bgIDAP\/jBAEEAgEDBBAwDgQAAgEAAgEABAAEAAQAMBQEAAQAoA4CBHUFWIgCAQACAQAwAA=="}
00636{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":17,"source":"snmp.pcap","alias":"nDPId-test","flow_id":5,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1597326976979,"flow_last_seen":1597326976979,"flow_idle_time":180000,"flow_min_l4_payload_len":64,"flow_max_l4_payload_len":64,"flow_tot_l4_payload_len":64,"flow_avg_l4_payload_len":64,"midstream":0,"thread_ts_msec":1597326976979,"l3_proto":"ip4","src_ip":"30.54.142.240","dst_ip":"250.58.112.87","src_port":56251,"dst_port":161,"l4_proto":"udp","ndpi": {"confidence": {"4":"DPI"},"proto":"SNMP","breed":"Acceptable","category":"Network"}}
00572{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"snmp.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":2,"flow_last_seen":1597326977116,"flow_idle_time":180000,"pkt_oversize":false,"pkt_caplen":147,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":147,"pkt_l4_len":113,"thread_ts_msec":1597326977116,"pkt":"AAwpBeNBAAAAuxzeCABFAACFAAoAAP8Ro6X6OnBXHjaO8ACh27sAcS3eMGcCAQMwEAIEbJr1bgICBdwEAQACAQMEHTAbBAyAAAAJAwCqu8wAAQACAQwCAgLNBAAEAAQAMDEEDIAAAAkDAKq7zAABAAQAqB8CBHUFWIgCAQACAQAwETAPBgorBgEGAw8BAQQAQQEB"}
00589{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"snmp.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":3,"flow_last_seen":1597326977118,"flow_idle_time":180000,"pkt_oversize":false,"pkt_caplen":157,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":157,"pkt_l4_len":123,"thread_ts_msec":1597326977118,"pkt":"AAAAuxzeAAwpBeNBCABFAACPyNFAAEARWdQeNo7w+jpwV9u7AKEAe86sMHECAQMwEQIEbJr1bQIDAP\/jBAEEAgEDBCkwJwQMgAAACQMAqrvMAAEAAgEMAgICzQQMTk9BVVRITk9QUklWBAAEADAuBAyAAAAJAwCqu8wAAQAEAKEcAgR1BViHAgEAAgEAMA4wDAYIKwYBAgEBBQAFAA=="}
00577{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":23,"source":"snmp.pcap","alias":"nDPId-test","flow_id":6,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1597326981183,"flow_last_seen":1597326981183,"flow_idle_time":180000,"flow_min_l4_payload_len":64,"flow_max_l4_payload_len":64,"flow_tot_l4_payload_len":64,"flow_avg_l4_payload_len":64,"midstream":0,"thread_ts_msec":1597326981183,"l3_proto":"ip4","src_ip":"30.54.142.240","dst_ip":"250.58.112.87","src_port":52435,"dst_port":161,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3}
00520{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"snmp.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_last_seen":1597326981183,"flow_idle_time":180000,"pkt_oversize":false,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"thread_ts_msec":1597326981183,"pkt":"AAAAuxzeAAwpBeNBCABFAABcyU5AAEARWYoeNo7w+jpwV8zTAKEASN4QMD4CAQMwEQIEW6KoJAIDAP\/jBAEEAgEDBBAwDgQAAgEAAgEABAAEAAQAMBQEAAQAoA4CBAxVvh4CAQACAQAwAA=="}
00636{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":23,"source":"snmp.pcap","alias":"nDPId-test","flow_id":6,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1597326981183,"flow_last_seen":1597326981183,"flow_idle_time":180000,"flow_min_l4_payload_len":64,"flow_max_l4_payload_len":64,"flow_tot_l4_payload_len":64,"flow_avg_l4_payload_len":64,"midstream":0,"thread_ts_msec":1597326981183,"l3_proto":"ip4","src_ip":"30.54.142.240","dst_ip":"250.58.112.87","src_port":52435,"dst_port":161,"l4_proto":"udp","ndpi": {"confidence": {"4":"DPI"},"proto":"SNMP","breed":"Acceptable","category":"Network"}}
00572{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"snmp.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":2,"flow_last_seen":1597326981296,"flow_idle_time":180000,"pkt_oversize":false,"pkt_caplen":147,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":147,"pkt_l4_len":113,"thread_ts_msec":1597326981296,"pkt":"AAwpBeNBAAAAuxzeCABFAACFAA0AAP8Ro6L6OnBXHjaO8AChzNMAcYE6MGcCAQMwEAIEW6KoJAICBdwEAQACAQMEHTAbBAyAAAAJAwCqu8wAAQACAQwCAgLRBAAEAAQAMDEEDIAAAAkDAKq7zAABAAQAqB8CBAxVvh4CAQACAQAwETAPBgorBgEGAw8BAQQAQQEC"}
00589{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"snmp.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":3,"flow_last_seen":1597326981298,"flow_idle_time":180000,"pkt_oversize":false,"pkt_caplen":157,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":157,"pkt_l4_len":123,"thread_ts_msec":1597326981298,"pkt":"AAAAuxzeAAwpBeNBCABFAACPyaxAAEARWPkeNo7w+jpwV8zTAKEAezX3MHECAQMwEQIEW6KoIwIDAP\/jBAEEAgEDBCkwJwQMgAAACQMAqrvMAAEAAgEMAgIC0QQMTk9BVVRITk9QUklWBAAEADAuBAyAAAAJAwCqu8wAAQAEAKEcAgQMVb4dAgEAAgEAMA4wDAYIKwYBAgEBBAAFAA=="}
00548{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":29,"source":"snmp.pcap","alias":"nDPId-test","packets-captured":29,"packets-processed":28,"total-skipped-flows":0,"total-l4-data-len":2120,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":6,"total-detection-updates":0,"total-updates":0,"current-active-flows":6,"total-active-flows":6,"total-idle-flows":0,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":33,"global_ts_msec":1597327640387}
00576{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":29,"source":"snmp.pcap","alias":"nDPId-test","flow_id":7,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1597327640387,"flow_last_seen":1597327640387,"flow_idle_time":180000,"flow_min_l4_payload_len":64,"flow_max_l4_payload_len":64,"flow_tot_l4_payload_len":64,"flow_avg_l4_payload_len":64,"midstream":0,"thread_ts_msec":1597327640387,"l3_proto":"ip4","src_ip":"35.95.158.217","dst_ip":"30.79.214.36","src_port":60440,"dst_port":161,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3}
00521{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"snmp.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_last_seen":1597327640387,"flow_idle_time":180000,"pkt_oversize":false,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"thread_ts_msec":1597327640387,"pkt":"AAAA82AcAAwpEAFdCABFAABcnENAAEAR56EjX57ZHk\/WJOwYAKEASB50MD4CAQMwEQIEPsyxCwIDAP\/jBAEEAgEDBBAwDgQAAgEAAgEABAAEAAQAMBQEAAQAoA4CBGdAU6sCAQACAQAwAA=="}
00635{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":29,"source":"snmp.pcap","alias":"nDPId-test","flow_id":7,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1597327640387,"flow_last_seen":1597327640387,"flow_idle_time":180000,"flow_min_l4_payload_len":64,"flow_max_l4_payload_len":64,"flow_tot_l4_payload_len":64,"flow_avg_l4_payload_len":64,"midstream":0,"thread_ts_msec":1597327640387,"l3_proto":"ip4","src_ip":"35.95.158.217","dst_ip":"30.79.214.36","src_port":60440,"dst_port":161,"l4_proto":"udp","ndpi": {"confidence": {"4":"DPI"},"proto":"SNMP","breed":"Acceptable","category":"Network"}}
00572{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"snmp.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":2,"flow_last_seen":1597327640485,"flow_idle_time":180000,"pkt_oversize":false,"pkt_caplen":147,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":147,"pkt_l4_len":113,"thread_ts_msec":1597327640485,"pkt":"AAwpEAFdAAAA82AcCABFAACFAC4AAP8RBI4eT9YkI1+e2QCh7BgAcbQKMGcCAQMwEAIEPsyxCwICBdwEAQACAQMEHTAbBAyAAAAJAwCqu8wAAQACAQwCAgVkBAAEAAQAMDEEDIAAAAkDAKq7zAABAAQAqB8CBGdAU6sCAQACAQAwETAPBgorBgEGAw8BAQQAQQEN"}
00602{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"snmp.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":3,"flow_last_seen":1597327640489,"flow_idle_time":180000,"pkt_oversize":false,"pkt_caplen":167,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":167,"pkt_l4_len":133,"thread_ts_msec":1597327640489,"pkt":"AAAA82AcAAwpEAFdCABFAACZnE9AAEAR51gjX57ZHk\/WJOwYAKEAhSYyMHsCAQMwEQIEPsyxCgIDAP\/jBAEFAgEDBDMwMQQMgAAACQMAqrvMAAEAAgEMAgIFZAQKU0hBMU5PUFJJVgQM+aZLjyUgeKDqkPwVBAAwLgQMgAAACQMAqrvMAAEABAChHAIEZ0BTqgIBAAIBADAOMAwGCCsGAQIBAQUABQA="}
00576{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":35,"source":"snmp.pcap","alias":"nDPId-test","flow_id":8,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1597327646611,"flow_last_seen":1597327646611,"flow_idle_time":180000,"flow_min_l4_payload_len":64,"flow_max_l4_payload_len":64,"flow_tot_l4_payload_len":64,"flow_avg_l4_payload_len":64,"midstream":0,"thread_ts_msec":1597327646611,"l3_proto":"ip4","src_ip":"35.95.158.217","dst_ip":"30.79.214.36","src_port":49306,"dst_port":161,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3}
00521{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"snmp.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_last_seen":1597327646611,"flow_idle_time":180000,"pkt_oversize":false,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"thread_ts_msec":1597327646611,"pkt":"AAAA82AcAAwpEAFdCABFAABcoAFAAEAR4+MjX57ZHk\/WJMCaAKEASMHoMD4CAQMwEQIEaTnV4AIDAP\/jBAEEAgEDBBAwDgQAAgEAAgEABAAEAAQAMBQEAAQAoA4CBH1wgzUCAQACAQAwAA=="}
00635{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":35,"source":"snmp.pcap","alias":"nDPId-test","flow_id":8,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1597327646611,"flow_last_seen":1597327646611,"flow_idle_time":180000,"flow_min_l4_payload_len":64,"flow_max_l4_payload_len":64,"flow_tot_l4_payload_len":64,"flow_avg_l4_payload_len":64,"midstream":0,"thread_ts_msec":1597327646611,"l3_proto":"ip4","src_ip":"35.95.158.217","dst_ip":"30.79.214.36","src_port":49306,"dst_port":161,"l4_proto":"udp","ndpi": {"confidence": {"4":"DPI"},"proto":"SNMP","breed":"Acceptable","category":"Network"}}
00572{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"snmp.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":2,"flow_last_seen":1597327646725,"flow_idle_time":180000,"pkt_oversize":false,"pkt_caplen":147,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":147,"pkt_l4_len":113,"thread_ts_msec":1597327646725,"pkt":"AAwpEAFdAAAA82AcCABFAACFADEAAP8RBIseT9YkI1+e2QChwJoAcVZ4MGcCAQMwEAIEaTnV4AICBdwEAQACAQMEHTAbBAyAAAAJAwCqu8wAAQACAQwCAgVrBAAEAAQAMDEEDIAAAAkDAKq7zAABAAQAqB8CBH1wgzUCAQACAQAwETAPBgorBgEGAw8BAQQAQQEO"}
00602{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"snmp.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":3,"flow_last_seen":1597327646730,"flow_idle_time":180000,"pkt_oversize":false,"pkt_caplen":167,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":167,"pkt_l4_len":133,"thread_ts_msec":1597327646730,"pkt":"AAAA82AcAAwpEAFdCABFAACZoDlAAEAR424jX57ZHk\/WJMCaAKEAhS98MHsCAQMwEQIEaTnV3wIDAP\/jBAEFAgEDBDMwMQQMgAAACQMAqrvMAAEAAgEMAgIFawQKU0hBMU5PUFJJVgQMdsqnL4gHLPYGipA6BAAwLgQMgAAACQMAqrvMAAEABAChHAIEfXCDNAIBAAIBADAOMAwGCCsGAQIBAQQABQA="}
00676{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":41,"source":"snmp.pcap","alias":"nDPId-test","flow_id":2,"flow_state":"finished","flow_packets_processed":4,"flow_first_seen":1597326838035,"flow_last_seen":1597326838291,"flow_idle_time":180000,"flow_min_l4_payload_len":43,"flow_max_l4_payload_len":57,"flow_tot_l4_payload_len":198,"flow_avg_l4_payload_len":49,"midstream":0,"thread_ts_msec":1597327647026,"l3_proto":"ip4","src_ip":"65.2.162.193","dst_ip":"130.70.149.185","src_port":59988,"dst_port":161,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"SNMP","breed":"Acceptable","category":"Network"}}
00675{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":41,"source":"snmp.pcap","alias":"nDPId-test","flow_id":1,"flow_state":"finished","flow_packets_processed":4,"flow_first_seen":1597326815572,"flow_last_seen":1597326815833,"flow_idle_time":180000,"flow_min_l4_payload_len":43,"flow_max_l4_payload_len":57,"flow_tot_l4_payload_len":198,"flow_avg_l4_payload_len":49,"midstream":0,"thread_ts_msec":1597327647026,"l3_proto":"ip4","src_ip":"176.211.60.43","dst_ip":"97.0.115.163","src_port":43015,"dst_port":161,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"SNMP","breed":"Acceptable","category":"Network"}}
00678{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":41,"source":"snmp.pcap","alias":"nDPId-test","flow_id":5,"flow_state":"finished","flow_packets_processed":6,"flow_first_seen":1597326976979,"flow_last_seen":1597326977413,"flow_idle_time":180000,"flow_min_l4_payload_len":64,"flow_max_l4_payload_len":128,"flow_tot_l4_payload_len":653,"flow_avg_l4_payload_len":108,"midstream":0,"thread_ts_msec":1597327647026,"l3_proto":"ip4","src_ip":"30.54.142.240","dst_ip":"250.58.112.87","src_port":56251,"dst_port":161,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"SNMP","breed":"Acceptable","category":"Network"}}
00676{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":41,"source":"snmp.pcap","alias":"nDPId-test","flow_id":4,"flow_state":"finished","flow_packets_processed":4,"flow_first_seen":1597326863415,"flow_last_seen":1597326863776,"flow_idle_time":180000,"flow_min_l4_payload_len":43,"flow_max_l4_payload_len":64,"flow_tot_l4_payload_len":205,"flow_avg_l4_payload_len":51,"midstream":0,"thread_ts_msec":1597327647026,"l3_proto":"ip4","src_ip":"65.2.162.193","dst_ip":"130.70.149.185","src_port":58433,"dst_port":161,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"SNMP","breed":"Acceptable","category":"Network"}}
00675{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":41,"source":"snmp.pcap","alias":"nDPId-test","flow_id":3,"flow_state":"finished","flow_packets_processed":4,"flow_first_seen":1597326858008,"flow_last_seen":1597326858289,"flow_idle_time":180000,"flow_min_l4_payload_len":43,"flow_max_l4_payload_len":64,"flow_tot_l4_payload_len":205,"flow_avg_l4_payload_len":51,"midstream":0,"thread_ts_msec":1597327647026,"l3_proto":"ip4","src_ip":"176.211.60.43","dst_ip":"97.0.115.163","src_port":37224,"dst_port":161,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"SNMP","breed":"Acceptable","category":"Network"}}
00678{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":41,"source":"snmp.pcap","alias":"nDPId-test","flow_id":6,"flow_state":"finished","flow_packets_processed":6,"flow_first_seen":1597326981183,"flow_last_seen":1597326981598,"flow_idle_time":180000,"flow_min_l4_payload_len":64,"flow_max_l4_payload_len":136,"flow_tot_l4_payload_len":661,"flow_avg_l4_payload_len":110,"midstream":0,"thread_ts_msec":1597327647026,"l3_proto":"ip4","src_ip":"30.54.142.240","dst_ip":"250.58.112.87","src_port":52435,"dst_port":161,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"SNMP","breed":"Acceptable","category":"Network"}}
00578{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":41,"source":"snmp.pcap","alias":"nDPId-test","flow_id":9,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1597327800258,"flow_last_seen":1597327800258,"flow_idle_time":180000,"flow_min_l4_payload_len":64,"flow_max_l4_payload_len":64,"flow_tot_l4_payload_len":64,"flow_avg_l4_payload_len":64,"midstream":0,"thread_ts_msec":1597327800258,"l3_proto":"ip4","src_ip":"131.179.49.165","dst_ip":"254.158.1.169","src_port":60694,"dst_port":161,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3}
00521{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"snmp.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_last_seen":1597327800258,"flow_idle_time":180000,"pkt_oversize":false,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"thread_ts_msec":1597327800258,"pkt":"AAAAV4hpAAwpsVpsCABFAABcjYRAAEAR92yDszGl\/p4Bqe0WAKEASKFzMD4CAQMwEQIESC476wIDAP\/jBAEEAgEDBBAwDgQAAgEAAgEABAAEAAQAMBQEAAQAoA4CBFFbpQoCAQACAQAwAA=="}
00637{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":41,"source":"snmp.pcap","alias":"nDPId-test","flow_id":9,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1597327800258,"flow_last_seen":1597327800258,"flow_idle_time":180000,"flow_min_l4_payload_len":64,"flow_max_l4_payload_len":64,"flow_tot_l4_payload_len":64,"flow_avg_l4_payload_len":64,"midstream":0,"thread_ts_msec":1597327800258,"l3_proto":"ip4","src_ip":"131.179.49.165","dst_ip":"254.158.1.169","src_port":60694,"dst_port":161,"l4_proto":"udp","ndpi": {"confidence": {"4":"DPI"},"proto":"SNMP","breed":"Acceptable","category":"Network"}}
00572{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"snmp.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":2,"flow_last_seen":1597327800373,"flow_idle_time":180000,"pkt_oversize":false,"pkt_caplen":147,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":147,"pkt_l4_len":113,"thread_ts_msec":1597327800373,"pkt":"AAwpsVpsAAAAV4hpCABFAACFADwAAP8RBYz+ngGpg7MxpQCh7RYAcTFqMGcCAQMwEAIESC476wICBdwEAQACAQMEHTAbBAyAAAAJAwCqu8wAAQACAQwCAgYEBAAEAAQAMDEEDIAAAAkDAKq7zAABAAQAqB8CBFFbpQoCAQACAQAwETAPBgorBgEGAw8BAQQAQQES"}
00619{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"snmp.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":3,"flow_last_seen":1597327800375,"flow_idle_time":180000,"pkt_oversize":false,"pkt_caplen":178,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":178,"pkt_l4_len":144,"thread_ts_msec":1597327800375,"pkt":"AAAAV4hpAAwpsVpsCABFAACkjZFAAEAR9xeDszGl\/p4Bqe0WAKEAkIDGMIGFAgEDMBECBEguO+oCAwD\/4wQBBwIBAwQ7MDkEDIAAAAkDAKq7zAABAAIBDAICBgQEClNIQTFBRVMxMjgEDFRZRuSc\/VhrMMFzGAQIOby89G+ocM4EMAJRqrL1y0ddF49kZLmuqEd2Zc5EUOuNk0HcYVl0aShUgcBxMzYymbe4GgHUhuqMnA=="}
00579{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":47,"source":"snmp.pcap","alias":"nDPId-test","flow_id":10,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1597327805470,"flow_last_seen":1597327805470,"flow_idle_time":180000,"flow_min_l4_payload_len":64,"flow_max_l4_payload_len":64,"flow_tot_l4_payload_len":64,"flow_avg_l4_payload_len":64,"midstream":0,"thread_ts_msec":1597327805470,"l3_proto":"ip4","src_ip":"131.179.49.165","dst_ip":"254.158.1.169","src_port":35970,"dst_port":161,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3}
00522{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"snmp.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_last_seen":1597327805470,"flow_idle_time":180000,"pkt_oversize":false,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"thread_ts_msec":1597327805470,"pkt":"AAAAV4hpAAwpsVpsCABFAABcmE1AAEAR7KODszGl\/p4BqYyCAKEASI48MD4CAQMwEQIETLLWIgIDAP\/jBAEEAgEDBBAwDgQAAgEAAgEABAAEAAQAMBQEAAQAoA4CBG51QB0CAQACAQAwAA=="}
00638{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":47,"source":"snmp.pcap","alias":"nDPId-test","flow_id":10,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1597327805470,"flow_last_seen":1597327805470,"flow_idle_time":180000,"flow_min_l4_payload_len":64,"flow_max_l4_payload_len":64,"flow_tot_l4_payload_len":64,"flow_avg_l4_payload_len":64,"midstream":0,"thread_ts_msec":1597327805470,"l3_proto":"ip4","src_ip":"131.179.49.165","dst_ip":"254.158.1.169","src_port":35970,"dst_port":161,"l4_proto":"udp","ndpi": {"confidence": {"4":"DPI"},"proto":"SNMP","breed":"Acceptable","category":"Network"}}
00573{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"snmp.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":2,"flow_last_seen":1597327805611,"flow_idle_time":180000,"pkt_oversize":false,"pkt_caplen":147,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":147,"pkt_l4_len":113,"thread_ts_msec":1597327805611,"pkt":"AAwpsVpsAAAAV4hpCABFAACFAD8AAP8RBYn+ngGpg7MxpQChjIIAcR0uMGcCAQMwEAIETLLWIgICBdwEAQACAQMEHTAbBAyAAAAJAwCqu8wAAQACAQwCAgYJBAAEAAQAMDEEDIAAAAkDAKq7zAABAAQAqB8CBG51QB0CAQACAQAwETAPBgorBgEGAw8BAQQAQQET"}
00621{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"snmp.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":3,"flow_last_seen":1597327805613,"flow_idle_time":180000,"pkt_oversize":false,"pkt_caplen":178,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":178,"pkt_l4_len":144,"thread_ts_msec":1597327805613,"pkt":"AAAAV4hpAAwpsVpsCABFAACkmNVAAEAR69ODszGl\/p4BqYyCAKEAkN2JMIGFAgEDMBECBEyy1iECAwD\/4wQBBwIBAwQ7MDkEDIAAAAkDAKq7zAABAAIBDAICBgkEClNIQTFBRVMxMjgEDJtziJHxaodwRs3eIQQIgB4HBiglqmIEMAupq3l+cOYYEzoCHoY5O4X4TJUa2wXJNOK\/b37r1sMKQ+nPnY1s\/d1MAtxa8BQz+g=="}
00550{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":53,"source":"snmp.pcap","alias":"nDPId-test","packets-captured":53,"packets-processed":52,"total-skipped-flows":0,"total-l4-data-len":4998,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":10,"total-detection-updates":0,"total-updates":0,"current-active-flows":4,"total-active-flows":10,"total-idle-flows":6,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":60,"global_ts_msec":1597328385284}
00583{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":53,"source":"snmp.pcap","alias":"nDPId-test","flow_id":11,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1597328385284,"flow_last_seen":1597328385284,"flow_idle_time":180000,"flow_min_l4_payload_len":173,"flow_max_l4_payload_len":173,"flow_tot_l4_payload_len":173,"flow_avg_l4_payload_len":173,"midstream":0,"thread_ts_msec":1597328385284,"l3_proto":"ip4","src_ip":"92.135.15.240","dst_ip":"137.49.110.186","src_port":54318,"dst_port":162,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3}
00667{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"snmp.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_last_seen":1597328385284,"flow_idle_time":180000,"pkt_oversize":false,"pkt_caplen":215,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":215,"pkt_l4_len":181,"thread_ts_msec":1597328385284,"pkt":"AAwpOSzhAAAASwKNCABFAADJAAAAAP8RVsFchw\/wiTFuutQuAKIAtdeqMIGqAgEBBAhwdWJsaWMyY6eBmgIBFwIBAAIBADCBjjAPBggrBgECAQEDAEMDAz\/FMBcGCisGAQYDAQEEAQAGCSsGAQYDAQEFAzAPBgorBgECAQICAQECAgECMBkGCisGAQIBAgIBAgIEC0V0aGVybmV0MC8xMA8GCisGAQIBAgIBAwICAQYwJQYMKwYBBAEJAgIBARQCBBVhZG1pbmlzdHJhdGl2ZWx5IGRvd24="}
00642{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":53,"source":"snmp.pcap","alias":"nDPId-test","flow_id":11,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1597328385284,"flow_last_seen":1597328385284,"flow_idle_time":180000,"flow_min_l4_payload_len":173,"flow_max_l4_payload_len":173,"flow_tot_l4_payload_len":173,"flow_avg_l4_payload_len":173,"midstream":0,"thread_ts_msec":1597328385284,"l3_proto":"ip4","src_ip":"92.135.15.240","dst_ip":"137.49.110.186","src_port":54318,"dst_port":162,"l4_proto":"udp","ndpi": {"confidence": {"4":"DPI"},"proto":"SNMP","breed":"Acceptable","category":"Network"}}
00679{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":54,"source":"snmp.pcap","alias":"nDPId-test","flow_id":9,"flow_state":"finished","flow_packets_processed":6,"flow_first_seen":1597327800258,"flow_last_seen":1597327800683,"flow_idle_time":180000,"flow_min_l4_payload_len":64,"flow_max_l4_payload_len":149,"flow_tot_l4_payload_len":737,"flow_avg_l4_payload_len":122,"midstream":0,"thread_ts_msec":1597328385284,"l3_proto":"ip4","src_ip":"131.179.49.165","dst_ip":"254.158.1.169","src_port":60694,"dst_port":161,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"SNMP","breed":"Acceptable","category":"Network"}}
00677{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":54,"source":"snmp.pcap","alias":"nDPId-test","flow_id":7,"flow_state":"finished","flow_packets_processed":6,"flow_first_seen":1597327640387,"flow_last_seen":1597327640799,"flow_idle_time":180000,"flow_min_l4_payload_len":64,"flow_max_l4_payload_len":139,"flow_tot_l4_payload_len":695,"flow_avg_l4_payload_len":115,"midstream":0,"thread_ts_msec":1597328385284,"l3_proto":"ip4","src_ip":"35.95.158.217","dst_ip":"30.79.214.36","src_port":60440,"dst_port":161,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"SNMP","breed":"Acceptable","category":"Network"}}
00677{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":54,"source":"snmp.pcap","alias":"nDPId-test","flow_id":8,"flow_state":"finished","flow_packets_processed":6,"flow_first_seen":1597327646611,"flow_last_seen":1597327647026,"flow_idle_time":180000,"flow_min_l4_payload_len":64,"flow_max_l4_payload_len":146,"flow_tot_l4_payload_len":702,"flow_avg_l4_payload_len":117,"midstream":0,"thread_ts_msec":1597328385284,"l3_proto":"ip4","src_ip":"35.95.158.217","dst_ip":"30.79.214.36","src_port":49306,"dst_port":161,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"SNMP","breed":"Acceptable","category":"Network"}}
00680{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":54,"source":"snmp.pcap","alias":"nDPId-test","flow_id":10,"flow_state":"finished","flow_packets_processed":6,"flow_first_seen":1597327805470,"flow_last_seen":1597327805899,"flow_idle_time":180000,"flow_min_l4_payload_len":64,"flow_max_l4_payload_len":156,"flow_tot_l4_payload_len":744,"flow_avg_l4_payload_len":124,"midstream":0,"thread_ts_msec":1597328385284,"l3_proto":"ip4","src_ip":"131.179.49.165","dst_ip":"254.158.1.169","src_port":35970,"dst_port":161,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"SNMP","breed":"Acceptable","category":"Network"}}
00638{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":54,"source":"snmp.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":2,"flow_last_seen":1597328420435,"flow_idle_time":180000,"pkt_oversize":false,"pkt_caplen":195,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":195,"pkt_l4_len":161,"thread_ts_msec":1597328420435,"pkt":"AAwpOSzhAAAASwKNCABFAAC1AAEAAP8RVtRchw\/wiTFuutQuAKIAoQR+MIGWAgEBBAhwdWJsaWMyY6eBhgIBHAIBAAIBADB7MA8GCCsGAQIBAQMAQwMDTYAwFwYKKwYBBgMBAQQBAAYJKwYBBgMBAQUEMA8GCisGAQIBAgIBAQICAQIwGQYKKwYBAgECAgECAgQLRXRoZXJuZXQwLzEwDwYKKwYBAgECAgEDAgIBBjASBgwrBgEEAQkCAgEBFAIEAnVw"}
00585{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":55,"source":"snmp.pcap","alias":"nDPId-test","flow_id":12,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1597328648399,"flow_last_seen":1597328648399,"flow_idle_time":180000,"flow_min_l4_payload_len":146,"flow_max_l4_payload_len":146,"flow_tot_l4_payload_len":146,"flow_avg_l4_payload_len":146,"midstream":0,"thread_ts_msec":1597328648399,"l3_proto":"ip4","src_ip":"200.76.132.137","dst_ip":"189.111.255.214","src_port":54318,"dst_port":162,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3}
00632{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":55,"source":"snmp.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_last_seen":1597328648399,"flow_idle_time":180000,"pkt_oversize":false,"pkt_caplen":188,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":188,"pkt_l4_len":154,"thread_ts_msec":1597328648399,"pkt":"AAwpl\/zFAAAAQogiCABFAACuAAIAAP8RsSDITISJvW\/\/1tQuAKIAmmoKMIGPAgEABAZwdWJsaWOkgYEGCCsGAQYDAQEFQAQKAR4BAgECAgEAQwMDpowwZDAPBgorBgECAQICAQECAgECMBkGCisGAQIBAgIBAgIEC0V0aGVybmV0MC8xMA8GCisGAQIBAgIBAwICAQYwJQYMKwYBBAEJAgIBARQCBBVhZG1pbmlzdHJhdGl2ZWx5IGRvd24="}
00644{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":55,"source":"snmp.pcap","alias":"nDPId-test","flow_id":12,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1597328648399,"flow_last_seen":1597328648399,"flow_idle_time":180000,"flow_min_l4_payload_len":146,"flow_max_l4_payload_len":146,"flow_tot_l4_payload_len":146,"flow_avg_l4_payload_len":146,"midstream":0,"thread_ts_msec":1597328648399,"l3_proto":"ip4","src_ip":"200.76.132.137","dst_ip":"189.111.255.214","src_port":54318,"dst_port":162,"l4_proto":"udp","ndpi": {"confidence": {"4":"DPI"},"proto":"SNMP","breed":"Acceptable","category":"Network"}}
00584{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":56,"source":"snmp.pcap","alias":"nDPId-test","flow_id":11,"flow_state":"info","flow_packets_processed":2,"flow_first_seen":1597328385284,"flow_last_seen":1597328420435,"flow_idle_time":180000,"flow_min_l4_payload_len":153,"flow_max_l4_payload_len":173,"flow_tot_l4_payload_len":326,"flow_avg_l4_payload_len":163,"midstream":0,"thread_ts_msec":1597328648399,"l3_proto":"ip4","src_ip":"92.135.15.240","dst_ip":"137.49.110.186","src_port":54318,"dst_port":162,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3}
00604{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"snmp.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":2,"flow_last_seen":1597328660640,"flow_idle_time":180000,"pkt_oversize":false,"pkt_caplen":167,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":167,"pkt_l4_len":133,"thread_ts_msec":1597328660640,"pkt":"AAwpl\/zFAAAAQogiCABFAACZAAMAAP8RsTTITISJvW\/\/1tQuAKIAhYZxMHsCAQAEBnB1YmxpY6RuBggrBgEGAwEBBUAECgEeAQIBAwIBAEMDA6tUMFEwDwYKKwYBAgECAgEBAgIBAjAZBgorBgECAQICAQICBAtFdGhlcm5ldDAvMTAPBgorBgECAQICAQMCAgEGMBIGDCsGAQQBCQICAQEUAgQCdXA="}
00584{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":57,"source":"snmp.pcap","alias":"nDPId-test","flow_id":13,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1597328704045,"flow_last_seen":1597328704045,"flow_idle_time":180000,"flow_min_l4_payload_len":250,"flow_max_l4_payload_len":250,"flow_tot_l4_payload_len":250,"flow_avg_l4_payload_len":250,"midstream":0,"thread_ts_msec":1597328704045,"l3_proto":"ip4","src_ip":"113.19.156.111","dst_ip":"135.201.124.55","src_port":54318,"dst_port":162,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3}
00769{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":57,"source":"snmp.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_last_seen":1597328704045,"flow_idle_time":180000,"pkt_oversize":false,"pkt_caplen":292,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":292,"pkt_l4_len":258,"thread_ts_msec":1597328704045,"pkt":"AAwpOzE1AAAAQZqWCABFAAEWAAQAAP8RqU9xE5xvh8l8N9QuAKIBAqHIMIH3AgEDMA0CASACAgXcBAEBAgEDBDMwMQQMgAAACQMAqrvMAAEAAgEMAgIJjAQKU0hBMU5PUFJJVgQM1oH0ll47GC4cDzqhBAAwga0EDIAAAAkDAKq7zAABAAQAp4GaAgEnAgEAAgEAMIGOMA8GCCsGAQIBAQMAQwMDvEgwFwYKKwYBBgMBAQQBAAYJKwYBBgMBAQUDMA8GCisGAQIBAgIBAQICAQIwGQYKKwYBAgECAgECAgQLRXRoZXJuZXQwLzEwDwYKKwYBAgECAgEDAgIBBjAlBgwrBgEEAQkCAgEBFAIEFWFkbWluaXN0cmF0aXZlbHkgZG93bg=="}
00643{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":57,"source":"snmp.pcap","alias":"nDPId-test","flow_id":13,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1597328704045,"flow_last_seen":1597328704045,"flow_idle_time":180000,"flow_min_l4_payload_len":250,"flow_max_l4_payload_len":250,"flow_tot_l4_payload_len":250,"flow_avg_l4_payload_len":250,"midstream":0,"thread_ts_msec":1597328704045,"l3_proto":"ip4","src_ip":"113.19.156.111","dst_ip":"135.201.124.55","src_port":54318,"dst_port":162,"l4_proto":"udp","ndpi": {"confidence": {"4":"DPI"},"proto":"SNMP","breed":"Acceptable","category":"Network"}}
00741{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":58,"source":"snmp.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":2,"flow_last_seen":1597328710051,"flow_idle_time":180000,"pkt_oversize":false,"pkt_caplen":272,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":272,"pkt_l4_len":238,"thread_ts_msec":1597328710051,"pkt":"AAwpOzE1AAAAQZqWCABFAAECAAUAAP8RqWJxE5xvh8l8N9QuAKIA7p+NMIHjAgEDMA0CASMCAgXcBAEBAgEDBDMwMQQMgAAACQMAqrvMAAEAAgEMAgIJkgQKU0hBMU5PUFJJVgQMcPbtNC5tixaBN+YcBAAwgZkEDIAAAAkDAKq7zAABAAQAp4GGAgEqAgEAAgEAMHswDwYIKwYBAgEBAwBDAwO+oTAXBgorBgEGAwEBBAEABgkrBgEGAwEBBQQwDwYKKwYBAgECAgEBAgIBAjAZBgorBgECAQICAQICBAtFdGhlcm5ldDAvMTAPBgorBgECAQICAQMCAgEGMBIGDCsGAQQBCQICAQEUAgQCdXA="}
00583{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":59,"source":"snmp.pcap","alias":"nDPId-test","flow_id":14,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1597328734790,"flow_last_seen":1597328734790,"flow_idle_time":180000,"flow_min_l4_payload_len":262,"flow_max_l4_payload_len":262,"flow_tot_l4_payload_len":262,"flow_avg_l4_payload_len":262,"midstream":0,"thread_ts_msec":1597328734790,"l3_proto":"ip4","src_ip":"205.83.36.228","dst_ip":"160.174.106.32","src_port":54318,"dst_port":162,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3}
00789{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":59,"source":"snmp.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_last_seen":1597328734790,"flow_idle_time":180000,"pkt_oversize":false,"pkt_caplen":304,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":304,"pkt_l4_len":270,"thread_ts_msec":1597328734790,"pkt":"AAwpO2J6AAAAsIjCCABFAAEiAAYAAP8Rvb7NUyTkoK5qINQuAKIBDjinMIIBAgIBAzANAgElAgIF3AQBAwIBAwQ7MDkEDIAAAAkDAKq7zAABAAIBDAICCaoEClNIQTFBRVMxMjgEDPKVtczhvcY8vhvJVAQIsS3M0yiHjgUEgbAnmr8wOCOyncERaoSBQmnUCi+GoiiHqqCMFm1apQAmwk\/cF1kswlENhkIfwuB9kMILtKYuWyXXhtZBleYhoJQEJYL7o1K69bHQdMdklHbovW30zBhWTTYkhrDbN4HddHDCYjhho5GVn7THewhnReV4IFApn9hzgyZDXzSTb2D\/0RJlFbaWfzYDq0UV1+MA7WWFcwUGZiNX1Ldy1p\/JOH\/FaH0e0KzJstFu7lv44GdmqQ=="}
00642{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":59,"source":"snmp.pcap","alias":"nDPId-test","flow_id":14,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1597328734790,"flow_last_seen":1597328734790,"flow_idle_time":180000,"flow_min_l4_payload_len":262,"flow_max_l4_payload_len":262,"flow_tot_l4_payload_len":262,"flow_avg_l4_payload_len":262,"midstream":0,"thread_ts_msec":1597328734790,"l3_proto":"ip4","src_ip":"205.83.36.228","dst_ip":"160.174.106.32","src_port":54318,"dst_port":162,"l4_proto":"udp","ndpi": {"confidence": {"4":"DPI"},"proto":"SNMP","breed":"Acceptable","category":"Network"}}
00763{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"snmp.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":2,"flow_last_seen":1597328742081,"flow_idle_time":180000,"pkt_oversize":false,"pkt_caplen":283,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":283,"pkt_l4_len":249,"thread_ts_msec":1597328742081,"pkt":"AAwpO2J6AAAAsIjCCABFAAENAAcAAP8RvdLNUyTkoK5qINQuAKIA+WP9MIHuAgEDMA0CAScCAgXcBAEDAgEDBDswOQQMgAAACQMAqrvMAAEAAgEMAgIJsgQKU0hBMUFFUzEyOAQMO\/P\/PiMrdy+zI+pWBAixLczTKIeOBgSBnCB4NWdRsPt\/T9sXiMHAl69GjDJCReyQSzQtmF\/nJsUYLVpgPIp8uZxxPNbTjAYUMQF1Osi1p+iIFHpG7RpGbbDoCSdQgbLhTwfCVCvu95CHITG6rLcZ3QulV6HanbKQFQQW+YRQ9YjpumIMl5\/KtH3Wg4qxgFbt6UHjjb8VdU58\/THnGpgoaAoCTQPlYaIf1lQq7RYRPcJRLqyyuw=="}
00583{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":61,"source":"snmp.pcap","alias":"nDPId-test","flow_id":15,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1597328757701,"flow_last_seen":1597328757701,"flow_idle_time":180000,"flow_min_l4_payload_len":240,"flow_max_l4_payload_len":240,"flow_tot_l4_payload_len":240,"flow_avg_l4_payload_len":240,"midstream":0,"thread_ts_msec":1597328757701,"l3_proto":"ip4","src_ip":"124.53.196.176","dst_ip":"103.248.22.47","src_port":54318,"dst_port":162,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3}
00754{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":61,"source":"snmp.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_last_seen":1597328757701,"flow_idle_time":180000,"pkt_oversize":false,"pkt_caplen":282,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":282,"pkt_l4_len":248,"thread_ts_msec":1597328757701,"pkt":"AAwpbM85AAAAgfGMCABFAAEMAAgAAP8R+8t8NcSwZ\/gWL9QuAKIA+FTTMIHtAgEDMA0CASgCAgXcBAEAAgEDBCkwJwQMgAAACQMAqrvMAAEAAgEMAgIJwQQMTk9BVVRITk9QUklWBAAEADCBrQQMgAAACQMAqrvMAAEABACngZoCAS8CAQACAQAwgY4wDwYIKwYBAgEBAwBDAwPRPjAXBgorBgEGAwEBBAEABgkrBgEGAwEBBQMwDwYKKwYBAgECAgEBAgIBAjAZBgorBgECAQICAQICBAtFdGhlcm5ldDAvMTAPBgorBgECAQICAQMCAgEGMCUGDCsGAQQBCQICAQEUAgQVYWRtaW5pc3RyYXRpdmVseSBkb3du"}
00642{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":61,"source":"snmp.pcap","alias":"nDPId-test","flow_id":15,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1597328757701,"flow_last_seen":1597328757701,"flow_idle_time":180000,"flow_min_l4_payload_len":240,"flow_max_l4_payload_len":240,"flow_tot_l4_payload_len":240,"flow_avg_l4_payload_len":240,"midstream":0,"thread_ts_msec":1597328757701,"l3_proto":"ip4","src_ip":"124.53.196.176","dst_ip":"103.248.22.47","src_port":54318,"dst_port":162,"l4_proto":"udp","ndpi": {"confidence": {"4":"DPI"},"proto":"SNMP","breed":"Acceptable","category":"Network"}}
00731{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"snmp.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":2,"flow_last_seen":1597328765050,"flow_idle_time":180000,"pkt_oversize":false,"pkt_caplen":262,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":262,"pkt_l4_len":228,"thread_ts_msec":1597328765050,"pkt":"AAwpbM85AAAAgfGMCABFAAD4AAkAAP8R+958NcSwZ\/gWL9QuAKIA5B3\/MIHZAgEDMA0CASkCAgXcBAEAAgEDBCkwJwQMgAAACQMAqrvMAAEAAgEMAgIJyQQMTk9BVVRITk9QUklWBAAEADCBmQQMgAAACQMAqrvMAAEABACngYYCATACAQACAQAwezAPBggrBgECAQEDAEMDA9QeMBcGCisGAQYDAQEEAQAGCSsGAQYDAQEFBDAPBgorBgECAQICAQECAgECMBkGCisGAQIBAgIBAgIEC0V0aGVybmV0MC8xMA8GCisGAQIBAgIBAwICAQYwEgYMKwYBBAEJAgIBARQCBAJ1cA=="}
00551{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":63,"source":"snmp.pcap","alias":"nDPId-test","packets-captured":63,"packets-processed":62,"total-skipped-flows":0,"total-l4-data-len":7038,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":15,"total-detection-updates":0,"total-updates":0,"current-active-flows":4,"total-active-flows":15,"total-idle-flows":11,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":86,"global_ts_msec":1643702947966}
00579{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":63,"source":"snmp.pcap","alias":"nDPId-test","flow_id":16,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1643702947966,"flow_last_seen":1643702947966,"flow_idle_time":180000,"flow_min_l4_payload_len":185,"flow_max_l4_payload_len":185,"flow_tot_l4_payload_len":185,"flow_avg_l4_payload_len":185,"midstream":0,"thread_ts_msec":1643702947966,"l3_proto":"ip4","src_ip":"10.231.2.134","dst_ip":"10.72.247.4","src_port":161,"dst_port":61088,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3}
00686{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"snmp.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_last_seen":1643702947966,"flow_idle_time":180000,"pkt_oversize":false,"pkt_caplen":231,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":231,"pkt_l4_len":193,"thread_ts_msec":1643702947966,"pkt":"AAAAAAAAAAEAAAAIgQADjAgARcAA1To\/AABAETBgCucChgpI9wQAoe6gAMF5TzCCALUCAQEEBGFkc2yiggCoAgJkLgIBEwIBATCCAJowggCWBg8rBgEEAa1zWwEBAQEBDwEEgYJCR01QAQAAAAAAAAEwMDAwMDAAAAAAAAAAAAAAAABSMS42MS4xMi4wMAAAAAAAAAAAAAAAAAAAAAAAAAEAAAABAAAAAQAAAAYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAQAA"}
00638{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":63,"source":"snmp.pcap","alias":"nDPId-test","flow_id":16,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1643702947966,"flow_last_seen":1643702947966,"flow_idle_time":180000,"flow_min_l4_payload_len":185,"flow_max_l4_payload_len":185,"flow_tot_l4_payload_len":185,"flow_avg_l4_payload_len":185,"midstream":0,"thread_ts_msec":1643702947966,"l3_proto":"ip4","src_ip":"10.231.2.134","dst_ip":"10.72.247.4","src_port":161,"dst_port":61088,"l4_proto":"udp","ndpi": {"confidence": {"4":"DPI"},"proto":"SNMP","breed":"Acceptable","category":"Network"}}
00586{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":64,"source":"snmp.pcap","alias":"nDPId-test","flow_id":12,"flow_state":"info","flow_packets_processed":2,"flow_first_seen":1597328648399,"flow_last_seen":1597328660640,"flow_idle_time":180000,"flow_min_l4_payload_len":125,"flow_max_l4_payload_len":146,"flow_tot_l4_payload_len":271,"flow_avg_l4_payload_len":135,"midstream":0,"thread_ts_msec":1643702947966,"l3_proto":"ip4","src_ip":"200.76.132.137","dst_ip":"189.111.255.214","src_port":54318,"dst_port":162,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3}
00682{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":64,"source":"snmp.pcap","alias":"nDPId-test","flow_id":13,"flow_state":"finished","flow_packets_processed":2,"flow_first_seen":1597328704045,"flow_last_seen":1597328710051,"flow_idle_time":180000,"flow_min_l4_payload_len":230,"flow_max_l4_payload_len":250,"flow_tot_l4_payload_len":480,"flow_avg_l4_payload_len":240,"midstream":0,"thread_ts_msec":1643702947966,"l3_proto":"ip4","src_ip":"113.19.156.111","dst_ip":"135.201.124.55","src_port":54318,"dst_port":162,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"SNMP","breed":"Acceptable","category":"Network"}}
00681{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":64,"source":"snmp.pcap","alias":"nDPId-test","flow_id":15,"flow_state":"finished","flow_packets_processed":2,"flow_first_seen":1597328757701,"flow_last_seen":1597328765050,"flow_idle_time":180000,"flow_min_l4_payload_len":220,"flow_max_l4_payload_len":240,"flow_tot_l4_payload_len":460,"flow_avg_l4_payload_len":230,"midstream":0,"thread_ts_msec":1643702947966,"l3_proto":"ip4","src_ip":"124.53.196.176","dst_ip":"103.248.22.47","src_port":54318,"dst_port":162,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"SNMP","breed":"Acceptable","category":"Network"}}
00681{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":64,"source":"snmp.pcap","alias":"nDPId-test","flow_id":14,"flow_state":"finished","flow_packets_processed":2,"flow_first_seen":1597328734790,"flow_last_seen":1597328742081,"flow_idle_time":180000,"flow_min_l4_payload_len":241,"flow_max_l4_payload_len":262,"flow_tot_l4_payload_len":503,"flow_avg_l4_payload_len":251,"midstream":0,"thread_ts_msec":1643702947966,"l3_proto":"ip4","src_ip":"205.83.36.228","dst_ip":"160.174.106.32","src_port":54318,"dst_port":162,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"SNMP","breed":"Acceptable","category":"Network"}}
00685{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"snmp.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":2,"flow_last_seen":1643702958965,"flow_idle_time":180000,"pkt_oversize":false,"pkt_caplen":231,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":231,"pkt_l4_len":193,"thread_ts_msec":1643702958965,"pkt":"AAAAAAAAAAEAAAAIgQADjAgARcAA1fKQAABAEXgOCucChgpI9wQAoe6gAMFeTzCCALUCAQEEBGFkc2yiggCoAgJkSQIBEwIBATCCAJowggCWBg8rBgEEAa1zWwEBAQEBDwEEgYJCR01QAQAAAAAAAAEwMDAwMDAAAAAAAAAAAAAAAABSMS42MS4xMi4wMAAAAAAAAAAAAAAAAAAAAAAAAAEAAAABAAAAAQAAAAYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAQAA"}
00686{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":65,"source":"snmp.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":3,"flow_last_seen":1643702975965,"flow_idle_time":180000,"pkt_oversize":false,"pkt_caplen":231,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":231,"pkt_l4_len":193,"thread_ts_msec":1643702975965,"pkt":"AAAAAAAAAAEAAAAIgQADjAgARcAA1RJZAABAEVhGCucChgpI9wQAoe6gAME\/TzCCALUCAQEEBGFkc2yiggCoAgJkaAIBEwIBATCCAJowggCWBg8rBgEEAa1zWwEBAQEBDwEEgYJCR01QAQAAAAAAAAEwMDAwMDAAAAAAAAAAAAAAAABSMS42MS4xMi4wMAAAAAAAAAAAAAAAAAAAAAAAAAEAAAABAAAAAQAAAAYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAQAA"}
00584{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":66,"source":"snmp.pcap","alias":"nDPId-test","flow_id":17,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1643702987695,"flow_last_seen":1643702987695,"flow_idle_time":180000,"flow_min_l4_payload_len":1097,"flow_max_l4_payload_len":1097,"flow_tot_l4_payload_len":1097,"flow_avg_l4_payload_len":1097,"midstream":0,"thread_ts_msec":1643702987695,"l3_proto":"ip4","src_ip":"10.99.8.88","dst_ip":"10.100.253.146","src_port":43242,"dst_port":161,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3}
01906{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"snmp.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_last_seen":1643702987695,"flow_idle_time":180000,"pkt_oversize":false,"pkt_caplen":1143,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":1143,"pkt_l4_len":1105,"thread_ts_msec":1643702987695,"pkt":"AAAAAAAAAAUAAAAIgQAFHAgARQAEZQAAQAA7ESDXCmMIWApk\/ZKo6gChBFEqBzCCBEUCAQEEBnB1YmxpY6CCBDYCBCYSfb8CAQACAQAwggQmMA8GCysGAQIBHwEBAQZkBQAwDwYLKwYBAgEfAQEBCmwFADAPBgsrBgECAR8BAQEKBgUAMA8GCysGAQIBHwEBAQYLBQAwDwYLKwYBAgEfAQEBBk4FADAPBgsrBgECAR8BAQEGXQUAMA8GCysGAQIBHwEBAQpFBQAwDwYLKwYBAgEfAQEBCgEFADAPBgsrBgECAWMBAQEEEQUAMBAGDCsGAQIBHwEBAQaBAAUAMA8GCysGAQIBHwEBAQoDBQAwDwYLKwYBAgEfAQEBBmMFADAQBgwrBgECAR8BAQEKgRAFADAPBgsrBgECAR8BAQEGSAUAMA8GCysGAQIBHwEBAQoWBQAwDwYLKwYBAgFjAQEBBBMFADAPBgsrBgECAR8BAQEKRwUAMBAGDCsGAQIBHwEBAQaBCQUAMA8GCysGAQIBHwEBAQYCBQAwDwYLKwYBAgEfAQEBCkwFADAPBgsrBgECAR8BAQEKXgUAMA8GCysGAQIBHwEBAQpvBQAwDwYLKwYBAgEfAQEBCmEFADAPBgsrBgECAR8BAQEKOAUAMA8GCysGAQIBHwEBAQo\/BQAwDwYLKwYBAgEfAQEBBnYFADAPBgsrBgECAR8BAQEKFAUAMA8GCysGAQIBHwEBAQZfBQAwDwYLKwYBAgEfAQEBCkIFADAPBgsrBgECAR8BAQEKXwUAMA8GCysGAQIBHwEBAQZgBQAwEAYMKwYBAgEfAQEBCoEOBQAwEAYMKwYBAgEfAQEBBoELBQAwDwYLKwYBAgEfAQEBCjcFADAPBgsrBgECAR8BAQEKRgUAMBAGDCsGAQIBHwEBAQqBBwUAMBAGDCsGAQIBHwEBAQqETAUAMBAGDCsGAQIBHwEBAQqBDAUAMA8GCysGAQIBHwEBAQZHBQAwDwYLKwYBAgEfAQEBBlgFADAPBgsrBgECAR8BAQEGPQUAMA8GCysGAQIBHwEBAQZuBQAwDwYLKwYBAgEfAQEBBj4FADAPBgsrBgECAR8BAQEGUAUAMA8GCysGAQIBHwEBAQZpBQAwDwYLKwYBAgEfAQEBBnoFADAPBgsrBgECAR8BAQEKfwUAMA8GCysGAQIBHwEBAQZeBQAwDwYLKwYBAgEfAQEBBhQFADAPBgsrBgECAR8BAQEKTQUAMA8GCysGAQIBHwEBAQYEBQAwDwYLKwYBAgEfAQEBCjwFADAPBgsrBgECAR8BAQEKCgUAMA8GCysGAQIBHwEBAQYPBQAwDwYLKwYBAgEfAQEBBnsFADAPBgsrBgECAR8BAQEKeAUAMA8GCysGAQIBHwEBAQZUBQAwDwYLKwYBAgEfAQEBClUFADAPBgsrBgECAR8BAQEKewUAMA8GCysGAQIBHwEBAQZlBQAwDwYLKwYBAgEfAQEBBksFADAPBgsrBgECAR8BAQEGUgUA"}
00643{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":66,"source":"snmp.pcap","alias":"nDPId-test","flow_id":17,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1643702987695,"flow_last_seen":1643702987695,"flow_idle_time":180000,"flow_min_l4_payload_len":1097,"flow_max_l4_payload_len":1097,"flow_tot_l4_payload_len":1097,"flow_avg_l4_payload_len":1097,"midstream":0,"thread_ts_msec":1643702987695,"l3_proto":"ip4","src_ip":"10.99.8.88","dst_ip":"10.100.253.146","src_port":43242,"dst_port":161,"l4_proto":"udp","ndpi": {"confidence": {"4":"DPI"},"proto":"SNMP","breed":"Acceptable","category":"Network"}}
00474{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"snmp.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":2,"flow_last_seen":1643702987761,"flow_idle_time":180000,"pkt_oversize":false,"pkt_caplen":75,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":75,"pkt_l4_len":37,"thread_ts_msec":1643702987761,"pkt":"AAAAAAAAAAUAAAAIgQAFHAgARQAAOaWFAAA+Ebx9CmT9kgpjCFgAoajqACXVjjAbAgEBBAZwdWJsaWOiDgIEJhJ9vwIBAQIBADAA"}
01195{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"snmp.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":3,"flow_last_seen":1643702987763,"flow_idle_time":180000,"pkt_oversize":false,"pkt_caplen":611,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":611,"pkt_l4_len":573,"thread_ts_msec":1643702987763,"pkt":"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"}
00679{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":72,"source":"snmp.pcap","alias":"nDPId-test","flow_id":17,"flow_state":"finished","flow_packets_processed":6,"flow_first_seen":1643702987695,"flow_last_seen":1643702987801,"flow_idle_time":180000,"flow_min_l4_payload_len":29,"flow_max_l4_payload_len":1097,"flow_tot_l4_payload_len":3593,"flow_avg_l4_payload_len":598,"midstream":0,"thread_ts_msec":1643703001963,"l3_proto":"ip4","src_ip":"10.99.8.88","dst_ip":"10.100.253.146","src_port":43242,"dst_port":161,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"SNMP","breed":"Acceptable","category":"Network"}}
00677{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":72,"source":"snmp.pcap","alias":"nDPId-test","flow_id":16,"flow_state":"finished","flow_packets_processed":4,"flow_first_seen":1643702947966,"flow_last_seen":1643703001963,"flow_idle_time":180000,"flow_min_l4_payload_len":185,"flow_max_l4_payload_len":185,"flow_tot_l4_payload_len":740,"flow_avg_l4_payload_len":185,"midstream":0,"thread_ts_msec":1643703001963,"l3_proto":"ip4","src_ip":"10.231.2.134","dst_ip":"10.72.247.4","src_port":161,"dst_port":61088,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"SNMP","breed":"Acceptable","category":"Network"}}
00555{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":72,"source":"snmp.pcap","alias":"nDPId-test","packets-captured":72,"packets-processed":72,"total-skipped-flows":0,"total-l4-data-len":11371,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":17,"total-detection-updates":0,"total-updates":0,"current-active-flows":0,"total-active-flows":17,"total-idle-flows":17,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":103,"global_ts_msec":1643703001963}
~~~~~~~~~~~~~~~~~~~~ SUMMARY ~~~~~~~~~~~~~~~~~~~~
~~ packets captured/processed: 72/72
~~ skipped flows.............: 0
~~ total layer4 data length..: 11371 bytes
~~ total detected protocols..: 17
~~ total active/idle flows...: 17/17
~~ total timeout flows.......: 0
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~ total memory allocated....: 5116849 bytes
~~ total memory freed........: 5116849 bytes
~~ total allocations/frees...: 113433/113433
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~ json string min len.......: 460 chars
~~ json string max len.......: 1911 chars
~~ json string avg len.......: 1180 chars
|