1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
|
00471{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"vxlan.pcap","alias":"nDPId-test","max-flows-per-thread":2048,"max-idle-flows-per-thread":64,"tick-resolution":1000,"reader-thread-count":1,"flow-scan-interval":10000000,"generic-max-idle-time":600000000,"icmp-max-idle-time":120000000,"udp-max-idle-time":180000000,"tcp-max-idle-time":3265032704,"max-packets-per-flow-to-send":3,"max-packets-per-flow-to-process":32,"global_ts_usec":0}
00548{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":1,"source":"vxlan.pcap","alias":"nDPId-test","packets-captured":1,"packets-processed":0,"total-skipped-flows":0,"total-l4-payload-len":0,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":0,"total-detection-updates":0,"total-updates":0,"current-active-flows":0,"total-active-flows":0,"total-idle-flows":0,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":2,"global_ts_usec":1639650442645225}
00752{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"vxlan.pcap","alias":"nDPId-test","flow_id":1,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1639650442645225,"flow_src_last_pkt_time":1639650442645225,"flow_dst_last_pkt_time":1639650442645225,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":80,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":80,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":80,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1639650442645225,"l3_proto":"ip4","src_ip":"192.168.22.4","dst_ip":"192.168.22.5","src_port":60887,"dst_port":4789,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3}
00604{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"vxlan.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_src_last_pkt_time":1639650442645225,"flow_dst_last_pkt_time":1639650442645225,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":126,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":126,"pkt_l4_len":88,"thread_ts_usec":1639650442645225,"pkt":"AAy9Bjp0AAy9Bjp1gQAABQgARQAAbAM\/AABAEcnowKgWBMCoFgXt1xK1AFhqBAgAAAAABFcAZnpQqv+aHuppKm\/PCABFAAA6NbBAAEAR1uUKChQECAgICK2VADUAJhfikMYBAAABAAAAAAAACGZhY2Vib29rA2NvbQAAAQAB"}
00859{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"vxlan.pcap","alias":"nDPId-test","flow_id":1,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1639650442645225,"flow_src_last_pkt_time":1639650442645225,"flow_dst_last_pkt_time":1639650442645225,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":80,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":80,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":80,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1639650442645225,"l3_proto":"ip4","src_ip":"192.168.22.4","dst_ip":"192.168.22.5","src_port":60887,"dst_port":4789,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"VXLAN","proto_id":"64","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00603{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"vxlan.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":2,"flow_src_last_pkt_time":1639650442645316,"flow_dst_last_pkt_time":1639650442645225,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":126,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":126,"pkt_l4_len":88,"thread_ts_usec":1639650442645316,"pkt":"AAy9Bjp0AAy9Bjp1gQAABQgARQAAbANAAABAEcnnwKgWBMCoFgXt1xK1AFhqBAgAAAAABFcAZnpQqv+aHuppKm\/PCABFAAA6NbFAAEAR1uQKChQECAgICK2VADUAJoy+G88BAAABAAAAAAAACGZhY2Vib29rA2NvbQAAHAAB"}
00752{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3,"source":"vxlan.pcap","alias":"nDPId-test","flow_id":2,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1639650442682647,"flow_src_last_pkt_time":1639650442682647,"flow_dst_last_pkt_time":1639650442682647,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":96,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":96,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":96,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1639650442682647,"l3_proto":"ip4","src_ip":"192.168.22.5","dst_ip":"192.168.22.4","src_port":43866,"dst_port":4789,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3}
00628{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"vxlan.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_src_last_pkt_time":1639650442682647,"flow_dst_last_pkt_time":1639650442682647,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":142,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":142,"pkt_l4_len":104,"thread_ts_usec":1639650442682647,"pkt":"AAy9Bjp1AAy9Bjp0gQAABQgARQAAfK8cAABAER37wKgWBcCoFgSrWhK1AGit0wgAAAAABFcAHuppKm\/PZnpQqv+aCABFAABK7zAAAHgRJVUICAgICgoUBAA1rZUANljckMaBgAABAAEAAAAACGZhY2Vib29rA2NvbQAAAQABwAwAAQABAAAAPQAEnfDgIw=="}
00859{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":3,"source":"vxlan.pcap","alias":"nDPId-test","flow_id":2,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1639650442682647,"flow_src_last_pkt_time":1639650442682647,"flow_dst_last_pkt_time":1639650442682647,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":96,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":96,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":96,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1639650442682647,"l3_proto":"ip4","src_ip":"192.168.22.5","dst_ip":"192.168.22.4","src_port":43866,"dst_port":4789,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"VXLAN","proto_id":"64","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00644{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"vxlan.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":2,"flow_src_last_pkt_time":1639650442711366,"flow_dst_last_pkt_time":1639650442682647,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":154,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":154,"pkt_l4_len":116,"thread_ts_usec":1639650442711366,"pkt":"AAy9Bjp1AAy9Bjp0gQAABQgARQAAiK8kAABAER3nwKgWBcCoFgSrWhK1AHSt3wgAAAAABFcAHuppKm\/PZnpQqv+aCABFAABW18oAAHgRPK8ICAgICgoUBAA1rZUAQjV7G8+BgAABAAEAAAAACGZhY2Vib29rA2NvbQAAHAABwAwAHAABAAABLAAQKgMogPFlAIH6zrAMAAAl3g=="}
00752{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5,"source":"vxlan.pcap","alias":"nDPId-test","flow_id":3,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1639650442712036,"flow_src_last_pkt_time":1639650442712036,"flow_dst_last_pkt_time":1639650442712036,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":82,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":82,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":82,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1639650442712036,"l3_proto":"ip4","src_ip":"192.168.22.4","dst_ip":"192.168.22.5","src_port":49762,"dst_port":4789,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3}
00608{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"vxlan.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_src_last_pkt_time":1639650442712036,"flow_dst_last_pkt_time":1639650442712036,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":128,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":128,"pkt_l4_len":90,"thread_ts_usec":1639650442712036,"pkt":"AAy9Bjp0AAy9Bjp1gQAABQgARQAAbgNKAABAEcnbwKgWBMCoFgXCYhK1AFoDcQgAAAAABFcAZnpQqv+aHuppKm\/PCABFAAA8c1FAAEAGK0kKChQEnfDgI7CqAbtGa9PfAAAAAKAC\/Vy6qgAAAgQFggQCCAr1DDJLAAAAAAEDAwc="}
00859{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":5,"source":"vxlan.pcap","alias":"nDPId-test","flow_id":3,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1639650442712036,"flow_src_last_pkt_time":1639650442712036,"flow_dst_last_pkt_time":1639650442712036,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":82,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":82,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":82,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1639650442712036,"l3_proto":"ip4","src_ip":"192.168.22.4","dst_ip":"192.168.22.5","src_port":49762,"dst_port":4789,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"VXLAN","proto_id":"64","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00752{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6,"source":"vxlan.pcap","alias":"nDPId-test","flow_id":4,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1639650442720908,"flow_src_last_pkt_time":1639650442720908,"flow_dst_last_pkt_time":1639650442720908,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":82,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":82,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":82,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1639650442720908,"l3_proto":"ip4","src_ip":"192.168.22.5","dst_ip":"192.168.22.4","src_port":60230,"dst_port":4789,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3}
00610{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"vxlan.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_src_last_pkt_time":1639650442720908,"flow_dst_last_pkt_time":1639650442720908,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":128,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":128,"pkt_l4_len":90,"thread_ts_usec":1639650442720908,"pkt":"AAy9Bjp1AAy9Bjp0gQAABQgARQAAbq8mAABAER3\/wKgWBcCoFgTrRhK1AFqtxQgAAAAABFcAHuppKm\/PZnpQqv+aCABFCAA8AABAAFcGh5Kd8OAjCgoUBAG7sKrMyr8yRmvT4KAS\/\/+p5QAAAgQFcAQCCApu3xNF9QwySwEDAwg="}
00859{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":6,"source":"vxlan.pcap","alias":"nDPId-test","flow_id":4,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1639650442720908,"flow_src_last_pkt_time":1639650442720908,"flow_dst_last_pkt_time":1639650442720908,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":82,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":82,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":82,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1639650442720908,"l3_proto":"ip4","src_ip":"192.168.22.5","dst_ip":"192.168.22.4","src_port":60230,"dst_port":4789,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"VXLAN","proto_id":"64","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00596{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"vxlan.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":2,"flow_src_last_pkt_time":1639650442721173,"flow_dst_last_pkt_time":1639650442712036,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":120,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":120,"pkt_l4_len":82,"thread_ts_usec":1639650442721173,"pkt":"AAy9Bjp0AAy9Bjp1gQAABQgARQAAZgNLAABAEcniwKgWBMCoFgXCYhK1AFIDeQgAAAAABFcAZnpQqv+aHuppKm\/PCABFAAA0c1JAAEAGK1AKChQEnfDgI7CqAbtGa9PgzMq\/M4AQAfvWagAAAQEICvUMMlRu3xNF"}
01017{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"vxlan.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":3,"flow_src_last_pkt_time":1639650442721478,"flow_dst_last_pkt_time":1639650442712036,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":434,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":434,"pkt_l4_len":396,"thread_ts_usec":1639650442721478,"pkt":"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"}
00596{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"vxlan.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":2,"flow_src_last_pkt_time":1639650442730182,"flow_dst_last_pkt_time":1639650442720908,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":120,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":120,"pkt_l4_len":82,"thread_ts_usec":1639650442730182,"pkt":"AAy9Bjp1AAy9Bjp0gQAABQgARQAAZq8oAABAER4FwKgWBcCoFgTrRhK1AFKtvQgAAAAABFcAHuppKm\/PZnpQqv+aCABFCAA0NXJAAFcGUiid8OAjCgoUBAG7sKrMyr8zRmvVGoAQAQXWHAAAAQEICm7fE0\/1DDJU"}
02466{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"vxlan.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":3,"flow_src_last_pkt_time":1639650442731370,"flow_dst_last_pkt_time":1639650442720908,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1500,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":1500,"pkt_l4_len":1462,"thread_ts_usec":1639650442731370,"pkt":"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"}
00753{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":24,"source":"vxlan.pcap","alias":"nDPId-test","flow_id":5,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1639650442864784,"flow_src_last_pkt_time":1639650442864784,"flow_dst_last_pkt_time":1639650442864784,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":84,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":84,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":84,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1639650442864784,"l3_proto":"ip4","src_ip":"192.168.22.4","dst_ip":"192.168.22.5","src_port":60351,"dst_port":4789,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3}
00612{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"vxlan.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_src_last_pkt_time":1639650442864784,"flow_dst_last_pkt_time":1639650442864784,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":130,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":130,"pkt_l4_len":92,"thread_ts_usec":1639650442864784,"pkt":"AAy9Bjp0AAy9Bjp1gQAABQgARQAAcANpAABAEcm6wKgWBMCoFgXrvxK1AFxsGAgAAAAABFcAZnpQqv+aHuppKm\/PCABFAAA+NbtAAEAR1tYKChQECAgICIBcADUAKoq80C4BAAABAAAAAAAAA3d3dwhmYWNlYm9vawNjb20AAAEAAQ=="}
00860{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":24,"source":"vxlan.pcap","alias":"nDPId-test","flow_id":5,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1639650442864784,"flow_src_last_pkt_time":1639650442864784,"flow_dst_last_pkt_time":1639650442864784,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":84,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":84,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":84,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1639650442864784,"l3_proto":"ip4","src_ip":"192.168.22.4","dst_ip":"192.168.22.5","src_port":60351,"dst_port":4789,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"VXLAN","proto_id":"64","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00612{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"vxlan.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":2,"flow_src_last_pkt_time":1639650442864881,"flow_dst_last_pkt_time":1639650442864784,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":130,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":130,"pkt_l4_len":92,"thread_ts_usec":1639650442864881,"pkt":"AAy9Bjp0AAy9Bjp1gQAABQgARQAAcANqAABAEcm5wKgWBMCoFgXrvxK1AFxsGAgAAAAABFcAZnpQqv+aHuppKm\/PCABFAAA+NbxAAEAR1tUKChQECAgICIBcADUAKi+aKzYBAAABAAAAAAAAA3d3dwhmYWNlYm9vawNjb20AABwAAQ=="}
00756{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":26,"source":"vxlan.pcap","alias":"nDPId-test","flow_id":6,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1639650442902284,"flow_src_last_pkt_time":1639650442902284,"flow_dst_last_pkt_time":1639650442902284,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":129,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":129,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":129,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1639650442902284,"l3_proto":"ip4","src_ip":"192.168.22.5","dst_ip":"192.168.22.4","src_port":50251,"dst_port":4789,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3}
00673{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"vxlan.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_src_last_pkt_time":1639650442902284,"flow_dst_last_pkt_time":1639650442902284,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":175,"pkt_l4_len":137,"thread_ts_usec":1639650442902284,"pkt":"AAy9Bjp1AAy9Bjp0gQAABQgARQAAna9MAABAER2qwKgWBcCoFgTESxK1AImt9AgAAAAABFcAHuppKm\/PZnpQqv+aCABFCABrklQAAHgRgggICAgICgoUBAA1gFwAV2EE0C6BgAABAAIAAAAAA3d3dwhmYWNlYm9vawNjb20AAAEAAcAMAAUAAQAAClEAEQlzdGFyLW1pbmkEYzEwcsAQwC4AAQABAAAAEQAEnfDgIw=="}
00863{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":26,"source":"vxlan.pcap","alias":"nDPId-test","flow_id":6,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1639650442902284,"flow_src_last_pkt_time":1639650442902284,"flow_dst_last_pkt_time":1639650442902284,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":129,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":129,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":129,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1639650442902284,"l3_proto":"ip4","src_ip":"192.168.22.5","dst_ip":"192.168.22.4","src_port":50251,"dst_port":4789,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"VXLAN","proto_id":"64","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00689{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"vxlan.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":2,"flow_src_last_pkt_time":1639650442930989,"flow_dst_last_pkt_time":1639650442902284,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":187,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":187,"pkt_l4_len":149,"thread_ts_usec":1639650442930989,"pkt":"AAy9Bjp1AAy9Bjp0gQAABQgARQAAqa9SAABAER2YwKgWBcCoFgTESxK1AJWuAAgAAAAABFcAHuppKm\/PZnpQqv+aCABFCAB3WtIAAHgRuX4ICAgICgoUBAA1gFwAY6QKKzaBgAABAAIAAAAAA3d3dwhmYWNlYm9vawNjb20AABwAAcAMAAUAAQAACnkAEQlzdGFyLW1pbmkEYzEwcsAQwC4AHAABAAAAPAAQKgMogPFlAIH6zrAMAAAl3g=="}
00753{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":28,"source":"vxlan.pcap","alias":"nDPId-test","flow_id":7,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1639650442931548,"flow_src_last_pkt_time":1639650442931548,"flow_dst_last_pkt_time":1639650442931548,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":82,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":82,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":82,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1639650442931548,"l3_proto":"ip4","src_ip":"192.168.22.4","dst_ip":"192.168.22.5","src_port":40646,"dst_port":4789,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3}
00609{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"vxlan.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_src_last_pkt_time":1639650442931548,"flow_dst_last_pkt_time":1639650442931548,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":128,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":128,"pkt_l4_len":90,"thread_ts_usec":1639650442931548,"pkt":"AAy9Bjp0AAy9Bjp1gQAABQgARQAAbgNuAABAEcm3wKgWBMCoFgWexhK1AFonDQgAAAAABFcAZnpQqv+aHuppKm\/PCABFAAA8KWlAAEAGdTEKChQEnfDgI7CsAbtx7JCPAAAAAKAC\/VzRnAAAAgQFggQCCAr1DDMmAAAAAAEDAwc="}
00860{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":28,"source":"vxlan.pcap","alias":"nDPId-test","flow_id":7,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1639650442931548,"flow_src_last_pkt_time":1639650442931548,"flow_dst_last_pkt_time":1639650442931548,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":82,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":82,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":82,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1639650442931548,"l3_proto":"ip4","src_ip":"192.168.22.4","dst_ip":"192.168.22.5","src_port":40646,"dst_port":4789,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"VXLAN","proto_id":"64","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00753{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":29,"source":"vxlan.pcap","alias":"nDPId-test","flow_id":8,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1639650442941597,"flow_src_last_pkt_time":1639650442941597,"flow_dst_last_pkt_time":1639650442941597,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":82,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":82,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":82,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1639650442941597,"l3_proto":"ip4","src_ip":"192.168.22.5","dst_ip":"192.168.22.4","src_port":36286,"dst_port":4789,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3}
00611{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"vxlan.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_src_last_pkt_time":1639650442941597,"flow_dst_last_pkt_time":1639650442941597,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":128,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":128,"pkt_l4_len":90,"thread_ts_usec":1639650442941597,"pkt":"AAy9Bjp1AAy9Bjp0gQAABQgARQAAbq9VAABAER3QwKgWBcCoFgSNvhK1AFqtxQgAAAAABFcAHuppKm\/PZnpQqv+aCABFCAA8AABAAFcGh5Kd8OAjCgoUBAG7sKwSxDYyceyQkKAS\/\/\/6FgAAAgQFcAQCCAo3WVST9QwzJgEDAwg="}
00860{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":29,"source":"vxlan.pcap","alias":"nDPId-test","flow_id":8,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1639650442941597,"flow_src_last_pkt_time":1639650442941597,"flow_dst_last_pkt_time":1639650442941597,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":82,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":82,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":82,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1639650442941597,"l3_proto":"ip4","src_ip":"192.168.22.5","dst_ip":"192.168.22.4","src_port":36286,"dst_port":4789,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"VXLAN","proto_id":"64","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00596{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"vxlan.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":2,"flow_src_last_pkt_time":1639650442941877,"flow_dst_last_pkt_time":1639650442931548,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":120,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":120,"pkt_l4_len":82,"thread_ts_usec":1639650442941877,"pkt":"AAy9Bjp0AAy9Bjp1gQAABQgARQAAZgNwAABAEcm9wKgWBMCoFgWexhK1AFInFQgAAAAABFcAZnpQqv+aHuppKm\/PCABFAAA0KWpAAEAGdTgKChQEnfDgI7CsAbtx7JCQEsQ2M4AQAfsmmgAAAQEICvUMMzE3WVST"}
01023{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"vxlan.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":3,"flow_src_last_pkt_time":1639650442942182,"flow_dst_last_pkt_time":1639650442931548,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":438,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":438,"pkt_l4_len":400,"thread_ts_usec":1639650442942182,"pkt":"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"}
00597{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"vxlan.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":2,"flow_src_last_pkt_time":1639650442952129,"flow_dst_last_pkt_time":1639650442941597,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":120,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":120,"pkt_l4_len":82,"thread_ts_usec":1639650442952129,"pkt":"AAy9Bjp1AAy9Bjp0gQAABQgARQAAZq9YAABAER3VwKgWBcCoFgSNvhK1AFKtvQgAAAAABFcAHuppKm\/PZnpQqv+aCABFCAA0iYtAAFcG\/g6d8OAjCgoUBAG7sKwSxDYzceyRzoAQAQUmRwAAAQEICjdZVJ71DDMx"}
02466{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"vxlan.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":3,"flow_src_last_pkt_time":1639650442953531,"flow_dst_last_pkt_time":1639650442941597,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1500,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":1500,"pkt_l4_len":1462,"thread_ts_usec":1639650442953531,"pkt":"AAy9Bjp1AAy9Bjp0gQAABQgARQAFyq9ZAABAERhwwKgWBcCoFgSNvhK1BbazIQgAAAAABFcAHuppKm\/PZnpQqv+aCABFCAWYiYxAAFcG+Kmd8OAjCgoUBAG7sKwSxDYzceyRzoAQAQUwxgAAAQEICjdZVJ\/1DDMxFgMDAHoCAAB2AwOCxvI5EXHPK47hHjBvMw\/BI06Lkop9Q1UWqJnwHHEN3CDzcy2bbZtRNimKWfvjKRYfjG8z06\/JyuimMrKvKOQk2BMDAAAuACsAAgMEADMAJAAdACDAmDgjswZAHJO96Fxo5TF\/yHycPaDsaAssE+9YRtxuEBQDAwABARcDAwP5a5IZfVeyKEpOW0ufVGHnS60wv8jhNGuVFX1zlQlbDVGUUfZZGketBg2YthNR92n\/MnYwVxVhLF8luCNg98YcDHmLLzoHZsL49nDI+l9FD1r3wmiZMWL0y3yQZ\/JJQKcjOwcRiF5wjYIImRQjdfRPMVOpZX\/eVRUbhOETdoAwwjdl+orOFnHqlPn5W8zlz4vJR9+aKEMgg4VpLfA7gJ9BUce3E1AaydUD+XJnWAEIHLgcGKblAISRpe7EvwEoeN3STwz5TvBkeELGXhsRX3VYe06CV9GB9VUiMOxvkOe31kzQb1w5L8Q9dutguKq4auDiRIQdo3UPxjULEUEc8daV3AVkJf2C1IybYidwRoHGi86ATrnZfFObldSoDiKx4JXrwos9QDOQpTdBNWZYx1lo\/uqq\/8g1iPHfxsw1J8SNoIu5azXqXHRnZtnkXa0yFNP8rYYC0HNJXH5qFNBZ2p1fwoVg6AJX9XpDhAf\/k3osd3p+iDepC3IlVLkm+GmIka\/ZxprUZwNv+NGPRXYwQEVExWeySi4zMfz+B08WmlYQlxDWeXWgy2Izp8brlY84iY7t+GG4wm4JGr4A5KEWS58eKrUQrvPFR3jjXo6\/NCMu1YlygA+8c1qXjV+4IWGGMZkGFl87oSHi5P5ls+PzEck+yxjmOkP2mvhzrgr8cdbPj8RHsmNL+PETzQCtb1+I3PsP7AAQBnvJY2h7WghCBHgXKcXI9Fb91uYXjT0slYvTKjLrM+DmeFlzGURSW\/vAfQS1WzWshi0ZK\/8PHNQOsgSP5kX6vbKm1\/h4vdrSdq9Xy+3ChNYwY3Nz9UiRkomRmJoIRcqg8BPD4F7Li3UV4xy3ABlESzoqS14VkfVrJvF8Mssxb9uvKQB+Qftsw2prI4ct04qYspIUp+UyM6Y\/2OJhQWUzJBR7uDTVCn7cANa1qv5E81wp3WQIDI4BILWzecMZ++5JNOCdB5nQhfnz\/N46Rxh2m7dGQVsrhILqQg18vZWRXgsaYlpdWLllg3Cc33BYO\/+xQSxE5dvD+kHOSyP82e6eYHseshW7ln2FQDBjhnpBmuu8bKe+ZLkLevp6JoX4n7CIT23dcVV70UPfHzh3IBD9V+aD+PezeVtAGtuN4sZFohCJqTCjU\/XDcbZBeh6OfGZnUa850szjVLwzCcjXUP5B2l9n8SVTcXC3TF1cNpmTKwK01\/iJodz\/Q1ONsNdD4Jx8jY\/TLAlz4SJ+p7EPwFCMcwgZZKDl7ngwm0oPKncBrp0h2I0LOu793MxLBZwWgaM2KE3RBP2Qczs4SWP11UNQru+qxNl5EQLpinZejHt4hIt43rCVfRdXm2XDWme1jb1NB\/BYjxMUFwMDBe2NF\/B6RhuN92VOyJI6GV0+4MNlaQ2zRuSi41Qbfxms7nL+4fbQoszMAls3NvQOy8nluFZhTsFed4rEOfffnONOkD7LtY9K1a3OfMAvUkl3q6LpSyD0SRfScUpqPrYnKJKjotSjbJI1H3Jju7kYZHpZmKplW8uHRWRib1NTXyMtmkspyf4o9O8JqQuaFjRmqaxCy5szM8p4uCMgWJOsDWJwQOAiq9lsGYapphKG4xh87apARlJDtwJp7Pqq0l3QKmlxxFqvbS6YLtQFb\/KsIDWmRMf\/M0ylaAuf8pwk"}
00753{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":54,"source":"vxlan.pcap","alias":"nDPId-test","flow_id":9,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1639650443097770,"flow_src_last_pkt_time":1639650443097770,"flow_dst_last_pkt_time":1639650443097770,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":62,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":62,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":62,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1639650443097770,"l3_proto":"ip4","src_ip":"192.168.22.4","dst_ip":"192.168.22.5","src_port":60230,"dst_port":4789,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3}
00580{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":54,"source":"vxlan.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_src_last_pkt_time":1639650443097770,"flow_dst_last_pkt_time":1639650443097770,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":108,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":108,"pkt_l4_len":70,"thread_ts_usec":1639650443097770,"pkt":"AAy9Bjp0AAy9Bjp1gQAABQgARQAAWgOIAABAEcmxwKgWBMCoFgXrRhK1AEbaoAgAAAAABFcAZnpQqv+aHuppKm\/PCABFCAAoAABAAEAGnqYKChQEnfDgI7CqAbtGa9YTAAAAAFAEAABE2gAA"}
00860{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":54,"source":"vxlan.pcap","alias":"nDPId-test","flow_id":9,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1639650443097770,"flow_src_last_pkt_time":1639650443097770,"flow_dst_last_pkt_time":1639650443097770,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":62,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":62,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":62,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1639650443097770,"l3_proto":"ip4","src_ip":"192.168.22.4","dst_ip":"192.168.22.5","src_port":60230,"dst_port":4789,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"VXLAN","proto_id":"64","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00580{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":55,"source":"vxlan.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":2,"flow_src_last_pkt_time":1639650443097913,"flow_dst_last_pkt_time":1639650443097770,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":108,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":108,"pkt_l4_len":70,"thread_ts_usec":1639650443097913,"pkt":"AAy9Bjp0AAy9Bjp1gQAABQgARQAAWgOJAABAEcmwwKgWBMCoFgXrRhK1AEbaoAgAAAAABFcAZnpQqv+aHuppKm\/PCABFCAAoAABAAEAGnqYKChQEnfDgI7CqAbtGa9YTAAAAAFAEAABE2gAA"}
00580{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"vxlan.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":3,"flow_src_last_pkt_time":1639650443097920,"flow_dst_last_pkt_time":1639650443097770,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":108,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":108,"pkt_l4_len":70,"thread_ts_usec":1639650443097920,"pkt":"AAy9Bjp0AAy9Bjp1gQAABQgARQAAWgOKAABAEcmvwKgWBMCoFgXrRhK1AEbaoAgAAAAABFcAZnpQqv+aHuppKm\/PCABFCAAoAABAAEAGnqYKChQEnfDgI7CqAbtGa9YUAAAAAFAEAABE2QAA"}
01540{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":89,"source":"vxlan.pcap","alias":"nDPId-test","flow_id":8,"flow_state":"finished","flow_src_packets_processed":32,"flow_dst_packets_processed":0,"flow_first_seen":1639650442941597,"flow_src_last_pkt_time":1639650443255719,"flow_dst_last_pkt_time":1639650442941597,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":74,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1454,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":35959,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1639650443255719,"l3_proto":"ip4","src_ip":"192.168.22.5","dst_ip":"192.168.22.4","src_port":36286,"dst_port":4789,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"data_analysis": {"iat": {"flow_min":10,"flow_avg":10133.0,"flow_max":140558,"flow_stddev":31047.2,"c_to_s_min":10,"c_to_s_avg":10133.0,"c_to_s_max":140558,"c_to_s_stddev":31047.2,"s_to_c_min":0,"s_to_c_avg":0.0,"s_to_c_max":0,"s_to_c_stddev":0.0},"pktlen": {"c_to_s_min":120,"c_to_s_avg":1169.7,"c_to_s_max":1500,"c_to_s_stddev":546.6,"s_to_c_min":0,"s_to_c_avg":0.0,"s_to_c_max":0,"s_to_c_stddev":0.0},"bins": {"c_to_s": [0,0,5,0,0,0,0,1,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,23,0,0],"s_to_c": [0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]}},"ndpi": {"confidence": {"6":"DPI"},"proto":"VXLAN","proto_id":"64","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
01534{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":122,"source":"vxlan.pcap","alias":"nDPId-test","flow_id":7,"flow_state":"finished","flow_src_packets_processed":32,"flow_dst_packets_processed":0,"flow_first_seen":1639650442931548,"flow_src_last_pkt_time":1639650443264733,"flow_dst_last_pkt_time":1639650442931548,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":74,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":392,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":3106,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1639650443264733,"l3_proto":"ip4","src_ip":"192.168.22.4","dst_ip":"192.168.22.5","src_port":40646,"dst_port":4789,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"data_analysis": {"iat": {"flow_min":4,"flow_avg":10747.9,"flow_max":150839,"flow_stddev":30032.6,"c_to_s_min":4,"c_to_s_avg":10747.9,"c_to_s_max":150839,"c_to_s_stddev":30032.6,"s_to_c_min":0,"s_to_c_avg":0.0,"s_to_c_max":0,"s_to_c_stddev":0.0},"pktlen": {"c_to_s_min":120,"c_to_s_avg":143.1,"c_to_s_max":438,"c_to_s_stddev":68.2,"s_to_c_min":0,"s_to_c_avg":0.0,"s_to_c_max":0,"s_to_c_stddev":0.0},"bins": {"c_to_s": [0,0,28,0,1,0,0,1,1,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0],"s_to_c": [0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]}},"ndpi": {"confidence": {"6":"DPI"},"proto":"VXLAN","proto_id":"64","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00901{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":127,"source":"vxlan.pcap","alias":"nDPId-test","flow_id":5,"flow_state":"finished","flow_src_packets_processed":2,"flow_dst_packets_processed":0,"flow_first_seen":1639650442864784,"flow_src_last_pkt_time":1639650442864881,"flow_dst_last_pkt_time":1639650442864784,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":84,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":84,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":168,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1639650443276366,"l3_proto":"ip4","src_ip":"192.168.22.4","dst_ip":"192.168.22.5","src_port":60351,"dst_port":4789,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"VXLAN","proto_id":"64","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00903{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":127,"source":"vxlan.pcap","alias":"nDPId-test","flow_id":6,"flow_state":"finished","flow_src_packets_processed":2,"flow_dst_packets_processed":0,"flow_first_seen":1639650442902284,"flow_src_last_pkt_time":1639650442930989,"flow_dst_last_pkt_time":1639650442902284,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":129,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":141,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":270,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1639650443276366,"l3_proto":"ip4","src_ip":"192.168.22.5","dst_ip":"192.168.22.4","src_port":50251,"dst_port":4789,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"VXLAN","proto_id":"64","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00906{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":127,"source":"vxlan.pcap","alias":"nDPId-test","flow_id":8,"flow_state":"finished","flow_src_packets_processed":56,"flow_dst_packets_processed":0,"flow_first_seen":1639650442941597,"flow_src_last_pkt_time":1639650443276182,"flow_dst_last_pkt_time":1639650442941597,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":74,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1454,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":68647,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1639650443276366,"l3_proto":"ip4","src_ip":"192.168.22.5","dst_ip":"192.168.22.4","src_port":36286,"dst_port":4789,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"VXLAN","proto_id":"64","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00901{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":127,"source":"vxlan.pcap","alias":"nDPId-test","flow_id":1,"flow_state":"finished","flow_src_packets_processed":2,"flow_dst_packets_processed":0,"flow_first_seen":1639650442645225,"flow_src_last_pkt_time":1639650442645316,"flow_dst_last_pkt_time":1639650442645225,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":80,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":80,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":160,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1639650443276366,"l3_proto":"ip4","src_ip":"192.168.22.4","dst_ip":"192.168.22.5","src_port":60887,"dst_port":4789,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"VXLAN","proto_id":"64","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00904{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":127,"source":"vxlan.pcap","alias":"nDPId-test","flow_id":7,"flow_state":"finished","flow_src_packets_processed":35,"flow_dst_packets_processed":0,"flow_first_seen":1639650442931548,"flow_src_last_pkt_time":1639650443276366,"flow_dst_last_pkt_time":1639650442931548,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":74,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":392,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":3328,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1639650443276366,"l3_proto":"ip4","src_ip":"192.168.22.4","dst_ip":"192.168.22.5","src_port":40646,"dst_port":4789,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"VXLAN","proto_id":"64","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00904{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":127,"source":"vxlan.pcap","alias":"nDPId-test","flow_id":3,"flow_state":"finished","flow_src_packets_processed":12,"flow_dst_packets_processed":0,"flow_first_seen":1639650442712036,"flow_src_last_pkt_time":1639650443088800,"flow_dst_last_pkt_time":1639650442712036,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":74,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":388,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1459,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1639650443276366,"l3_proto":"ip4","src_ip":"192.168.22.4","dst_ip":"192.168.22.5","src_port":49762,"dst_port":4789,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"VXLAN","proto_id":"64","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00901{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":127,"source":"vxlan.pcap","alias":"nDPId-test","flow_id":9,"flow_state":"finished","flow_src_packets_processed":3,"flow_dst_packets_processed":0,"flow_first_seen":1639650443097770,"flow_src_last_pkt_time":1639650443097920,"flow_dst_last_pkt_time":1639650443097770,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":62,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":62,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":186,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1639650443276366,"l3_proto":"ip4","src_ip":"192.168.22.4","dst_ip":"192.168.22.5","src_port":60230,"dst_port":4789,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"VXLAN","proto_id":"64","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00905{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":127,"source":"vxlan.pcap","alias":"nDPId-test","flow_id":4,"flow_state":"finished","flow_src_packets_processed":13,"flow_dst_packets_processed":0,"flow_first_seen":1639650442720908,"flow_src_last_pkt_time":1639650443097493,"flow_dst_last_pkt_time":1639650442720908,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":74,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1454,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":5058,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1639650443276366,"l3_proto":"ip4","src_ip":"192.168.22.5","dst_ip":"192.168.22.4","src_port":60230,"dst_port":4789,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"VXLAN","proto_id":"64","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00902{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":127,"source":"vxlan.pcap","alias":"nDPId-test","flow_id":2,"flow_state":"finished","flow_src_packets_processed":2,"flow_dst_packets_processed":0,"flow_first_seen":1639650442682647,"flow_src_last_pkt_time":1639650442711366,"flow_dst_last_pkt_time":1639650442682647,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":96,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":108,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":204,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1639650443276366,"l3_proto":"ip4","src_ip":"192.168.22.5","dst_ip":"192.168.22.4","src_port":43866,"dst_port":4789,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"VXLAN","proto_id":"64","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
00561{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":127,"source":"vxlan.pcap","alias":"nDPId-test","packets-captured":127,"packets-processed":127,"total-skipped-flows":0,"total-l4-payload-len":79480,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":9,"total-detection-updates":0,"total-updates":0,"current-active-flows":0,"total-active-flows":9,"total-idle-flows":9,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":55,"global_ts_usec":1639650443276366}
~~~~~~~~~~~~~~~~~~~~ SUMMARY ~~~~~~~~~~~~~~~~~~~~
~~ packets captured/processed: 127/127
~~ skipped flows.............: 0
~~ total layer4 data length..: 79480 bytes
~~ total detected protocols..: 9
~~ total active/idle flows...: 9/9
~~ total timeout flows.......: 0
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~ total memory allocated....: 6056528 bytes
~~ total memory freed........: 6056528 bytes
~~ total allocations/frees...: 121712/121712
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~ json string min len.......: 476 chars
~~ json string max len.......: 2471 chars
~~ json string avg len.......: 1472 chars
|