path: root/test/results/weibo.pcap.out

00473{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"weibo.pcap","alias":"nDPId-test","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"generic-max-idle-time":600000,"icmp-max-idle-time":30000,"udp-max-idle-time":180000,"tcp-max-idle-time":7440000,"tcp-max-post-end-flow-time":120000,"max-packets-per-flow-to-send":15,"max-packets-per-flow-to-process":255}
00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"weibo.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1463089067804,"flow_last_seen":0,"flow_min_l4_payload_len":137,"flow_max_l4_payload_len":137,"flow_tot_l4_payload_len":137,"flow_avg_l4_payload_len":137,"midstream":0,"l3_proto":"ip4","src_ip":"216.58.210.14","dst_ip":"192.168.1.105","src_port":443,"dst_port":49361,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00578{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089067,"pkt_ts_usec":804779,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"eJKcD6iOkDVu60UQCABFAAClAABAADMR2u3YOtIOwKgBaQG7wNEAkSEpAAl3y2T5ujTCSSEU5zJMPfXh7u\/a3oWq2yhhK1m4ny+qR4W2lfILr6Ils4h\/iqKUCkI0zipqePuQ8qDP3gfa2UEwOgxjQY6zEBJhdLLCAKezbAF+wpbNcZnrqI9Vp3iRS5CpzEuDxhuTRv5J009cEtkCA6nVS0D6WXhVs+S9\/EHIHeXl6YD1cbA="}
00813{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089067,"pkt_ts_usec":804822,"pkt_caplen":353,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":353,"pkt_l4_len":319,"pkt":"eJKcD6iOkDVu60UQCABFAAFTAABAADMR2j\/YOtIOwKgBaQG7wNEBPzHaAAoUu93Ovdfsj+VZ99cgMeSVKfCKokSNRuOMv1PGF2DIkukcXrUmGkv\/ArCiq\/KK23NXKqXH3z8FxKfa8OQtN5x73GaADweitAmqYsU072yu9KsRUtnFIEIB5Y5LqWVX6vqXepSvfYCEhodq+tUiz0aSzdffkeHhLztt20iOOpChbjrtXhyjh2xOYPCWGl\/75gN\/zEEb2R9h09zfr5IUCExPcV8JWIdoh2fXU4mq9qytwCU0GOdjsWy12v2HhTBnSYnXaFz8kW\/ToyswW6z6hT26xiqWB5RJW9cvGUU8G6jKCXTHHR5WczEJ7NLt9QErBQKutf8Nh4rVBXW1avPgj1A0tNYSKXAcYt1eYGsw4tjOzS7DHafUDgikSZ+H9BNuGGXb1gwh45909vW3665ubMpNt9lmWoI="}
00448{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089067,"pkt_ts_usec":805294,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"kDVu60UQeJKcD6iOCABFAABHtklAAEARGALAqAFp2DrSDsDRAbsAM7beDDzb+3ozZeMBCkxEEj6TblVeBP78aEspYfuydCS19UAd5UCVpxpshuwHMA=="}
00541{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089067,"pkt_ts_usec":828243,"pkt_caplen":151,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":151,"pkt_l4_len":117,"pkt":"kDVu60UQeJKcD6iOCABFAACJtkxAAEARF73AqAFp2DrSDsDRAbsAdbpVDDzb+3ozZeMBCzojeOlAMgvGNktyYcAUA7A\/3Svs2ToszWJa515eysxsBGt2GWJkyb0raTzXh1+QI2hgs8vbL9ZN+SRZ\/GOQxQ+J9bkhmb0JUaHBY3MAoon0eWS2MvshnVAsrdiQAr2Fjffaxw=="}
01228{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089067,"pkt_ts_usec":828294,"pkt_caplen":660,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":660,"pkt_l4_len":626,"pkt":"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"}
00439{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089067,"pkt_ts_usec":864153,"pkt_caplen":77,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":77,"pkt_l4_len":43,"pkt":"eJKcD6iOkDVu60UQCABFAAA\/AABAADMR21PYOtIOwKgBaQG7wNEAKwoHAAtqUHOnDVLSXvQSvF7LtrvJ4+Ut0\/+PPibILhcVRlQ0\/Cc="}
00516{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089068,"pkt_ts_usec":490751,"pkt_caplen":133,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":133,"pkt_l4_len":99,"pkt":"eJKcD6iOkDVu60UQCABFAAB3AABAADMR2xvYOtIOwKgBaQG7wNEAY5h\/AAz3NgibEP+3fCH01gaXm\/ujoksOD8lVuFPVv4dTuDm1GQajh0JsK5hDx1wcIIslcR6FuJguYCUDV+hO960qSchu4lOGDy6g9QGt9CHdRWgSVC2cqVi1Gvnv6A=="}
00638{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089068,"pkt_ts_usec":490775,"pkt_caplen":221,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":221,"pkt_l4_len":187,"pkt":"eJKcD6iOkDVu60UQCABFAADPAABAADMR2sPYOtIOwKgBaQG7wNEAu1cBAA1SPRGfkBIcRyXIBOFmOzx7xByjFzObStYT9JG3BdTcYyczLM6U\/yGJL1UOa9efX1YnjJOnzSQes+TW7tPCCmIWM5k2OHC\/X4h62\/gFcsaUMiZP99DIiBWpEzuVuyrC9ruL8hz5sxTLccSbyiADHsnAODMlyaW7YySfafX77mgaS4\/pAmpwE\/R73VLqa4x3u5DTBS1saCqD2G0cou9H3fDUBMN96cndkiXeH\/VLD\/DRoz0="}
00451{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089068,"pkt_ts_usec":491086,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"kDVu60UQeJKcD6iOCABFAABHtn9AAEARF8zAqAFp2DrSDsDRAbsAM\/dlDDzb+3ozZeMBDb0E20MJqfc7ail3g\/1CveOoZw\/qFJDJZ3ZNxPAuDExJjg=="}
00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":10,"source":"weibo.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1463089069330,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"216.58.214.78","src_port":58480,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00421{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089069,"pkt_ts_usec":330096,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kDVu60UQeJKcD6iOCABFAAA0vWJAAEAGDMfAqAFp2DrWTuRwAbsLWGhZZbJo+oAQAO2GIAAAAQEICgBBBg58MNQL"}
00422{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089069,"pkt_ts_usec":374929,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iOkDVu60UQCABFAAA04pUAADMGNJTYOtZOwKgBaQG75HBlsmj6C1hoWoAQAV4BuwAAAQEICnwxg\/kAQNoT"}
00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":12,"source":"weibo.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1463089070086,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"216.58.214.78","src_port":58481,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00421{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089070,"pkt_ts_usec":86080,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kDVu60UQeJKcD6iOCABFAAA0hxpAAEAGQw\/AqAFp2DrWTuRxAbtN5WEdhI1WjIAQAO065AAAAQEICgBBBst8MNbL"}
00421{"flow_id":3,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089070,"pkt_ts_usec":131182,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iOkDVu60UQCABFAAA0MLYAADMG5nPYOtZOwKgBaQG75HGEjVaMTeVhHoAQAV62dAAAAQEICnwxhr4AQNrV"}
00489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":14,"source":"weibo.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1463089070755,"flow_last_seen":0,"flow_min_l4_payload_len":364,"flow_max_l4_payload_len":364,"flow_tot_l4_payload_len":364,"flow_avg_l4_payload_len":364,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"216.58.210.227","src_port":53656,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00886{"flow_id":4,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089070,"pkt_ts_usec":755684,"pkt_caplen":406,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":406,"pkt_l4_len":372,"pkt":"kDVu60UQeJKcD6iOCABFAAGIMGNAAEARm9LAqAFp2DrS49GYAbsBdI1JDLva88\/LUhUgJJB9mYAGceDgbWxM0LRsm4JNDbKc2scH8met9koeqL6\/vSPRbc8Azif26oxDIgzQBvKXwSWqmW75DLc+Tze8HLmFOLbpW1dfDh+CmYIDg83ozCrqzZhIa7c9c87+9DDGInSDf9f\/tl92yy8f1zwi5ofEkbjAvQ14GM0UCN2FUqQXDuqOrr4+0mp4RLoTXyk0KmRSNOp96LQHThISJcaekcpsRADkvdkvWyfHzVzaPjpEHmDVGxlff0Lyt7xPlz4I3iJqFNYIv6S5IeCVHrZ+OTOUiQ654SUxByYukSwW968bKOypceOi6Z9YrJBsh8fbzBOlaaCscjkwvRlnA94hXGNPW\/f1uJBnwscXyRa1XQX3ylsU7+3wwIt8bcdzaqKvgasSUBwcjaznmyXm4EMkY0SocvpvlP+Y\/Tyw+d3\/Jt6j83TjDTmoWxIattwqrgJYlX1vanz3uVHuuTPizgrn3v70Ig=="}
00430{"flow_id":4,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089070,"pkt_ts_usec":755808,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"kDVu60UQeJKcD6iOCABFAAA5MGRAAEARnSDAqAFp2DrS49GYAbsAJVKhDLva88\/LUhUgJfyz0FFMX+goev2cGp67zKdIwHY="}
00749{"flow_id":4,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089070,"pkt_ts_usec":756129,"pkt_caplen":303,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":303,"pkt_l4_len":269,"pkt":"kDVu60UQeJKcD6iOCABFAAEhMGVAAEARnDfAqAFp2DrS49GYAbsBDYkQDLva88\/LUhUgJkcz8vG4Z\/IO+VkPDhG6AFD7bU7A+qqkwZ+x\/RvFauDbIOOJtwCjXyUObeUIn5gQ+UX+x65qNOazAz\/4wVrPUNQeyvpM\/apVfaPKE\/BWwazlUXoAI5VQNixlUUJ1awnxsfIGiNrCTSIptZgAvLyXtwp5hhxDz3XyJujNKh8y4KxdXT+KUDUJOJJnUi42xAE7YEaRgCG0Gsvcv8KKqXj17ZhXhBURaPrZodsQJCbjs8pPzHSHwv2KhOv\/hmenV+Y+4AoEiGoPjQoanC+Mp48jh+wIc24blOr9i\/xboxYy\/SLPPtKSsAsklxNqe9J5gUDokozUo9KiuHi4kWMZ"}
00426{"flow_id":4,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089070,"pkt_ts_usec":756212,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"kDVu60UQeJKcD6iOCABFAAA1MGZAAEARnSLAqAFp2DrS49GYAbsAIVjxDLva88\/LUhUgJwLsxjgxXNbPIqKq5C2ocA=="}
00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":18,"source":"weibo.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1463089070757,"flow_last_seen":0,"flow_min_l4_payload_len":27,"flow_max_l4_payload_len":27,"flow_tot_l4_payload_len":27,"flow_avg_l4_payload_len":27,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":54988,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00425{"flow_id":5,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089070,"pkt_ts_usec":757761,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"kDVu60UQeJKcD6iOCABFAAA3JrZAAEARkEXAqAFpwKgBAdbMADUAI69dsmwBAAABAAAAAAAABXdlaWJvA2NvbQAAAQAB"}
00637{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":18,"source":"weibo.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1463089070757,"flow_last_seen":0,"flow_min_l4_payload_len":27,"flow_max_l4_payload_len":27,"flow_tot_l4_payload_len":27,"flow_avg_l4_payload_len":27,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":54988,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"weibo.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
00438{"flow_id":4,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089070,"pkt_ts_usec":800539,"pkt_caplen":77,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":77,"pkt_l4_len":43,"pkt":"eJKcD6iOkDVu60UQCABFAAA\/48EAADYRM73YOtLjwKgBaQG70ZgAK5KmACJCWlXaapi9mYsktLXHPcOwMT6FVng4z3AZrMHlanNy2Oo="}
00435{"flow_id":4,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089070,"pkt_ts_usec":800569,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"eJKcD6iOkDVu60UQCABFAAA848MAADYRM77YOtLjwKgBaQG70ZgAKK3cACPs9\/Su8BV3z9mXpWI0v3VrqD9MgU\/H3zT1WUtzOd8="}
00479{"flow_id":4,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089070,"pkt_ts_usec":830405,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"pkt":"eJKcD6iOkDVu60UQCABFAABc49MAADYRM47YOtLjwKgBaQG70ZgASG6ZACRpSAAaXQawU+oPS7uVCeQrGIL0yTGmks5EA52DAWmpkywr7fEQ4oz4qVaUQTicoPuWtiLawy9XMTDS6ewOQw=="}
00926{"flow_id":4,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089070,"pkt_ts_usec":832828,"pkt_caplen":433,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":433,"pkt_l4_len":399,"pkt":"eJKcD6iOkDVu60UQCABFAAGj49YAADYRMkTYOtLjwKgBaQG70ZgBj\/hxACX6hcuY3YOe9Hr9jcyVrBMfbi6KUYX8j8coU3Dk+PWKGrAfCpPjWJSu8Y3FBIeqL\/+3biImOd9zFvNNZXHpUMY6VHB7QBMgkpDpR0bCmM4JdhXemksaeoMQKDi2X8FPO6156ubq0etO+A804vBtxjXtba0WiIZ7gaYmZt5EDyZnwU+EdSxRMfUuJsLrKNV3PwoBXPmvRKp1AJcr0WzfCBByqClrGtBx+w+mSrmHw+kQJNiRN1ZbdXK3w3wdR8EYC7xk5Qx0LIqKLSBAg\/Jq6lGm3oaZNQSVwgIdIS+fex2yIPGo1PQkZfKH8i4yvWT8ZJwULeU\/r8XtAauBcVa2c2yLK4X9z07v+77UlkTmUiPbP3NyRInMd87JODfosxvW9qqF0dM3McTUgFSnZrdgOLtsRI1\/bgzbxIJ\/kzTRdumwAkz1pju8od\/FvEU2sVclFp1ED9ZyuQuHNkM7J36U36cZW3X7KX9IhU9cbv+wF2CLvdn\/9qPaIaywXlxH\/RhaCdLNVx\/A4w=="}
00458{"flow_id":4,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089070,"pkt_ts_usec":833052,"pkt_caplen":91,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":91,"pkt_l4_len":57,"pkt":"kDVu60UQeJKcD6iOCABFAABNMHBAAEARnQDAqAFp2DrS49GYAbsAObaFDLva88\/LUhUgKByMYFMjskIM1A8eJQ8V9Nd4rb6Cbk+lAN9qqqdkdRyQRocRp3Qz5A=="}
00449{"flow_id":5,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089070,"pkt_ts_usec":841770,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"eJKcD6iOkDVu60UQCABFAABHAABAAEARtuvAqAEBwKgBaQA11swAM884smyBgAABAAEAAAAABXdlaWJvA2NvbQAAAQABwAwAAQABAAAAJAAEcoZQog=="}
00664{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":24,"source":"weibo.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":2,"flow_first_seen":1463089070757,"flow_last_seen":1463089070841,"flow_min_l4_payload_len":27,"flow_max_l4_payload_len":43,"flow_tot_l4_payload_len":70,"flow_avg_l4_payload_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":54988,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"weibo.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"114.134.80.162"}}
00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":25,"source":"weibo.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1463089070841,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"114.134.80.162","src_port":59119,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00433{"flow_id":6,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089070,"pkt_ts_usec":841932,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"kDVu60UQeJKcD6iOCABFAAA8BZVAAEAGr+3AqAFpcoZQoubvAFC9RQISAAAAAKACchCiVgAAAgQFtAQCCAoAQQeHAAAAAAEDAwc="}
00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":26,"source":"weibo.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1463089070841,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"114.134.80.162","src_port":59120,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00433{"flow_id":7,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089070,"pkt_ts_usec":841976,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"kDVu60UQeJKcD6iOCABFAAA80EtAAEAG5TbAqAFpcoZQoubwAFDrBNfMAAAAAKACchCe2wAAAgQFtAQCCAoAQQeHAAAAAAEDAwc="}
00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":27,"source":"weibo.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1463089071008,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"114.134.80.162","src_port":59121,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00431{"flow_id":8,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089071,"pkt_ts_usec":8468,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"kDVu60UQeJKcD6iOCABFAAA8ct5AAEAGQqTAqAFpcoZQoubxAFC2vHVvAAAAAKACchA1VgAAAgQFtAQCCAoAQQexAAAAAAEDAwc="}
00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":28,"source":"weibo.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1463089071046,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"216.58.210.206","src_port":35154,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00420{"flow_id":9,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089071,"pkt_ts_usec":46082,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kDVu60UQeJKcD6iOCABFAAA0aeJAAEAGY8fAqAFp2DrSzolSAbv6shUXRZgnfoAQAcBJAQAAAQEICgBBB7tvXD+b"}
00420{"flow_id":9,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089071,"pkt_ts_usec":94149,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iOkDVu60UQCABFAAA0QjAAADYG1XnYOtLOwKgBaQG7iVJFmCd++rIVGIAQCVwVnQAAAQEICm9c76IAQIN7"}
00421{"flow_id":6,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089071,"pkt_ts_usec":195785,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iOkDVu60UQCABFAAA0BcYAACkGBsVyhlCiwKgBaQBQ5u8JOZF4vUUCE4ASOQhvgQAAAgQFqAEBBAIBAwMH"}
00405{"flow_id":6,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089071,"pkt_ts_usec":195857,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"kDVu60UQeJKcD6iOCABFAAAoBZZAAEAGsADAqAFpcoZQoubvAFC9RQITCTmReVAQAOXoagAA"}
01005{"flow_id":6,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089071,"pkt_ts_usec":196181,"pkt_caplen":500,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":500,"pkt_l4_len":466,"pkt":"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"}
00751{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":32,"source":"weibo.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":4,"flow_first_seen":1463089070841,"flow_last_seen":1463089071196,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":446,"flow_tot_l4_payload_len":446,"flow_avg_l4_payload_len":111,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"114.134.80.162","src_port":59119,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"weibo.com","url":"weibo.com\/login.php?lang=en-us","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/50.0.2661.102 Safari\/537.36"}}
00421{"flow_id":7,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089071,"pkt_ts_usec":198585,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iOkDVu60UQCABFAAA0IcQAACoG6cZyhlCiwKgBaQBQ5vAZ6VqE6wTXzYASOQiSSgAAAgQFqAEBBAIBAwMH"}
00405{"flow_id":7,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089071,"pkt_ts_usec":198637,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"kDVu60UQeJKcD6iOCABFAAAo0ExAAEAG5UnAqAFpcoZQoubwAFDrBNfNGelahVAQAOULNAAA"}
00421{"flow_id":8,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089071,"pkt_ts_usec":348610,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iOkDVu60UQCABFAAA0BccAACoGBcRyhlCiwKgBaQBQ5vFPiVnutrx1cIASOQjz5AAAAgQFqAEBBAIBAwMH"}
00405{"flow_id":8,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089071,"pkt_ts_usec":348686,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"kDVu60UQeJKcD6iOCABFAAAoct9AAEAGQrfAqAFpcoZQoubxAFC2vHVwT4lZ71AQAOVszgAA"}
00405{"flow_id":6,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089071,"pkt_ts_usec":543591,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"eJKcD6iOkDVu60UQCABFAAAoBcgAACkGBs9yhlCiwKgBaQBQ5u8JOZF5vUUD0VAQAHvnFgAA"}
01260{"flow_id":6,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089071,"pkt_ts_usec":543642,"pkt_caplen":689,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":689,"pkt_l4_len":655,"pkt":"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"}
00407{"flow_id":6,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089071,"pkt_ts_usec":543674,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"kDVu60UQeJKcD6iOCABFAAAoBZhAAEAGr\/7AqAFpcoZQoubvAFC9RQPRCTmT9VAQAO\/kJgAA"}
00407{"flow_id":6,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089071,"pkt_ts_usec":547268,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"kDVu60UQeJKcD6iOCABFAAAoBZlAAEAGr\/3AqAFpcoZQoubvAFC9RQPRCTmT9VARAO\/kJQAA"}
00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":41,"source":"weibo.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1463089071551,"flow_last_seen":0,"flow_min_l4_payload_len":31,"flow_max_l4_payload_len":31,"flow_tot_l4_payload_len":31,"flow_avg_l4_payload_len":31,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":7148,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00434{"flow_id":10,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089071,"pkt_ts_usec":551377,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"pkt":"kDVu60UQeJKcD6iOCABFAAA7Jz9AAEARj7jAqAFpwKgBARvsADUAJ8YJ26oBAAABAAAAAAAAA3d3dwV3ZWlibwNjb20AAAEAAQ=="}
00652{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":41,"source":"weibo.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1463089071551,"flow_last_seen":0,"flow_min_l4_payload_len":31,"flow_max_l4_payload_len":31,"flow_tot_l4_payload_len":31,"flow_avg_l4_payload_len":31,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":7148,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Sina(Weibo)","breed":"Fun","category":"SocialNetwork"},"dns": {"query":"www.weibo.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
00529{"flow_id":10,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089071,"pkt_ts_usec":612902,"pkt_caplen":142,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":142,"pkt_l4_len":108,"pkt":"eJKcD6iOkDVu60UQCABFAACAAABAAEARtrLAqAEBwKgBaQA1G+wAbIVL26qBgAABAAMAAAAAA3d3dwV3ZWlibwNjb20AAAEAAcAMAAUAAQAAACUAGQN3d3cFd2VpYm8DY29tBWNkbmdjA25ldADAKwABAAEAAAAHAARdvIaJwCsAAQABAAAABwAEXbyGhw=="}
00681{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":42,"source":"weibo.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":2,"flow_first_seen":1463089071551,"flow_last_seen":1463089071612,"flow_min_l4_payload_len":31,"flow_max_l4_payload_len":100,"flow_tot_l4_payload_len":131,"flow_avg_l4_payload_len":65,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":7148,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Sina(Weibo)","breed":"Fun","category":"SocialNetwork"},"dns": {"query":"www.weibo.com","num_queries":1,"num_answers":3,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"93.188.134.137"}}
00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":43,"source":"weibo.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1463089071613,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"93.188.134.137","src_port":51698,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00435{"flow_id":11,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089071,"pkt_ts_usec":613246,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"kDVu60UQeJKcD6iOCABFAAA84VFAAEAGsxPAqAFpXbyGicnyAFB0WekZAAAAAKACchD\/WQAAAgQFtAQCCAoAQQhIAAAAAAEDAwc="}
00436{"flow_id":11,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089071,"pkt_ts_usec":642417,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"eJKcD6iOkDVu60UQCABFAAA8AABAADgGnGVdvIaJwKgBaQBQyfKlqmMtdFnpGqAS\/\/8RHAAAAgQFqAQCCAr5u121AEEISAEDAwc="}
00422{"flow_id":11,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089071,"pkt_ts_usec":642473,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kDVu60UQeJKcD6iOCABFAAA04VJAAEAGsxrAqAFpXbyGicnyAFB0WekapapjLoAQAOU+7wAAAQEICgBBCFD5u121"}
01026{"flow_id":11,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089071,"pkt_ts_usec":642772,"pkt_caplen":516,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":516,"pkt_l4_len":482,"pkt":"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"}
00775{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":46,"source":"weibo.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":4,"flow_first_seen":1463089071613,"flow_last_seen":1463089071642,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":450,"flow_tot_l4_payload_len":450,"flow_avg_l4_payload_len":112,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"93.188.134.137","src_port":51698,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Sina(Weibo)","breed":"Fun","category":"SocialNetwork"},"http": {"hostname":"www.weibo.com","url":"www.weibo.com\/login.php?lang=en-us","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/50.0.2661.102 Safari\/537.36"}}
00422{"flow_id":11,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089071,"pkt_ts_usec":670625,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iOkDVu60UQCABFAAA0PuBAADgGXY1dvIaJwKgBaQBQyfKlqmMudFnq3IAQAqQ7UwAAAQEICvm7XdAAQQhQ"}
00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":48,"source":"weibo.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1463089071730,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"216.58.212.69","src_port":37802,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00422{"flow_id":12,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089071,"pkt_ts_usec":730101,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kDVu60UQeJKcD6iOCABFAAA08m9AAEAG2cLAqAFp2DrURZOqAbsjKGR2xs8noYAQA+RthAAAAQEICgBBCGYlk10U"}
00422{"flow_id":12,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089071,"pkt_ts_usec":755114,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iOkDVu60UQCABFAAA0StsAADYGy1fYOtRFwKgBaQG7k6rGzyehIyhkd4AQAsDqzAAAAQEICiWUDPAAQNxk"}
00405{"flow_id":6,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089071,"pkt_ts_usec":891757,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"eJKcD6iOkDVu60UQCABFAAAoBcoAACkGBs1yhlCiwKgBaQBQ5u8JOZP1vUUD0lAQAHvkmQAA"}
00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":51,"source":"weibo.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":1463089071994,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"54.225.163.210","src_port":40440,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00422{"flow_id":13,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089071,"pkt_ts_usec":994093,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kDVu60UQeJKcD6iOCABFAAA06TdAAEAGtMfAqAFpNuGj0p34AbsDr1KJWj28A4AQAWjCCQAAAQEICgBBCKgBIwBO"}
00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":52,"source":"weibo.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1463089072046,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"216.58.212.65","src_port":34699,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00421{"flow_id":14,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":46092,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kDVu60UQeJKcD6iOCABFAAA0dEpAAEAGV+zAqAFp2DrUQYeLAbv4qaw1BowayYAQAO03NAAAAQEICgBBCLUlGFKF"}
00421{"flow_id":14,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":70732,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iOkDVu60UQCABFAAA0NhEAADYG4CXYOtRBwKgBaQG7h4sGjBrJ+KmsNoAQAV6y1gAAAQEICiUZAmMAQNzC"}
00430{"flow_id":11,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":54,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":125117,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"eJKcD6iOkDVu60UQCABFAAA5PuJAADgGXYZdvIaJwKgBaQBQyfKlqmYfdFnq3IAYAqRjYwAAAQEICvm7X4IAQQhQZjJjDQo="}
00438{"flow_id":11,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":55,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":125181,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"kDVu60UQeJKcD6iOCABFAABA4VRAAEAGswzAqAFpXbyGicnyAFB0WercpapjLrAQAOXu6QAAAQEICgBBCMj5u13QAQEFCqWqZh+lqmYk"}
02385{"flow_id":11,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":125228,"pkt_caplen":1502,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1502,"pkt_l4_len":1468,"pkt":"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"}
00438{"flow_id":11,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":57,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":125248,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"kDVu60UQeJKcD6iOCABFAABA4VVAAEAGswvAqAFpXbyGicnyAFB0WercpapjLrAQAPvpNwAAAQEICgBBCMj5u13QAQEFCqWqZh+lqmvA"}
02377{"flow_id":11,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":58,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":138435,"pkt_caplen":1502,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1502,"pkt_l4_len":1468,"pkt":"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"}
00439{"flow_id":11,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":59,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":138492,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"kDVu60UQeJKcD6iOCABFAABA4VZAAEAGswrAqAFpXbyGicnyAFB0WercpapjLrAQARHjgQAAAQEICgBBCMz5u13QAQEFCqWqZh+lqnFc"}
00427{"flow_id":11,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":138520,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":68,"pkt_l4_len":34,"pkt":"eJKcD6iOkDVu60UQCABFAAA2PuZAADgGXYVdvIaJwKgBaQBQyfKlqnVQdFnq3IAYAqQaawAAAQEICvm7X4IAQQhQDQo="}
00451{"flow_id":11,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":61,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":138540,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"kDVu60UQeJKcD6iOCABFAABI4VdAAEAGswHAqAFpXbyGicnyAFB0WercpapjLtAQARGNeQAAAQEICgBBCMz5u13QAQEFEqWqdVClqnVSpapmH6WqcVw="}
01801{"flow_id":11,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":138559,"pkt_caplen":1078,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1078,"pkt_l4_len":1044,"pkt":"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"}
00439{"flow_id":11,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":138569,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"kDVu60UQeJKcD6iOCABFAABA4VhAAEAGswjAqAFpXbyGicnyAFB0WercpapjLrAQASHfewAAAQEICgBBCMz5u13QAQEFCqWqZh+lqnVS"}
00422{"flow_id":13,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":138578,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iOkDVu60UQCABFAAA0XohAABsGZHc24aPSwKgBaQG7nfhaPbwDA69SioAQAIjCywAAAQEICgEjLGEAQNyy"}
00631{"flow_id":4,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":77,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":218677,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"kDVu60UQeJKcD6iOCABFAADIMHRAAEARnIHAqAFp2DrS49GYAbsAtDaTDLva88\/LUhUgKY+xs7iw1orb+tz+ka2qzr+koIZvGx7rYDrJ\/f4nIFHp7KM+XDOVT1fclkN+Zp\/5AMzmN\/fI22iaVxZ2wbCTl2vpMzdsvLIl83sNvYI5OEEIczI7gAwFedn01M9rq6EccbITTNm\/9KsOndQbng2W\/c9Bdl7Gljb29KN8um0bfsJkmyoG7BO106c4KGdE5pfHR4Jnrg5AA8c112H29gMhWJXEGQ=="}
00427{"flow_id":4,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":78,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":218733,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"kDVu60UQeJKcD6iOCABFAAA1MHVAAEARnRPAqAFp2DrS49GYAbsAIZe6DLva88\/LUhUgKtrdfYOrYAZFD+Sy5gLiLg=="}
00439{"flow_id":4,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":96,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":304855,"pkt_caplen":77,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":77,"pkt_l4_len":43,"pkt":"eJKcD6iOkDVu60UQCABFAAA\/6AMAADYRL3vYOtLjwKgBaQG70ZgAK+PGACavMB4N4yIzGWdh1rywnHHD9GKrlEvcs81E5Fg8mOE1i4w="}
00484{"flow_id":4,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":104,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":331449,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"pkt":"eJKcD6iOkDVu60UQCABFAABc6BsAADYRL0bYOtLjwKgBaQG70ZgASC1QACePx5VdQS6UanRpiyRb1SqZ2LsHNLKT3NzM\/1qa6Zqxx+hvKc+dxBqAnZG\/ow4Wk7CxE52Q+sn1tchPYliq\/w=="}
00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":107,"source":"weibo.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1463089072333,"flow_last_seen":0,"flow_min_l4_payload_len":33,"flow_max_l4_payload_len":33,"flow_tot_l4_payload_len":33,"flow_avg_l4_payload_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":53543,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00435{"flow_id":15,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":107,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":333305,"pkt_caplen":75,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":75,"pkt_l4_len":41,"pkt":"kDVu60UQeJKcD6iOCABFAAA9J7BAAEARj0XAqAFpwKgBAdEnADUAKd+0rc0BAAABAAAAAAAAA2ltZwF0BnNpbmFqcwJjbgAAAQAB"}
00656{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":107,"source":"weibo.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1463089072333,"flow_last_seen":0,"flow_min_l4_payload_len":33,"flow_max_l4_payload_len":33,"flow_tot_l4_payload_len":33,"flow_avg_l4_payload_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":53543,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Sina(Weibo)","breed":"Fun","category":"SocialNetwork"},"dns": {"query":"img.t.sinajs.cn","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
00450{"flow_id":4,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":110,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":356956,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"kDVu60UQeJKcD6iOCABFAABEMHtAAEARnP7AqAFp2DrS49GYAbsAMK62DLva88\/LUhUgK1nsvLxTwI61hx7I4ZYbNy\/FHeh1pRHmWfG2sK\/0yA=="}
00594{"flow_id":15,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":135,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":444805,"pkt_caplen":191,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":191,"pkt_l4_len":157,"pkt":"eJKcD6iOkDVu60UQCABFAACxAABAAEARtoHAqAEBwKgBaQA10ScAnYbirc2BgAABAAUAAAAAA2ltZwF0BnNpbmFqcwJjbgAAAQABwAwABQABAAAAAAAHBHdjZG7AEsAtAAUAAQAAACoAFQZzaW5hanMFY3NnbGIFdHhjZG7AGcBAAAUAAQAABBMAFAhuNGNzd2hrMwVnY2NkbgNuZXQAwGEAAQABAAAABAAEXbyG9sBhAAEAAQAAAAQABF28hvE="}
00685{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":135,"source":"weibo.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":2,"flow_first_seen":1463089072333,"flow_last_seen":1463089072444,"flow_min_l4_payload_len":33,"flow_max_l4_payload_len":149,"flow_tot_l4_payload_len":182,"flow_avg_l4_payload_len":91,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":53543,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Sina(Weibo)","breed":"Fun","category":"SocialNetwork"},"dns": {"query":"img.t.sinajs.cn","num_queries":1,"num_answers":5,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"93.188.134.246"}}
00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":136,"source":"weibo.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_first_seen":1463089072445,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"93.188.134.246","src_port":35803,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00435{"flow_id":16,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":136,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":445019,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"kDVu60UQeJKcD6iOCABFAAA8AXdAAEAGkoHAqAFpXbyG9ovbAFCLeghvAAAAAKACchAFvgAAAgQFtAQCCAoAQQkYAAAAAAEDAwc="}
00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":137,"source":"weibo.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_first_seen":1463089072445,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"93.188.134.246","src_port":35804,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00436{"flow_id":17,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":137,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":445053,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"kDVu60UQeJKcD6iOCABFAAA8fClAAEAGF8\/AqAFpXbyG9ovcAFB8ZHUxAAAAAKACchCoEAAAAgQFtAQCCAoAQQkYAAAAAAEDAwc="}
00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":138,"source":"weibo.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_first_seen":1463089072445,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"93.188.134.246","src_port":35805,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00435{"flow_id":18,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":138,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":445071,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"kDVu60UQeJKcD6iOCABFAAA8mn5AAEAG+XnAqAFpXbyG9ovdAFDX1pNmAAAAAKACchAuaAAAAgQFtAQCCAoAQQkYAAAAAAEDAwc="}
00439{"flow_id":16,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":139,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":471768,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"eJKcD6iOkDVu60UQCABFAAA8AABAADgGm\/hdvIb2wKgBaQBQi9tGfim0i3oIcKAS\/\/\/69gAAAgQFqAQCCAoDdgkqAEEJGAEDAwc="}
00423{"flow_id":16,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":140,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":471800,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kDVu60UQeJKcD6iOCABFAAA0AXhAAEAGkojAqAFpXbyG9ovbAFCLeghwRn4ptYAQAOUoywAAAQEICgBBCR8Ddgkq"}
00438{"flow_id":17,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":141,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":471818,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"eJKcD6iOkDVu60UQCABFAAA8AABAADgGm\/hdvIb2wKgBaQBQi9zPRoUNfGR1MqAS\/\/+5JgAAAgQFqAQCCAoDdgkrAEEJGAEDAwc="}
00423{"flow_id":17,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":142,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":471831,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kDVu60UQeJKcD6iOCABFAAA0fCpAAEAGF9bAqAFpXbyG9ovcAFB8ZHUyz0aFDoAQAOXm+gAAAQEICgBBCR8Ddgkr"}
00439{"flow_id":18,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":143,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":471843,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"eJKcD6iOkDVu60UQCABFAAA8AABAADgGm\/hdvIb2wKgBaQBQi90SpJVX19aTZ6AS\/\/\/r1QAAAgQFqAQCCAoDdgksAEEJGAEDAwc="}
00423{"flow_id":18,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":144,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":471854,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kDVu60UQeJKcD6iOCABFAAA0mn9AAEAG+YDAqAFpXbyG9ovdAFDX1pNnEqSVWIAQAOUZqgAAAQEICgBBCR8Ddgks"}
00986{"flow_id":16,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":145,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":471951,"pkt_caplen":486,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":486,"pkt_l4_len":452,"pkt":"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"}
00820{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":145,"source":"weibo.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":4,"flow_first_seen":1463089072445,"flow_last_seen":1463089072471,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":420,"flow_tot_l4_payload_len":420,"flow_avg_l4_payload_len":105,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"93.188.134.246","src_port":35803,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Sina(Weibo)","breed":"Fun","category":"SocialNetwork"},"http": {"hostname":"img.t.sinajs.cn","url":"img.t.sinajs.cn\/t6\/style\/css\/module\/base\/frame.css?version=201605130537","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/50.0.2661.102 Safari\/537.36"}}
01002{"flow_id":17,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":146,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":472038,"pkt_caplen":498,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":498,"pkt_l4_len":464,"pkt":"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"}
00832{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":146,"source":"weibo.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":4,"flow_first_seen":1463089072445,"flow_last_seen":1463089072472,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":432,"flow_tot_l4_payload_len":432,"flow_avg_l4_payload_len":108,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"93.188.134.246","src_port":35804,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Sina(Weibo)","breed":"Fun","category":"SocialNetwork"},"http": {"hostname":"img.t.sinajs.cn","url":"img.t.sinajs.cn\/t6\/style\/css\/module\/combination\/comb_login.css?version=201605130537","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/50.0.2661.102 Safari\/537.36"}}
00975{"flow_id":18,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":147,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":472113,"pkt_caplen":476,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":476,"pkt_l4_len":442,"pkt":"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"}
00808{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":147,"source":"weibo.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":4,"flow_first_seen":1463089072445,"flow_last_seen":1463089072472,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":410,"flow_tot_l4_payload_len":410,"flow_avg_l4_payload_len":102,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"93.188.134.246","src_port":35805,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Sina(Weibo)","breed":"Fun","category":"SocialNetwork"},"http": {"hostname":"img.t.sinajs.cn","url":"img.t.sinajs.cn\/t6\/skin\/default\/skin.css?version=201605130537","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/50.0.2661.102 Safari\/537.36"}}
00423{"flow_id":16,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":148,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":500000,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iOkDVu60UQCABFAAA0IPZAADgGewpdvIb2wKgBaQBQi9tGfim1i3oKFIAQAqQlTAAAAQEICgN2CUYAQQkf"}
00423{"flow_id":17,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":149,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":503183,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iOkDVu60UQCABFAAA0jEpAADgGD7ZdvIb2wKgBaQBQi9zPRoUOfGR24oAQAqTjbgAAAQEICgN2CUgAQQkf"}
00424{"flow_id":18,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":150,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":503227,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iOkDVu60UQCABFAAA0nB1AADgG\/+JdvIb2wKgBaQBQi90SpJVY19aVAYAQAqQWNAAAAQEICgN2CUkAQQkf"}
01111{"flow_id":18,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":151,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":779356,"pkt_caplen":577,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":577,"pkt_l4_len":543,"pkt":"eJKcD6iOkDVu60UQCABFAAIznB5AADgG\/eJdvIb2wKgBaQBQi90SpJVY19aVAYAYAqSCXAAAAQEICgN2ClkAQQkfSFRUUC8xLjEgMjAwIE9LDQpEYXRlOiBUaHUsIDEyIE1heSAyMDE2IDIxOjM3OjUyIEdNVA0KU2VydmVyOiBQV1MvOC4xLjM2DQpYLVB4OiBtcyBoMC1zNjUucDEtbXhwICggaDAtczQ3LnAxLW14cCksIG1zIGgwLXM0Ny5wMS1teHAgKCBoMC1zMTQ5OS5wMjEtbnJ0KSwgaHQgaDAtczE0OTkucDIxLW5ydC5jZG5ncC5uZXQNCkVUYWc6ICI1NmFiMjYzMS1jZjgiDQpDYWNoZS1Db250cm9sOiBtYXgtYWdlPTEyOTYwMDANCkV4cGlyZXM6IEZyaSwgMjcgTWF5IDIwMTYgMjE6Mzc6MDQgR01UDQpBZ2U6IDQ4DQpDb250ZW50LUxlbmd0aDogOTYwDQpDb250ZW50LVR5cGU6IHRleHQvY3NzDQpDb250ZW50LUVuY29kaW5nOiBnemlwDQpWYXJ5OiBBY2NlcHQtRW5jb2RpbmcNClB4LVVuY29tcHJlc3MtT3JpZ2luOiAzMzIwDQpMYXN0LU1vZGlmaWVkOiBGcmksIDI5IEphbiAyMDE2IDA4OjQzOjI5IEdNVA0KQWNjZXNzLUNvbnRyb2wtQWxsb3ctT3JpZ2luOiAqDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQoNCg=="}
00423{"flow_id":18,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":152,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":779408,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kDVu60UQeJKcD6iOCABFAAA0moFAAEAG+X7AqAFpXbyG9ovdAFDX1pUBEqSXV4AQAO0UjwAAAQEICgBBCWwDdgpZ"}
01741{"flow_id":18,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":153,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":786257,"pkt_caplen":1026,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1026,"pkt_l4_len":992,"pkt":"eJKcD6iOkDVu60UQCABFAAP0nB9AADgG\/CBdvIb2wKgBaQBQi90SpJdX19aVAYAYAqS\/2AAAAQEICgN2ClkAQQkfH4sIAAAAAAAAAK1W3XLbKhC+P0+hU98kHdnVj+XY1nQ601fIRS8ZEEihkUFFKHWr8bsXkJCxftI202hiW8vut9\/C7rKbR1BXRJ6lDzePIKcZZ8cn\/kKED7tvz4qVQtYIQZgcRG3GSy6Oqxw+4DhLL0pOhOCi9boFb5UHgRF3PgAqWg\/B7LkQvGF4PTb\/ApBkoBLkpefQSxg5y06izLnARLzB9C0BGhtFPBwgHA0ttwqR9fr4BeQNc5AbloWtVCzWmGRcQEkVAcYZST2FVasgKk6ZJMLsk\/EKMK2vbPXbAmO91FoYTHLYlDLlFcyo\/HEMNknqrU\/859qV5LRUvo6wrJ7gXb\/wMQnu9RZ+BpKeSEkZ8YY4ycke5irPc6VVE4bBd0IRb52TpCdYkC4sA3SijKKSF20FMaasWEteHZOgOpsoK6Xs\/YVaLuCJzGSOFJDVFdRE\/6enigsJmUwvq681qJ+pSocGlTQDCNakfSK0eJLHbaTB\/0Mc\/\/B7F+00I\/EWJyRIJwE2orx7Z37WHzQEEKQiUG4qVnyi+GO4DYPDNg62D2EYv7v3XIBO89h9rc\/uUsVratIiIzoRvCD13H32Nt1h199Vog2nsQ\/0k15MJCUplLrOecqqRh5znjW1b3O0LwVks\/OalxYsjuN0NkcvPcZC5Wq7q8qkOp3laCA30NHZC1FJJgJb6reRvsYvWuBnN2nQmlB0NLqKf2sRdnC7w4487J1Snuc1VZsQsypQM1I1+Rz+q2ZkuRL0ECdd6AZ\/getUbcLVUUFFaP2q37dElADATNKXuZLLd\/qxGCBr5+XK+egGsOtdEmVQYE3TJpWEBVDbNHrtM2yJhdtMjN\/IV10qe\/7WcEmcchoyeohvDtK0TYPiROUIVUiOdBRdr6eb8lDI+pZz77eB0Whr8EE\/w9b8ruD+bMtmPIy2y3C9hrrEYjJFLIJF4yOP1JNcl51tvV2JnSNy++ltH5qNLDN\/hvUSwOJZqxurJLkEDL541x7sCEeFPDboG9GNxXhWmeA5k027zKYkA5Y\/WdHHvCResjlxoU5Sf871DhShQxankwVRIHgXJYlv\/4NNdJ++XwSYRgE+8\/Mtm5ySEtdEjpuT5eAKZ\/yH2v+c4eW1CWQF9zBHh4UI452\/C\/39QYeXzMbXm4+Gr8fxfdIT07FOrpCFsc0fQQLMTcoXXM1Yr95J7lx2VZvOPqjYfK3M3BMF4TY4RPtwr66BQA0+HuP9wOMpb1431yyMfq+7MAZ\/62cYAPuZ2LzcToC\/AKDsjev4DAAA"}
00423{"flow_id":18,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":154,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":786294,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kDVu60UQeJKcD6iOCABFAAA0moJAAEAG+X3AqAFpXbyG9ovdAFDX1pUBEqSbF4AQAPwQvgAAAQEICgBBCW4DdgpZ"}
01114{"flow_id":17,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":155,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":786333,"pkt_caplen":580,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":580,"pkt_l4_len":546,"pkt":"eJKcD6iOkDVu60UQCABFAAI2jEtAADgGDbNdvIb2wKgBaQBQi9zPRoUOfGR24oAYAqRDYQAAAQEICgN2ClwAQQkfSFRUUC8xLjEgMjAwIE9LDQpEYXRlOiBUaHUsIDEyIE1heSAyMDE2IDIxOjM3OjUyIEdNVA0KU2VydmVyOiBQV1MvOC4xLjM2DQpYLVB4OiBtcyBoMC1zNjUucDEtbXhwICggaDAtczU5LnAxLW14cCksIG1zIGgwLXM1OS5wMS1teHAgKCBoMC1zMTgzMi5wMjEtbnJ0KSwgaHQgaDAtczE4MzIucDIxLW5ydC5jZG5ncC5uZXQNCkVUYWc6ICI1NzMxZTI2Ni1iMTYxIg0KQ2FjaGUtQ29udHJvbDogbWF4LWFnZT0xMjk2MDAwDQpFeHBpcmVzOiBGcmksIDI3IE1heSAyMDE2IDIxOjM3OjA0IEdNVA0KQWdlOiA0OA0KQ29udGVudC1MZW5ndGg6IDkwMTkNCkNvbnRlbnQtVHlwZTogdGV4dC9jc3MNCkNvbnRlbnQtRW5jb2Rpbmc6IGd6aXANClZhcnk6IEFjY2VwdC1FbmNvZGluZw0KUHgtVW5jb21wcmVzcy1PcmlnaW46IDQ1NDA5DQpMYXN0LU1vZGlmaWVkOiBUdWUsIDEwIE1heSAyMDE2IDEzOjMwOjE0IEdNVA0KQWNjZXNzLUNvbnRyb2wtQWxsb3ctT3JpZ2luOiAqDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQoNCg=="}
00423{"flow_id":17,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":156,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":786367,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kDVu60UQeJKcD6iOCABFAAA0fCxAAEAGF9TAqAFpXbyG9ovcAFB8ZHbiz0aHEIAQAO3hwAAAAQEICgBBCW4Ddgpc"}
02393{"flow_id":17,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":157,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":788918,"pkt_caplen":1502,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1502,"pkt_l4_len":1468,"pkt":"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"}
00423{"flow_id":17,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":158,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":788957,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kDVu60UQeJKcD6iOCABFAAA0fC1AAEAGF9PAqAFpXbyG9ovcAFB8ZHbiz0aMrIAQAQPcDgAAAQEICgBBCW4Ddgpc"}
04324{"flow_id":17,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":159,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":805580,"pkt_caplen":2938,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":2938,"pkt_l4_len":2904,"pkt":"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"}
00424{"flow_id":17,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":160,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":805646,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kDVu60UQeJKcD6iOCABFAAA0fC5AAEAGF9LAqAFpXbyG9ovcAFB8ZHbiz0aX5IAQATDQpQAAAQEICgBBCXIDdgpc"}
02372{"flow_id":17,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":161,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":818429,"pkt_caplen":1502,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1502,"pkt_l4_len":1468,"pkt":"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"}
00424{"flow_id":17,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":162,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":818462,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kDVu60UQeJKcD6iOCABFAAA0fC9AAEAGF9HAqAFpXbyG9ovcAFB8ZHbiz0adgIAQAUfK7gAAAQEICgBBCXYDdgpc"}
01806{"flow_id":17,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":163,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":818488,"pkt_caplen":1078,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1078,"pkt_l4_len":1044,"pkt":"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"}
00440{"flow_id":17,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":164,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":818500,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"kDVu60UQeJKcD6iOCABFAABAfDBAAEAGF8TAqAFpXbyG9ovcAFB8ZHbiz0adgLAQAV2sBgAAAQEICgBBCXYDdgpcAQEFCs9GoxzPRqcQ"}
01114{"flow_id":16,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":169,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":872448,"pkt_caplen":581,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":581,"pkt_l4_len":547,"pkt":"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"}
00423{"flow_id":16,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":170,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":872498,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kDVu60UQeJKcD6iOCABFAAA0AXpAAEAGkobAqAFpXbyG9ovbAFCLegoURn4ruIAQAO0jgwAAAQEICgBBCYMDdgpf"}
02401{"flow_id":16,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":171,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":879101,"pkt_caplen":1502,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1502,"pkt_l4_len":1468,"pkt":"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"}
00423{"flow_id":16,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":172,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":879150,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kDVu60UQeJKcD6iOCABFAAA0AXtAAEAGkoXAqAFpXbyG9ovbAFCLegoURn4xVIAQAQMdzwAAAQEICgBBCYUDdgpf"}
06254{"flow_id":16,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":173,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":885684,"pkt_caplen":4374,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":4374,"pkt_l4_len":4340,"pkt":"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"}
00424{"flow_id":16,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":174,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":885727,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kDVu60UQeJKcD6iOCABFAAA0AXxAAEAGkoTAqAFpXbyG9ovbAFCLegoURn5CKIAQAUcMtgAAAQEICgBBCYYDdgpf"}
00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":175,"source":"weibo.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_first_seen":1463089072885,"flow_last_seen":0,"flow_min_l4_payload_len":32,"flow_max_l4_payload_len":32,"flow_tot_l4_payload_len":32,"flow_avg_l4_payload_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":41352,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00436{"flow_id":19,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":175,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":885992,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"kDVu60UQeJKcD6iOCABFAAA8J\/lAAEARjv3AqAFpwKgBAaGIADUAKAcnK+gBAAABAAAAAAAAAmpzAXQGc2luYWpzAmNuAAABAAE="}
00655{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":175,"source":"weibo.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_first_seen":1463089072885,"flow_last_seen":0,"flow_min_l4_payload_len":32,"flow_max_l4_payload_len":32,"flow_tot_l4_payload_len":32,"flow_avg_l4_payload_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":41352,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Sina(Weibo)","breed":"Fun","category":"SocialNetwork"},"dns": {"query":"js.t.sinajs.cn","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
02385{"flow_id":16,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":176,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":901158,"pkt_caplen":1502,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1502,"pkt_l4_len":1468,"pkt":"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"}
00424{"flow_id":16,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":177,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":901207,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kDVu60UQeJKcD6iOCABFAAA0AX1AAEAGkoPAqAFpXbyG9ovbAFCLegoURn5HxIAQAV0HAAAAAQEICgBBCYoDdgpf"}
06256{"flow_id":16,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":178,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":907721,"pkt_caplen":4374,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":4374,"pkt_l4_len":4340,"pkt":"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"}
00424{"flow_id":16,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":179,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":907760,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kDVu60UQeJKcD6iOCABFAAA0AX5AAEAGkoLAqAFpXbyG9ovbAFCLegoURn5YmIAQAaD15gAAAQEICgBBCYwDdgpf"}
01112{"flow_id":18,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":182,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":940144,"pkt_caplen":577,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":577,"pkt_l4_len":543,"pkt":"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"}
00440{"flow_id":18,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":183,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":940197,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"kDVu60UQeJKcD6iOCABFAABAmoNAAEAG+XDAqAFpXbyG9ovdAFDX1pUBEqSbF7AQAPyIiAAAAQEICgBBCZQDdgpZAQEFChKklVgSpJdX"}
01742{"flow_id":18,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":188,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":943079,"pkt_caplen":1026,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1026,"pkt_l4_len":992,"pkt":"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"}
00441{"flow_id":18,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":189,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":943143,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"kDVu60UQeJKcD6iOCABFAABAmoRAAEAG+W\/AqAFpXbyG9ovdAFDX1pUBEqSbF7AQAPyCbQAAAQEICgBBCZUDdgq0AQEFChKkl1cSpJsX"}
00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":252,"source":"weibo.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_first_seen":1463089073286,"flow_last_seen":0,"flow_min_l4_payload_len":39,"flow_max_l4_payload_len":39,"flow_tot_l4_payload_len":39,"flow_avg_l4_payload_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":18035,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00443{"flow_id":20,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":252,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":286278,"pkt_caplen":81,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":81,"pkt_l4_len":47,"pkt":"kDVu60UQeJKcD6iOCABFAABDKCFAAEARjs7AqAFpwKgBAUZzADUAL2deWFEBAAABAAAAAAAAAnUxA2ltZwZtb2JpbGUEc2luYQJjbgAAAQAB"}
00662{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":252,"source":"weibo.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_first_seen":1463089073286,"flow_last_seen":0,"flow_min_l4_payload_len":39,"flow_max_l4_payload_len":39,"flow_tot_l4_payload_len":39,"flow_avg_l4_payload_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":18035,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Sina(Weibo)","breed":"Fun","category":"SocialNetwork"},"dns": {"query":"u1.img.mobile.sina.cn","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":253,"source":"weibo.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":1,"flow_first_seen":1463089073287,"flow_last_seen":0,"flow_min_l4_payload_len":35,"flow_max_l4_payload_len":35,"flow_tot_l4_payload_len":35,"flow_avg_l4_payload_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":50640,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00440{"flow_id":21,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":253,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":287324,"pkt_caplen":77,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":77,"pkt_l4_len":43,"pkt":"kDVu60UQeJKcD6iOCABFAAA\/KCJAAEARjtHAqAFpwKgBAcXQADUAK4SVO9YBAAABAAAAAAAABmFjanN0YgZhbGl5dW4DY29tAAABAAE="}
00696{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":253,"source":"weibo.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":1,"flow_first_seen":1463089073287,"flow_last_seen":0,"flow_min_l4_payload_len":35,"flow_max_l4_payload_len":35,"flow_tot_l4_payload_len":35,"flow_avg_l4_payload_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":50640,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"acjstb.aliyun.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":254,"source":"weibo.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":1,"flow_first_seen":1463089073287,"flow_last_seen":0,"flow_min_l4_payload_len":30,"flow_max_l4_payload_len":30,"flow_tot_l4_payload_len":30,"flow_avg_l4_payload_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":51440,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00431{"flow_id":22,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":254,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":287582,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"kDVu60UQeJKcD6iOCABFAAA6KCNAAEARjtXAqAFpwKgBAcjwADUAJqqk8RABAAABAAAAAAAAAWcGYWxpY2RuA2NvbQAAAQAB"}
00642{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":254,"source":"weibo.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":1,"flow_first_seen":1463089073287,"flow_last_seen":0,"flow_min_l4_payload_len":30,"flow_max_l4_payload_len":30,"flow_tot_l4_payload_len":30,"flow_avg_l4_payload_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":51440,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"g.alicdn.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":255,"source":"weibo.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_first_seen":1463089073287,"flow_last_seen":0,"flow_min_l4_payload_len":32,"flow_max_l4_payload_len":32,"flow_tot_l4_payload_len":32,"flow_avg_l4_payload_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":53466,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00435{"flow_id":23,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":255,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":287796,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"kDVu60UQeJKcD6iOCABFAAA8KCRAAEARjtLAqAFpwKgBAdDaADUAKHiskZsBAAABAAAAAAAAA2xvZwZtbXN0YXQDY29tAAABAAE="}
00644{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":255,"source":"weibo.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_first_seen":1463089073287,"flow_last_seen":0,"flow_min_l4_payload_len":32,"flow_max_l4_payload_len":32,"flow_tot_l4_payload_len":32,"flow_avg_l4_payload_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":53466,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"log.mmstat.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":257,"source":"weibo.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_first_seen":1463089073289,"flow_last_seen":0,"flow_min_l4_payload_len":34,"flow_max_l4_payload_len":34,"flow_tot_l4_payload_len":34,"flow_avg_l4_payload_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":33822,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00440{"flow_id":24,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":257,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":289058,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"kDVu60UQeJKcD6iOCABFAAA+KCVAAEARjs\/AqAFpwKgBAYQeADUAKn2XkPcBAAABAAAAAAAABWxvZ2luBnRhb2JhbwNjb20AAAEAAQ=="}
00646{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":257,"source":"weibo.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_first_seen":1463089073289,"flow_last_seen":0,"flow_min_l4_payload_len":34,"flow_max_l4_payload_len":34,"flow_tot_l4_payload_len":34,"flow_avg_l4_payload_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":33822,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"login.taobao.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
01042{"flow_id":18,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":259,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":319058,"pkt_caplen":525,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":525,"pkt_l4_len":491,"pkt":"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"}
00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":260,"source":"weibo.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":1,"flow_first_seen":1463089073319,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"93.188.134.246","src_port":35806,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00435{"flow_id":25,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":260,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":319753,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"kDVu60UQeJKcD6iOCABFAAA8H8hAAEAGdDDAqAFpXbyG9oveAFCCZhY7AAAAAKACchAAKAAAAgQFtAQCCAoAQQnzAAAAAAEDAwc="}
00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":261,"source":"weibo.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":1,"flow_first_seen":1463089073321,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"93.188.134.246","src_port":35807,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00435{"flow_id":26,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":261,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":321163,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"kDVu60UQeJKcD6iOCABFAAA80r9AAEAGwTjAqAFpXbyG9ovfAFBlcdtMAAAAAKACchBYCgAAAgQFtAQCCAoAQQnzAAAAAAEDAwc="}
00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":262,"source":"weibo.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":1,"flow_first_seen":1463089073322,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"93.188.134.246","src_port":35808,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00435{"flow_id":27,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":262,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":322446,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"kDVu60UQeJKcD6iOCABFAAA8W1BAAEAGOKjAqAFpXbyG9ovgAFAoLVKkAAAAAKACchAd9QAAAgQFtAQCCAoAQQn0AAAAAAEDAwc="}
00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":263,"source":"weibo.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":1,"flow_first_seen":1463089073334,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"93.188.134.246","src_port":35809,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00435{"flow_id":28,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":263,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":334322,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"kDVu60UQeJKcD6iOCABFAAA8E7RAAEAGgETAqAFpXbyG9ovhAFAJpBpDAAAAAKACchB02wAAAgQFtAQCCAoAQQn3AAAAAAEDAwc="}
00425{"flow_id":18,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":281,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":381894,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iOkDVu60UQCABFAAA0nCJAADgG\/91dvIb2wKgBaQBQi90SpJsX19aWzIAQAqEKgAAAAQEICgN2DKIAQQnz"}
00438{"flow_id":25,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":283,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":382415,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"eJKcD6iOkDVu60UQCABFAAA8AABAADgGm\/hdvIb2wKgBaQBQi944y47WgmYWPKAS\/\/+aeQAAAgQFqAQCCAoDdgyiAEEJ8wEDAwc="}
00423{"flow_id":25,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":284,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":382462,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kDVu60UQeJKcD6iOCABFAAA0H8lAAEAGdDfAqAFpXbyG9oveAFCCZhY8OMuO14AQAOXIRAAAAQEICgBBCgMDdgyi"}
01047{"flow_id":25,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":285,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":382597,"pkt_caplen":530,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":530,"pkt_l4_len":496,"pkt":"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"}
00804{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":285,"source":"weibo.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":4,"flow_first_seen":1463089073319,"flow_last_seen":1463089073382,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":464,"flow_tot_l4_payload_len":464,"flow_avg_l4_payload_len":116,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"93.188.134.246","src_port":35806,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Sina(Weibo)","breed":"Fun","category":"SocialNetwork"},"http": {"hostname":"img.t.sinajs.cn","url":"img.t.sinajs.cn\/t6\/style\/images\/global_nav\/WB_logo_b.png","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/50.0.2661.102 Safari\/537.36"}}
00439{"flow_id":26,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":286,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":383314,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"eJKcD6iOkDVu60UQCABFAAA8AABAADgGm\/hdvIb2wKgBaQBQi9\/6KbWaZXHbTaAS\/\/8KOQAAAgQFqAQCCAoDdgyiAEEJ8wEDAwc="}
00424{"flow_id":26,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":287,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":383342,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kDVu60UQeJKcD6iOCABFAAA00sBAAEAGwT\/AqAFpXbyG9ovfAFBlcdtN+im1m4AQAOU4BAAAAQEICgBBCgMDdgyi"}
01075{"flow_id":26,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":288,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":383484,"pkt_caplen":550,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":550,"pkt_l4_len":516,"pkt":"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"}
00825{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":288,"source":"weibo.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":4,"flow_first_seen":1463089073321,"flow_last_seen":1463089073383,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":484,"flow_tot_l4_payload_len":484,"flow_avg_l4_payload_len":121,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"93.188.134.246","src_port":35807,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Sina(Weibo)","breed":"Fun","category":"SocialNetwork"},"http": {"hostname":"img.t.sinajs.cn","url":"img.t.sinajs.cn\/t6\/style\/images\/growth\/login\/sprite_login.png?13434210384389","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/50.0.2661.102 Safari\/537.36"}}
00438{"flow_id":27,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":289,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":383869,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"eJKcD6iOkDVu60UQCABFAAA8AABAADgGm\/hdvIb2wKgBaQBQi+DI1jKOKC1SpaAS\/\/+EggAAAgQFqAQCCAoDdgyjAEEJ9AEDAwc="}
00424{"flow_id":27,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":290,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":383893,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kDVu60UQeJKcD6iOCABFAAA0W1FAAEAGOK\/AqAFpXbyG9ovgAFAoLVKlyNYyj4AQAOWyTgAAAQEICgBBCgMDdgyj"}
00438{"flow_id":28,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":291,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":384495,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"eJKcD6iOkDVu60UQCABFAAA8AABAADgGm\/hdvIb2wKgBaQBQi+Gi04d5CaQaRKAS\/\/+sgAAAAgQFqAQCCAoDdgyjAEEJ9wEDAwc="}
00423{"flow_id":28,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":292,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":384519,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kDVu60UQeJKcD6iOCABFAAA0E7VAAEAGgEvAqAFpXbyG9ovhAFAJpBpEotOHeoAQAOXaTwAAAQEICgBBCgMDdgyj"}
01059{"flow_id":28,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":293,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":384656,"pkt_caplen":539,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":539,"pkt_l4_len":505,"pkt":"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"}
00821{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":293,"source":"weibo.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":4,"flow_first_seen":1463089073334,"flow_last_seen":1463089073384,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":473,"flow_tot_l4_payload_len":473,"flow_avg_l4_payload_len":118,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"93.188.134.246","src_port":35809,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Sina(Weibo)","breed":"Fun","category":"SocialNetwork"},"http": {"hostname":"img.t.sinajs.cn","url":"img.t.sinajs.cn\/t6\/style\/images\/common\/font\/wbficon.woff?id=201605111746","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/50.0.2661.102 Safari\/537.36"}}
00551{"flow_id":20,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":298,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":393823,"pkt_caplen":159,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":159,"pkt_l4_len":125,"pkt":"eJKcD6iOkDVu60UQCABFAACRAABAAEARtqHAqAEBwKgBaQA1RnMAfV+\/WFGBgAABAAMAAAAAAnUxA2ltZwZtb2JpbGUEc2luYQJjbgAAAQABwAwABQABAAAACQAZBWFkaW1nBGdzbGIIc2luYWVkZ2UDY29tAMAzAAUAAQAAAAoADQV3ZWlibwRncmlkwD7AWAABAAEAAAAvAATeSRxg"}
00689{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":298,"source":"weibo.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":2,"flow_first_seen":1463089073286,"flow_last_seen":1463089073393,"flow_min_l4_payload_len":39,"flow_max_l4_payload_len":117,"flow_tot_l4_payload_len":156,"flow_avg_l4_payload_len":78,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":18035,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Sina(Weibo)","breed":"Fun","category":"SocialNetwork"},"dns": {"query":"u1.img.mobile.sina.cn","num_queries":1,"num_answers":3,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"222.73.28.96"}}
00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":299,"source":"weibo.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":1,"flow_first_seen":1463089073394,"flow_last_seen":0,"flow_min_l4_payload_len":35,"flow_max_l4_payload_len":35,"flow_tot_l4_payload_len":35,"flow_avg_l4_payload_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":11798,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00441{"flow_id":29,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":299,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":394448,"pkt_caplen":77,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":77,"pkt_l4_len":43,"pkt":"kDVu60UQeJKcD6iOCABFAAA\/KDNAAEARjsDAqAFpwKgBAS4WADUAK\/dEyn0BAAABAAAAAAAAB2FjY291bnQFd2VpYm8DY29tAAABAAE="}
00658{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":299,"source":"weibo.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":1,"flow_first_seen":1463089073394,"flow_last_seen":0,"flow_min_l4_payload_len":35,"flow_max_l4_payload_len":35,"flow_tot_l4_payload_len":35,"flow_avg_l4_payload_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":11798,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Sina(Weibo)","breed":"Fun","category":"SocialNetwork"},"dns": {"query":"account.weibo.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":300,"source":"weibo.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":1,"flow_first_seen":1463089073394,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"222.73.28.96","src_port":42275,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00436{"flow_id":30,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":300,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":394759,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"kDVu60UQeJKcD6iOCABFAAA8VdhAAEAGKCnAqAFp3kkcYKUjAFC1h1\/eAAAAAKACchBUFAAAAgQFtAQCCAoAQQoGAAAAAAEDAwc="}
00594{"flow_id":19,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":303,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":423772,"pkt_caplen":190,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":190,"pkt_l4_len":156,"pkt":"eJKcD6iOkDVu60UQCABFAACwAABAAEARtoLAqAEBwKgBaQA1oYgAnCOtK+iBgAABAAUAAAAAAmpzAXQGc2luYWpzAmNuAAABAAHADAAFAAEAAAA8AAcEd2NkbsARwCwABQABAAAAKQAVBnNpbmFqcwVjc2dsYgV0eGNkbsAYwD8ABQABAAAEEgAUCG40Y3N3aGszBWdjY2RuA25ldADAYAABAAEAAAADAARdvIb2wGAAAQABAAAAAwAEXbyG8Q=="}
00684{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":303,"source":"weibo.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":2,"flow_first_seen":1463089072885,"flow_last_seen":1463089073423,"flow_min_l4_payload_len":32,"flow_max_l4_payload_len":148,"flow_tot_l4_payload_len":180,"flow_avg_l4_payload_len":90,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":41352,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Sina(Weibo)","breed":"Fun","category":"SocialNetwork"},"dns": {"query":"js.t.sinajs.cn","num_queries":1,"num_answers":5,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"93.188.134.246"}}
00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":304,"source":"weibo.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":1,"flow_first_seen":1463089073424,"flow_last_seen":0,"flow_min_l4_payload_len":28,"flow_max_l4_payload_len":28,"flow_tot_l4_payload_len":28,"flow_avg_l4_payload_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":16804,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00431{"flow_id":31,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":304,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":424254,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"kDVu60UQeJKcD6iOCABFAAA4KDhAAEARjsLAqAFpwKgBAUGkADUAJAai81YBAAABAAAAAAAAAWMFd2VpYm8CY24AAAEAAQ=="}
00651{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":304,"source":"weibo.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":1,"flow_first_seen":1463089073424,"flow_last_seen":0,"flow_min_l4_payload_len":28,"flow_max_l4_payload_len":28,"flow_tot_l4_payload_len":28,"flow_avg_l4_payload_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":16804,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Sina(Weibo)","breed":"Fun","category":"SocialNetwork"},"dns": {"query":"c.weibo.cn","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":305,"source":"weibo.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":1,"flow_first_seen":1463089073424,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"93.188.134.246","src_port":35811,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00435{"flow_id":32,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":305,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":424339,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"kDVu60UQeJKcD6iOCABFAAA8dN1AAEAGHxvAqAFpXbyG9ovjAFD5+n7QAAAAAKACchAf3wAAAgQFtAQCCAoAQQoNAAAAAAEDAwc="}
00566{"flow_id":22,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":306,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":478883,"pkt_caplen":171,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":171,"pkt_l4_len":137,"pkt":"eJKcD6iOkDVu60UQCABFAACdAABAAEARtpXAqAEBwKgBaQA1yPAAiVtu8RCBgAABAAUAAAAAAWcGYWxpY2RuA2NvbQAAAQABwAwABQABAADy0wAXAWcGYWxpY2RuA2NvbQdkYW51b3lpwA7AKgABAAEAAAGzAAQvWUHlwCoAAQABAAABswAEL1lBx8AqAAEAAQAAAbMABC9ZQcbAKgABAAEAAAGzAAQvWUHk"}
00669{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":306,"source":"weibo.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":2,"flow_first_seen":1463089073287,"flow_last_seen":1463089073478,"flow_min_l4_payload_len":30,"flow_max_l4_payload_len":129,"flow_tot_l4_payload_len":159,"flow_avg_l4_payload_len":79,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":51440,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"g.alicdn.com","num_queries":1,"num_answers":5,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"47.89.65.229"}}
00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":307,"source":"weibo.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":1,"flow_first_seen":1463089073479,"flow_last_seen":0,"flow_min_l4_payload_len":32,"flow_max_l4_payload_len":32,"flow_tot_l4_payload_len":32,"flow_avg_l4_payload_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":50533,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00435{"flow_id":33,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":307,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":479208,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"kDVu60UQeJKcD6iOCABFAAA8KD5AAEARjrjAqAFpwKgBAcVlADUAKPnf1EwBAAABAAAAAAAABGRhdGEFd2VpYm8DY29tAAABAAE="}
00655{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":307,"source":"weibo.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":1,"flow_first_seen":1463089073479,"flow_last_seen":0,"flow_min_l4_payload_len":32,"flow_max_l4_payload_len":32,"flow_tot_l4_payload_len":32,"flow_avg_l4_payload_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":50533,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Sina(Weibo)","breed":"Fun","category":"SocialNetwork"},"dns": {"query":"data.weibo.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":308,"source":"weibo.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":1,"flow_first_seen":1463089073479,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"47.89.65.229","src_port":50827,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00435{"flow_id":34,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":308,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":479289,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"kDVu60UQeJKcD6iOCABFAAA8PQxAAEAGymDAqAFpL1lB5caLAbuG5TcXAAAAAKACchASAQAAAgQFtAQCCAoAQQobAAAAAAEDAwc="}
00489{"flow_id":23,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":309,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":488461,"pkt_caplen":112,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":112,"pkt_l4_len":78,"pkt":"eJKcD6iOkDVu60UQCABFAABiAABAAEARttDAqAEBwKgBaQA10NoATp++kZuBgAABAAIAAAAAA2xvZwZtbXN0YXQDY29tAAABAAHADAAFAAEAAAIfAAoDbG9nA2dkc8AQwCwAAQABAAAAIwAEjM2uAQ=="}
00671{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":309,"source":"weibo.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":2,"flow_first_seen":1463089073287,"flow_last_seen":1463089073488,"flow_min_l4_payload_len":32,"flow_max_l4_payload_len":70,"flow_tot_l4_payload_len":102,"flow_avg_l4_payload_len":51,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":53466,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"log.mmstat.com","num_queries":1,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"140.205.174.1"}}
00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":310,"source":"weibo.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":1,"flow_first_seen":1463089073488,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"140.205.174.1","src_port":48352,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00436{"flow_id":35,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":310,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":488757,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"kDVu60UQeJKcD6iOCABFAAA8K\/hAAEAGEeTAqAFpjM2uAbzgAbtP+SHlAAAAAKACchCeNwAAAgQFtAQCCAoAQQodAAAAAAEDAwc="}
00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":311,"source":"weibo.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":1,"flow_first_seen":1463089073488,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"140.205.174.1","src_port":48353,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00435{"flow_id":36,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":311,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":488783,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"kDVu60UQeJKcD6iOCABFAAA8i2VAAEAGsnbAqAFpjM2uAbzhAbvMrYF4AAAAAKACchDB7gAAAgQFtAQCCAoAQQodAAAAAAEDAwc="}
00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":329,"source":"weibo.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":1,"flow_first_seen":1463089073537,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"222.73.28.96","src_port":42280,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00435{"flow_id":37,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":329,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":537120,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"kDVu60UQeJKcD6iOCABFAAA8pN1AAEAG2SPAqAFp3kkcYKUoAFA4Ca70AAAAAKACchCCVAAAAgQFtAQCCAoAQQopAAAAAAEDAwc="}
00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":330,"source":"weibo.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":1,"flow_first_seen":1463089073537,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"47.89.65.229","src_port":50831,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00435{"flow_id":38,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":330,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":537807,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"kDVu60UQeJKcD6iOCABFAAA8GyhAAEAG7ETAqAFpL1lB5caPAbufLBEBAAAAAKACchAfvgAAAgQFtAQCCAoAQQopAAAAAAEDAwc="}
00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":331,"source":"weibo.pcap","alias":"nDPId-test","flow_id":39,"flow_packet_id":1,"flow_first_seen":1463089073537,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"140.205.174.1","src_port":48356,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00435{"flow_id":39,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":331,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":537924,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"kDVu60UQeJKcD6iOCABFAAA8abpAAEAG1CHAqAFpjM2uAbzkAbvb32OTAAAAAKACchDQkgAAAgQFtAQCCAoAQQopAAAAAAEDAwc="}
00423{"flow_id":25,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":335,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":542677,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iOkDVu60UQCABFAAA0g5JAADgGGG5dvIb2wKgBaQBQi944y47XgmYYDIAQAqTEEAAAAQEICgN2DUcAQQoD"}
00424{"flow_id":26,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":336,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":544415,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iOkDVu60UQCABFAAA0uN1AADgG4yJdvIb2wKgBaQBQi9\/6KbWbZXHdMYAQAqMzvAAAAQEICgN2DUgAQQoD"}
00962{"flow_id":25,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":337,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":545794,"pkt_caplen":467,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":467,"pkt_l4_len":433,"pkt":"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"}
00423{"flow_id":25,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":338,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":545827,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kDVu60UQeJKcD6iOCABFAAA0H8tAAEAGdDXAqAFpXbyG9oveAFCCZhgMOMuQaIAQAO3EDQAAAQEICgBBCisDdg1I"}
01251{"flow_id":25,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":339,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":547137,"pkt_caplen":678,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":678,"pkt_l4_len":644,"pkt":"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"}
00439{"flow_id":25,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":340,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":547151,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"kDVu60UQeJKcD6iOCABFAABAH8xAAEAGdCjAqAFpXbyG9oveAFCCZhgMOMuQaLAQAPft5wAAAQEICgBBCiwDdg1IAQEFCjjLlgQ4y5ho"}
02377{"flow_id":25,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":341,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":549929,"pkt_caplen":1502,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1502,"pkt_l4_len":1468,"pkt":"eJKcD6iOkDVu60UQCABFAAXQg5RAADgGEtBdvIb2wKgBaQBQi944y5BogmYYDIAQAqS\/bQAAAQEICgN2DUgAQQoDiVBORw0KGgoAAAANSUhEUgAAAHgAAAAoCAYAAAA16j4lAAALTUlEQVR42u1bCXCURRYmHIFkJUQCOTjkDqCGK0hWQJYFJdGESwo2olxCANESloLliCyyhFWpWsOh4gor2cItkUuErO7CuhsEBBPOcIVVqYjA5CIJhIQww+Tt6\/CabTr\/\/3f\/M0Gkarrqq5m\/3+v+\/3nf393vve6pU+dnUODP0X6IRYijiDIEEPIQXyFSED3r+Mr9WZC8UQKpVshEPOmz2P1H8BRNgjk+QjT2We7+IbgJTcWMvBJENuIsotKC5BOIMJ\/17m\/i6yH6IFYirhmQzF6CYJ+lfqJyKTQqADEAMR7xHKJrLZIdgUg3IHmnz\/J3l9S6iBGIzxAVCJCwhRFvg8jOiGGIOEQrA297lQHJiT4map9YP8TziBwDUmUs1yR3vgF5exF9JZK3SDq5bDr3sVJ75D6K2KNBLMd5TYIPmzhUbsQ0Qa8ZoljSGeljpnZG7SyE0wa5DNc1CX4R4bIg+VeC7hJJvsHHkHfkNkF8apNYjiIba3AgoQVlsNwCiYcEvQ4SwRd8LHlOblvEaQ\/JZfhS6q8RYiDNBisQaYjViKmIMInwpRKRnQSZQ5L9QuslAngYUQC3yisG8h9J1lLRz\/uk97rmfeshLlObmbaiCIAu1K4KES7JhiFmIbp5Qu7DiAtekMuwjEgdg9hh4m1zXENMEEhsJZE4VJDtl2RtNQzVSiDwjwbyHiQ7rPGS3ESUIoI1SXoC\/l\/a2SR4HrX7Wqqvi8gnWU+75HZCFHpJLkMpEaerfxPRkUgMl0gcLhC8zw7BRO53ZIw1wohiRD1IOovEUYmfTRAuGjmhQl9\/J72FNkhaTm1OCXUtEQM1cITa\/lWqfxGRhzgj1utOyxdqgVxPMYNIjJFIfEQgOFeSBVkYtzPiHBnpLYSfMKL2CHqZVNebrsfQ9UFBJ57q\/otoaIPgHGr3hlC3Hmq\/FKvIDUKcvIfkMswXnK7TROC\/WBxsMrILLQzbD1FEP36JUP8W1c2l63AaqQ72AlDdBtJJputGiO+p7iWa0mV0NniGTgIBfaVRnaYAH735GroMs1Sh0M57TC7DKGGk+iMiEXWFuoESwVtMyJ2IqES4ZYeKTZVkuC50PYmu1wpOEX8xulPd2xoj6COD5\/gtyQrZumlz\/f2M2v6pNjzmWZ4Qkt9tEBSNmAQl0+dB6fxlcCX5TSid8wconjwbCockgqNtHzv93WBhmSKcepAOBDByqxDPGBgmmQxTgRgqydqRLJc5SYQdVPcCXT9F1z9Qm8F0fQmRIYC\/BN\/SdZzBs\/yHdNKk+kDEp4jtFqiktocUek1U5HYh4ypJyIvsB6UzF8H1HbvAXVSsfqdvusF5MgfKVqyFggEjVf2fYjOJ5gbEVLbjZBKSsFDoIiKa6qLI0NsQc2ysae8iWpMzw8qzwn0aCQR3EepbSMZ3kU62UNcBMaKW1t0TOqN3t4rYgn7DoeKTHVB144ZXT3Nj3zdQlDDe6l4sx\/0aoplHu0+3RtseHjOSwc\/TVB2HWIU4polYFjYJj\/+QcJ8JVPcP6f7TVI4QvYQfcu\/Y5HesJfkGE\/kuki9TkRunGrHlG7agedy15+tVVUF52ifgaBVtRTSLmRcg6tkk+DFEAyHUOSI6Szb7ek146kJJlkX1T0v1kULYsp9760JdDymGXWYSHjm4520gY0sIH2m\/VBG838zIhU8\/Dzcv5pny5HQ6ISMjA1JTU2Hx4sWQkpICmzZtgsLCQr3RfPAIONo8ppq2v0A09IActsZ9Tbda7+FswEKncupjnzRLsHKae90GbRsgrnCvW5L1raWhkmfpuFG2ytCwlxOnQ9X1SsNeS0tLITk5GZo2bQrseWXUr18fEhMT4fz588onvP75lzrO13oPyP033WI="}
00424{"flow_id":25,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":342,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":549955,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kDVu60UQeJKcD6iOCABFAAA0H81AAEAGdDPAqAFpXbyG9oveAFCCZhgMOMuYaIAQAQ277AAAAQEICgBBCiwDdg1I"}
01649{"flow_id":25,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":343,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":551775,"pkt_caplen":968,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":968,"pkt_l4_len":934,"pkt":"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"}
00424{"flow_id":25,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":344,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":551805,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kDVu60UQeJKcD6iOCABFAAA0H85AAEAGdDLAqAFpXbyG9oveAFCCZhgMOMub7oAQASO4TwAAAQEICgBBCi0Ddg1I"}
00423{"flow_id":28,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":349,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":565955,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iOkDVu60UQCABFAAA0ijJAADgGEc5dvIb2wKgBaQBQi+Gi04d6CaQcHYAQAqTWEAAAAQEICgN2DUoAQQoD"}
00999{"flow_id":26,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":350,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":567126,"pkt_caplen":493,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":493,"pkt_l4_len":459,"pkt":"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"}
00423{"flow_id":26,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":351,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":567170,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kDVu60UQeJKcD6iOCABFAAA00sJAAEAGwT3AqAFpXbyG9ovfAFBlcd0x+im3RoAQAO0zlwAAAQEICgBBCjEDdg1K"}
02376{"flow_id":26,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":354,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":572859,"pkt_caplen":1502,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1502,"pkt_l4_len":1468,"pkt":"eJKcD6iOkDVu60UQCABFAAXQuN9AADgG3YRdvIb2wKgBaQBQi9\/6KbdGZXHdMYAQAqOuqAAAAQEICgN2DUoAQQoDiVBORw0KGgoAAAANSUhEUgAAAjAAAAISCAYAAADSlfVSAAFtvklEQVR4AeydgY2jPhPFvZ\/SAFcCVwJXAimBLSEpgZQAJYQSNiWEEs4lHCUcJeTLSSPpafR3HMfEJtn3k6zdvQMChnge45nxh3kCl8vl7\/VHcW39tR3MuumurZLft2YdLN5\/cJ32wWPW13aW3w9ybosi1zz7Hi\/5OV3bTwMA7bWNcq1vD\/TdUe5TL23JY1fSp49QXtsfuWd7dRzffrO0W+yuzUp7Fmfp2398GEJIdjZXsdGa2wxqAPFRyYBnXsSAVDIwPcr6+w+vc8XI+X3JdZ+0EVbnPzkM7ZdsN4vAmU0aSmmPMkl7CLnOQloLz13U8yI\/G\/m3vRw3CNi\/CHimOxCiW895HrWwJoS8PxsZKHwG+ofv7dhhZEbz\/rD\/4tHXXjkMUaEMtmYW4VPLtmcxfvPColTTi5HuzOMsYXx7uPZdyPFArFRwDE2nPB2hAuaE98LjeRvkPtSy\/8nlfYF7PzxRaBbYV1lEKiFECRhBBqVZewLkC9fKQPGpBq\/6xmBl5Ri3sAFTBn7yunbz9t\/rT6fhtc8O8Vaqa3d5vAq4lkdETBcuHJKCXjrNDF4Y63luzncY9FGalZ+hVPBM7aRpZvlujMrYD7J95xAwBTwzvRzHQ5zQFM4pRSohxC9gDmoA+QtvTaW0r2v7dW2z\/4ssxuM221f3MrxZ\/2WbZhLDUnje1Ctl4Fz00t872ecrsSDz3xeMKwqn894n8UB5zk8fw0q\/WhQskewiYmx62b\/UXhg4dhHgfQFxHCUax4hpPkLIQmzu\/LJO8CZ1lLel1AyOt7BGBrKcxPcfwXt48k6v+acx9mL4amhjgCfPE8CcFbz2eEP6vGD7Eu7rp7qvEOfiFCCT7FM5RE8b4n0RBmkxQbxbs1oIoYCpYQCxYBB+X1sDb0MfakD5Iz8H2X5JJocBqkx+8vdffjoxVsMDxrCEPhtvTB8VgbEEn+J9ObxTRhL0bwVepl+eacFRDH1Kz0CnhAgicTpeAXJQ91p5X2SqCSGEUMCoQcfKQNPqOWk9BZB3QJHze4xL6FRAxv7LjxghaSX0\/yEiEHqI9L4g80reli9P8t5MIAIat4dS0pHTUqv4FE0DAqSPiHsrZboW+Qj2rCheMy6PEAqYAr7Q1jEn\/Y8S3owKMELfrf7G6voPYgaQEn62ysgPDxz\/uNDUXavO9cv4afxG5O2NCmZdNfLMnW5k3Iypa9LA5w43pn8OZj2M8TEwsG1yCKGAqXFwdGQL6OyXFr6wpS8wMaKYWlyQXvjANJtg8vefHKPz\/x8amKjATCvnX5rUEAvTkvsbWV1D4unE0vk8w7OCmUkw1be98V3tVEzckmzjY2Bg22wQQgFzuvMtpVFv9KW0XAzScgXnvXr\/aUr0kiBgREZIyQ1C9t9BsLMnGJQxDwqrMnmsFppJ+0sK3wU8z2Do8UUiPCaOEEIB0wQMIpJV4\/EO6IyhtyZ\/\/8lnfziEmq+yqf6s2iE6JLgymglSy1206rN7820RoQJAyjMGOqNwmNR9nGWfxQEPyhkC0k\/Kg6Kf8bNZB61HyHu2g20JIckFTKl\/99UpUW9NtWcKpzJpqRNXv3yn\/vvSQgOuyS7cp3PAlJXNsCxA5ciYwqJwaZDnJvDZ0CJZi9hOmg+9v0YHrHfoKfFP82ani9iOEJJZwEww8Mh6Ks7BsQPjewDBsDzhgyyuiWPlDT8F+fsvLmOkdk7JSWG0TOdWqriiKCKrte6kvUExRiLfveJFF30lhALGVf0SVnk9O2pstJgerLNckMQGegaPRiXn05s0vFL\/1bDejOaACwJmrtCL97U14ch1vAUyPbhoyvYoTdM54o7mDNNkPk9YuEcsPCUf+4sQkpnNDSN8FGPx6amxMXuyXHI="}
00423{"flow_id":26,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":355,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":572910,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kDVu60UQeJKcD6iOCABFAAA00sNAAEAGwTzAqAFpXbyG9ovfAFBlcd0x+im84oAQAQMt5AAAAQEICgBBCjIDdg1K"}
02371{"flow_id":26,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":356,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":575424,"pkt_caplen":1502,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1502,"pkt_l4_len":1468,"pkt":"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"}
00424{"flow_id":26,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":357,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":575456,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kDVu60UQeJKcD6iOCABFAAA00sRAAEAGwTvAqAFpXbyG9ovfAFBlcd0x+inCfoAQARooMAAAAQEICgBBCjMDdg1K"}
02366{"flow_id":26,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":358,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":585962,"pkt_caplen":1502,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1502,"pkt_l4_len":1468,"pkt":"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"}
00424{"flow_id":26,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":359,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":586007,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kDVu60UQeJKcD6iOCABFAAA00sVAAEAGwTrAqAFpXbyG9ovfAFBlcd0x+inIGoAQATAifAAAAQEICgBBCjUDdg1K"}
02389{"flow_id":26,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":360,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":591182,"pkt_caplen":1502,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1502,"pkt_l4_len":1468,"pkt":"eJKcD6iOkDVu60UQCABFAAXQuOJAADgG3YFdvIb2wKgBaQBQi9\/6KcgaZXHdMYAQAqNamAAAAQEICgN2DUoAQQoDC05iIk\/SgAkU8T5HMpboSqVSqUwuowl9GUkhp\/IsU3icM7iSp7iV1oS+ILZW04p8\/lLZHM63xNgXnMxblLEtVfiWdzmZt4m9pdzCFmrQiXeozmQKyeMe7uNONhBrmZRTm6b8rubUoJxMYq4RezCLDOryLUUMZCKbKGBfoiyVSqWyuZrRrOJ3TYD\/Vy8upJhS7uZRYqyQFRRRxgjGsi\/tqcS3ZBBrE6DC9yyhh6nEuRzNKkqpRU3u4Hli7gcu5jkyOJdcevEdl1JCzK1mIjfyPMM4nSb0J4\/fsncXsHGc7RbH31kzQ5iTBouBMiZtv1Lg42C5TcrM3CSXyszMzG3KDXMZwwxOGofMvPeM9FgaWa6v62vYtf4\/6WhmYTb2OtI8enFkYOA1AETsXkhNDQguYHe8dWNU2Qykr6xlZpVDczlCmWJ\/h7XWRRa2xwOs9eUFWzoh3wEABQwAAEBj9OkDAABQwAAAAFDAAAAAUMAAAAAKGAAAAAoYAAAAChgAAEABAwAAQAEDAABAAQMAAChgAAAAKGAAAAAoYAAAAAUMAACIGhQwAAAAFDAAAAAUMAAAALEOAIBm4j3hPB1Cdv+JcSIVlrAFAAAgYoSUeCVD6ZKYmNjrsMMO6921a9dse95zkSNGSWjbtm2ajilKspKoJFkS7blUe0+CXQMAAFoRz27ybfbZZ5\/9fvjhh2fLysrywvLMM8\/8xYoEz0WO+IMOOqhNcXHxwmHDhg3Q455Kd6VHID3\/9re\/7aX3LM4UK8JaEQAAEKdk6YZ\/8M6dO5eHTZWccMIJA\/VaWgQVMJ61rnT+7LPPLl++fPmbH3744e2\/\/vrru2vXrp3u57fffnvv448\/vmvlypXvTps27RL\/vXaN55oFPNe0AADwrNul3Zo1a57o2bPn8c5s27btl\/bt2\/9Vp1uVYiUcAT9rrJKun7Pb+++\/f+N+++33b1eHX3755d1Ro0ZNVWGzQQ\/zAuN5EMWzkAAACCkJF198cX8VBce5gFmzZj2tQ2EE3fRDSmJCQkLWvHnzHrDipU7qEvuH3vuQf41\/bXTdWylgAAAIzjCKs2OMJXbMmDGHBVv+f\/zxx5dHjx49TaflgXuSFwGDd1PUZXRa586dj9R5+O23334vNzf3d1eDntvqv+ZE7z38o48+OsW\/1j6jJcRaS1eqkl4jqfZavBJnx+B5ndfZZ4daTQEDAECg2yXBbniZSrYl055L6NChQ3cneXl5G1544YUpgwYNut\/uQylKhr0v3goAr4V+jzgl+cADDxzrpEo+\/\/zzVXniati9e\/eu6dOnr6kSJ4MHDx5j42BiW+jnT7LvvJPSVelm8c872WsplnSLPa77OvvsUCsZAwMAgLW42JTigQMHtrvuuusO69KlS\/eSkpJSDXxdcu211\/6sGUfu9ttvH5iTkxO67777cvbYY4\/4m266aaC6X3rpuvLVq1cvueCCC6bv2LFjpx4XKCUt0K3kKelDhw7tN3PmzMXuT\/LHJA8YMGCIBv2u0cP8FugS65Kfn\/9Vampqf1cLvfZrenr633Qa1vmbTtLS0kbr4OnxtDquW6rr\/qLTHUpxtBcwAAB41mKSqht359dff\/2qvfbaa0xsbGyiCygqKspVITNdLRmL+vTp0+WQQw45qlu3bgNDoVCcC9B05NzZs2c\/cOKJJ75oN8siK2KaUoyluvsq+Y477jj06quv\/tA1wPXXX3\/cbbfd9r397GGlSqm0Y9g1rb4qopa7OnieN0SHsHxvjwf7Bz3+7v+4rp8OOUoBK\/ECAFpDt1GKpkH3fuWVV57Pzs4e4GqRnJzcVl0yY\/y4OiQlJbXVZ01dtmxZv\/79+1+tp0qVyia+8ScqKYE1XGLUEpGkYmqreoZCurF7rh50gw+rIKvScjBJ9nn+0VeqFAZ+l6YU58ykSZM="}
00424{"flow_id":26,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":361,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":591306,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kDVu60UQeJKcD6iOCABFAAA00sZAAEAGwTnAqAFpXbyG9ovfAFBlcd0x+inNtoAQAUccxwAAAQEICgBBCjcDdg1K"}
00438{"flow_id":32,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":374,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":616097,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"eJKcD6iOkDVu60UQCABFAAA8AABAADgGm\/hdvIb2wKgBaQBQi+OyanX1+fp+0aAS\/\/9YyQAAAgQFqAQCCAoDdg1LAEEKDQEDAwc="}
00423{"flow_id":32,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":375,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":616160,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kDVu60UQeJKcD6iOCABFAAA0dN5AAEAGHyLAqAFpXbyG9ovjAFD5+n7Rsmp19oAQAOWGdAAAAQEICgBBCj0Ddg1L"}
00958{"flow_id":32,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":376,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":616324,"pkt_caplen":464,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":464,"pkt_l4_len":430,"pkt":"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"}
00811{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":376,"source":"weibo.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":4,"flow_first_seen":1463089073424,"flow_last_seen":1463089073616,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":398,"flow_tot_l4_payload_len":398,"flow_avg_l4_payload_len":99,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"93.188.134.246","src_port":35811,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Sina(Weibo)","breed":"Fun","category":"SocialNetwork"},"http": {"hostname":"js.t.sinajs.cn","url":"js.t.sinajs.cn\/t5\/register\/js\/v6\/pl\/base.js?version=201605130537","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/50.0.2661.102 Safari\/537.36"}}
00423{"flow_id":34,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":384,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":635672,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iOkDVu60UQCABFAAA0AABAADEGFnUvWUHlwKgBaQG7xos8arg3huU3GIASOQiHzQAAAgQFqAEBBAIBAwMJ"}
00407{"flow_id":34,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":385,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":635736,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"kDVu60UQeJKcD6iOCABFAAAoPQ1AAEAGynPAqAFpL1lB5caLAbuG5TcYPGq4OFAQAOUAuQAA"}
00683{"flow_id":34,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":386,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":635941,"pkt_caplen":254,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":254,"pkt_l4_len":220,"pkt":"kDVu60UQeJKcD6iOCABFAADwPQ5AAEAGyarAqAFpL1lB5caLAbuG5TcYPGq4OFAYAOU\/oAAAFgMBAMMBAAC\/AwOXT1\/apC0sseL9tClTjO1tCqBgMoC4vQJs2bkXrM\/zTQAAHMypzKjMFMwTwCvAL8AKwBTACcATAJwANQAvAAoBAAB6\/wEAAQAAAAARAA8AAAxnLmFsaWNkbi5jb20AFwAAACMAAAANABIAEAYBBgMFAQUDBAEEAwIBAgMABQAFAQAAAAAzdAAAABIAAAAQABcAFQJoMghzcGR5LzMuMQhodHRwLzEuMXVQAAAACwACAQAACgAIAAYAHQAXABg="}
00730{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":386,"source":"weibo.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":4,"flow_first_seen":1463089073479,"flow_last_seen":1463089073635,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":200,"flow_tot_l4_payload_len":200,"flow_avg_l4_payload_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"47.89.65.229","src_port":50827,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"g.alicdn.com","ja3":"58e7f64db6e4fe4941dd9691d421196c","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,spdy\/3.1,http\/1.1"}}
01014{"flow_id":28,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":387,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":636839,"pkt_caplen":507,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":507,"pkt_l4_len":473,"pkt":"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"}
00423{"flow_id":28,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":388,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":636884,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kDVu60UQeJKcD6iOCABFAAA0E7dAAEAGgEnAqAFpXbyG9ovhAFAJpBwdotOJM4AQAO3VvgAAAQEICgBBCkIDdg1b"}
02382{"flow_id":28,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":389,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":639524,"pkt_caplen":1502,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1502,"pkt_l4_len":1468,"pkt":"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"}
00423{"flow_id":28,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":390,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":639574,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kDVu60UQeJKcD6iOCABFAAA0E7hAAEAGgEjAqAFpXbyG9ovhAFAJpBwdotOOz4AQAQPQCwAAAQEICgBBCkMDdg1b"}
02380{"flow_id":28,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":391,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":642076,"pkt_caplen":1502,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1502,"pkt_l4_len":1468,"pkt":"eJKcD6iOkDVu60UQCABFAAXQijVAADgGDC9dvIb2wKgBaQBQi+Gi047PCaQcHYAQAqT1oQAAAQEICgN2DVsAQQoDyygs5YrJZyhXTT5LWTN5hfKsyecozxmZ9f+l7\/fh+xzOnIdvSg++KS\/AN+UH8E35IXxTfgTflAq+KevwTXkRvim1gbdqqiJUMWXp8NuLtWpD1XJmeIF9HsiaEe2L3gikYZTqqZNS6kFLq+xJ\/NdFj8fWpyV1a9LYEHd102bx8emM39y6ZNQNO1efGEeKI3vo6olpQqf2m8O\/nbu6lV9yVxHVhlFtRDANAG0waAXim+bZdiDmLbv4+IdgBKifU2uopurZqSs0HmRZT\/cwPPGBxxHHQBvXXV2BlyamrIbmw89SZKbjD7OmVqqdwdblk23VHNmQEm+Ljq8k5TRt78WvCqqovFeF9eL5JAzR03O4JrRl624qpQiNmnKOR3dVIUqPtBSjwRE6vxANPOCUswvaAI5xJ+ouqq1hp8vPNxdZWzAxMqXtnQAlZenKGIsyz+Ico2tY63jjlvB0PTmxiE+xyXwUVsrr43x0G2lescsyh0ZVqqt7tM9iX7XpF9lBo+o4+3FTtXFXj9pqXJHyqfI1oD2ws+p2DvWo4uMOGldVs42ujT1Gk7Km\/MeALCaVv260ajL9Lm6pdtLM19wVNPeN6XL\/9PLWm+y3cm4aafpvNdoyctnP4JjfFgH+nYNiN2UN1FvThpgUkL2A4VJNdO7I3G0MIq6z\/9E5vf\/WLAySs9rWmM1TH66ejCO5w5QnWbaZZV2P0xxHO03sUyS2OpoY3NQYjuWmbGBA7v7D+j3cA+7KsvjA20YCiPusTQfVU13c3ZNqhIZ9JfcBI3PsOLcBdgBcgo45du1KF8Cu9Mi5A\/AZOQQPyCF4SA7BLjk3AT4nh+ALcgi+JIfgK3JuAfTJIdgjh+AROQSPyWkD7JND8IQcgq\/JIfiGnBZATA5BQg7BU3IInhnZnJb5WypyHeg7i24AfW+7BsoWlB+MXJmyUyqWPbCI7AOLSD00cnVKPaJiqUOLSH1uEak\/Grk2pf5ExVJ\/tojUXywi9YXxpTKU4lr\/Je\/o4E\/nyqyTAAAAAQAB\/\/8AD3ic1L17YBvVlTB+z73z1EgzGo1GI1u2bEmWZFuOX7KkJI5tOQ87iXGCE2zHAZJAjOMESMqrBQoltPQBtOyWAi2UdumWkJAUSpvyKs9S6Hb5yH5t92N32+12v3Z32+7S7bfd7n5tFyx\/544kx3nRwPb3xy+RR6O555yZuXPved1zzhBK4oRANz1MGJFJSzFFCGGUsElCAegIoRQ2CrgHqwiRJVFAMGaKRiZrxsx01kzEwf\/L116jh+cm4nQGcUUyM79fyLJa3AdCST9ZST71OAXCPH0jj4XO3VJMSwKluoyHKEyZhuIXiE+jqoeoUyIw5hnzgsfjeFZGikvwN\/Ww0bNAYJ41U8XWgQGBDawcWDlY7F2Wz3V3tS9pbU4m4o31kbATtPyG1yOLrF\/oD+gZMZtgiVy2O9+TykCuJxWX6iFR\/Y5LwVAv2NXvYKg73wfZ6jfHieWytkCy2fvuvdeORu17o5nosWhr9N5QNBq6t7zFn8fwMG8vRY\/th\/veBsBeROYYEUh+\/ofsVbaRaCRNVpGN5H+OPBbBrmvB+wZPgPcA9saUpUumQA2RMoGyrV6Q5eigCoLgCCsjI49lOAL+ZMLu34smY2\/34B7Is2fGYIyOlvco28TRKRuamip2D61uafZ5KTln3eqNQxuL\/b3LC7nuziVtzataVjUlGqORmpAd8HvTvrQiEo1qQT2DXZzqh17oDunA+CYDsg7x1EC1werHNlmDBOOHC1blcIEfNvARIEp5mwHewh66zGfSkM\/dpt3dJ\/1QUxcC\/098AWb7\/qELf9nQ9f7qzlOnAs39xyIitC0cCeOn9D2nznnKZ1m+p3CHdvqCQd\/cd6B97jv8GO1EkCf5sSersPjBoY\/PkMzfjLNlP06YGEk="}
00424{"flow_id":28,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":392,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":642097,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kDVu60UQeJKcD6iOCABFAAA0E7lAAEAGgEfAqAFpXbyG9ovhAFAJpBwdotOUa4AQARrKVwAAAQEICgBBCkQDdg1b"}
02377{"flow_id":28,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":393,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":646286,"pkt_caplen":1502,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1502,"pkt_l4_len":1468,"pkt":"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"}
00424{"flow_id":28,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":394,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":646354,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kDVu60UQeJKcD6iOCABFAAA0E7pAAEAGgEbAqAFpXbyG9ovhAFAJpBwdotOaB4AQATDEpAAAAQEICgBBCkUDdg1b"}
02377{"flow_id":28,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":395,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":678126,"pkt_caplen":1502,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1502,"pkt_l4_len":1468,"pkt":"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"}
00424{"flow_id":28,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":396,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":678158,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kDVu60UQeJKcD6iOCABFAAA0E7tAAEAGgEXAqAFpXbyG9ovhAFAJpBwdotOfo4AQAUe+6QAAAQEICgBBCk0Ddg1b"}
00424{"flow_id":38,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":422,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":759907,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iOkDVu60UQCABFAAA0AABAADEGFnUvWUHlwKgBaQG7xo+u1rhnnywRAoASOQgi\/AAAAgQFqAEBBAIBAwMJ"}
00407{"flow_id":38,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":423,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":759940,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"kDVu60UQeJKcD6iOCABFAAAoGylAAEAG7FfAqAFpL1lB5caPAbufLBECrta4aFAQAOWb5wAA"}
00550{"flow_id":21,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":424,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":760507,"pkt_caplen":157,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":157,"pkt_l4_len":123,"pkt":"eJKcD6iOkDVu60UQCABFAACPAABAAEARtqPAqAEBwKgBaQA1xdAAe7w5O9aBgAABAAMAAAAABmFjanN0YgZhbGl5dW4DY29tAAABAAHADAAFAAEAAAJYAAcEYWNqc8ATwC8ABQABAAABAAAhBGFjanMGYWxpeXVuA2NvbQNnZHMKYWxpYmFiYWRuc8AawEIAAQABAAAAbAAEKpy4Ew=="}
00724{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":424,"source":"weibo.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":2,"flow_first_seen":1463089073287,"flow_last_seen":1463089073760,"flow_min_l4_payload_len":35,"flow_max_l4_payload_len":115,"flow_tot_l4_payload_len":150,"flow_avg_l4_payload_len":75,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":50640,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"acjstb.aliyun.com","num_queries":1,"num_answers":3,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"42.156.184.19"}}
00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":425,"source":"weibo.pcap","alias":"nDPId-test","flow_id":40,"flow_packet_id":1,"flow_first_seen":1463089073760,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"42.156.184.19","src_port":52271,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00435{"flow_id":40,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":425,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":760679,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"kDVu60UQeJKcD6iOCABFAAA8np1AAEAG913AqAFpKpy4E8wvAbt9EpT8AAAAAKACchBGkwAAAgQFtAQCCAoAQQphAAAAAAEDAwc="}
00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":426,"source":"weibo.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":1,"flow_first_seen":1463089073760,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"42.156.184.19","src_port":52272,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00435{"flow_id":41,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":426,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":760724,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"kDVu60UQeJKcD6iOCABFAAA8jjVAAEAGB8bAqAFpKpy4E8wwAbsmFYRUAAAAAKACchCuNwAAAgQFtAQCCAoAQQphAAAAAAEDAwc="}
00562{"flow_id":24,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":429,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":763925,"pkt_caplen":166,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":166,"pkt_l4_len":132,"pkt":"eJKcD6iOkDVu60UQCABFAACYAABAAEARtprAqAEBwKgBaQA1hB4AhOXUkPeBgAABAAMAAAAABWxvZ2luBnRhb2JhbwNjb20AAAEAAcAMAAUAAQAAASwADAl3YWdicmlkZ2XAEsAuAAUAAQAAAMgAJgl3YWdicmlkZ2UGdGFvYmFvA2NvbQNnZHMKYWxpYmFiYWRuc8AZwEYAAQABAAAALwAEjM2qPw=="}
00675{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":429,"source":"weibo.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":2,"flow_first_seen":1463089073289,"flow_last_seen":1463089073763,"flow_min_l4_payload_len":34,"flow_max_l4_payload_len":124,"flow_tot_l4_payload_len":158,"flow_avg_l4_payload_len":79,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":33822,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"login.taobao.com","num_queries":1,"num_answers":3,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"140.205.170.63"}}
00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":430,"source":"weibo.pcap","alias":"nDPId-test","flow_id":42,"flow_packet_id":1,"flow_first_seen":1463089073764,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"140.205.170.63","src_port":47721,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00436{"flow_id":42,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":430,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":764453,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"kDVu60UQeJKcD6iOCABFAAA8woBAAEAGfx3AqAFpjM2qP7ppAbuaKMjiAAAAAKACchCy\/gAAAgQFtAQCCAoAQQpiAAAAAAEDAwc="}
00423{"flow_id":30,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":435,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":773608,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iOkDVu60UQCABFAAA0AABAADEGjQneSRxgwKgBaQBQpSMt08jatYdf34ASOQjHwAAAAgQFqAEBBAIBAwMI"}
00408{"flow_id":30,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":436,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":773636,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"kDVu60UQeJKcD6iOCABFAAAoVdlAAEAGKDzAqAFp3kkcYKUjAFC1h1\/fLdPI21AQAOVAqwAA"}
00984{"flow_id":30,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":437,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":773797,"pkt_caplen":482,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":482,"pkt_l4_len":448,"pkt":"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"}
00820{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":437,"source":"weibo.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":4,"flow_first_seen":1463089073394,"flow_last_seen":1463089073773,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":428,"flow_tot_l4_payload_len":428,"flow_avg_l4_payload_len":107,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"222.73.28.96","src_port":42275,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Sina(Weibo)","breed":"Fun","category":"SocialNetwork"},"http": {"hostname":"u1.img.mobile.sina.cn","url":"u1.img.mobile.sina.cn\/public\/files\/image\/620x300_img5653d57c6dab2.png","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/50.0.2661.102 Safari\/537.36"}}
00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":440,"source":"weibo.pcap","alias":"nDPId-test","flow_id":43,"flow_packet_id":1,"flow_first_seen":1463089073788,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"42.156.184.19","src_port":52274,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00435{"flow_id":43,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":440,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":788865,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"kDVu60UQeJKcD6iOCABFAAA8M4FAAEAGYnrAqAFpKpy4E8wyAbubxznpAAAAAKACchCC5wAAAgQFtAQCCAoAQQpoAAAAAAEDAwc="}
00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":441,"source":"weibo.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":1,"flow_first_seen":1463089073789,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"140.205.170.63","src_port":47723,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00435{"flow_id":44,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":441,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":789999,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"kDVu60UQeJKcD6iOCABFAAA8F+ZAAEAGKbjAqAFpjM2qP7prAbvY7h2OAAAAAKACchAfhQAAAgQFtAQCCAoAQQpoAAAAAAEDAwc="}
00423{"flow_id":32,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":492,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":885851,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iOkDVu60UQCABFAAA0e6lAADgGIFddvIb2wKgBaQBQi+OyanX2+fqAX4AQAqSCEQAAAQEICgN2DmEAQQo9"}
00499{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"weibo.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":4,"flow_first_seen":1463089073394,"flow_last_seen":1463089073773,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":428,"flow_tot_l4_payload_len":428,"flow_avg_l4_payload_len":107,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"222.73.28.96","src_port":42275,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00518{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":498,"source":"weibo.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":1,"flow_first_seen":1463089073537,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"222.73.28.96","src_port":42280,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}}
00481{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"weibo.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":1,"flow_first_seen":1463089073537,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"222.73.28.96","src_port":42280,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00498{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"weibo.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":2,"flow_first_seen":1463089073286,"flow_last_seen":1463089073393,"flow_min_l4_payload_len":39,"flow_max_l4_payload_len":117,"flow_tot_l4_payload_len":156,"flow_avg_l4_payload_len":78,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":18035,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00495{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"weibo.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":2,"flow_first_seen":1463089070757,"flow_last_seen":1463089070841,"flow_min_l4_payload_len":27,"flow_max_l4_payload_len":43,"flow_tot_l4_payload_len":70,"flow_avg_l4_payload_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":54988,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":498,"source":"weibo.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":2,"flow_first_seen":1463089071730,"flow_last_seen":1463089071755,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"216.58.212.69","src_port":37802,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Tracker\/Ads","category":"Web"}}
00495{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"weibo.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":2,"flow_first_seen":1463089071730,"flow_last_seen":1463089071755,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"216.58.212.69","src_port":37802,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00506{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"weibo.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":106,"flow_first_seen":1463089072445,"flow_last_seen":1463089073885,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":4308,"flow_tot_l4_payload_len":69723,"flow_avg_l4_payload_len":657,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"93.188.134.246","src_port":35803,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00505{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"weibo.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":72,"flow_first_seen":1463089072445,"flow_last_seen":1463089073773,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":2872,"flow_tot_l4_payload_len":49381,"flow_avg_l4_payload_len":685,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"93.188.134.246","src_port":35804,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00505{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"weibo.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":41,"flow_first_seen":1463089072445,"flow_last_seen":1463089073819,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1436,"flow_tot_l4_payload_len":20463,"flow_avg_l4_payload_len":499,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"93.188.134.246","src_port":35805,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00504{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"weibo.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":13,"flow_first_seen":1463089073319,"flow_last_seen":1463089073551,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1436,"flow_tot_l4_payload_len":3815,"flow_avg_l4_payload_len":293,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"93.188.134.246","src_port":35806,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00505{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"weibo.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":53,"flow_first_seen":1463089073321,"flow_last_seen":1463089073852,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1436,"flow_tot_l4_payload_len":32930,"flow_avg_l4_payload_len":621,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"93.188.134.246","src_port":35807,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00532{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":498,"source":"weibo.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":3,"flow_first_seen":1463089073322,"flow_last_seen":1463089073383,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"93.188.134.246","src_port":35808,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}}
00495{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"weibo.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":3,"flow_first_seen":1463089073322,"flow_last_seen":1463089073383,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"93.188.134.246","src_port":35808,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00505{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"weibo.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":35,"flow_first_seen":1463089073334,"flow_last_seen":1463089073893,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1436,"flow_tot_l4_payload_len":20023,"flow_avg_l4_payload_len":572,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"93.188.134.246","src_port":35809,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00500{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"weibo.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":5,"flow_first_seen":1463089073424,"flow_last_seen":1463089073885,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":398,"flow_tot_l4_payload_len":398,"flow_avg_l4_payload_len":79,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"93.188.134.246","src_port":35811,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00528{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":498,"source":"weibo.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":2,"flow_first_seen":1463089071994,"flow_last_seen":1463089072138,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"54.225.163.210","src_port":40440,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"}}
00496{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"weibo.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":2,"flow_first_seen":1463089071994,"flow_last_seen":1463089072138,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"54.225.163.210","src_port":40440,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00528{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":498,"source":"weibo.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":2,"flow_first_seen":1463089069330,"flow_last_seen":1463089069374,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"216.58.214.78","src_port":58480,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Tracker\/Ads","category":"Web"}}
00494{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"weibo.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":2,"flow_first_seen":1463089069330,"flow_last_seen":1463089069374,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"216.58.214.78","src_port":58480,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00528{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":498,"source":"weibo.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":2,"flow_first_seen":1463089070086,"flow_last_seen":1463089070131,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"216.58.214.78","src_port":58481,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Tracker\/Ads","category":"Web"}}
00494{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"weibo.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":2,"flow_first_seen":1463089070086,"flow_last_seen":1463089070131,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"216.58.214.78","src_port":58481,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00499{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"weibo.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":4,"flow_first_seen":1463089073479,"flow_last_seen":1463089073635,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":200,"flow_tot_l4_payload_len":200,"flow_avg_l4_payload_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"47.89.65.229","src_port":50827,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00513{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":498,"source":"weibo.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":3,"flow_first_seen":1463089073537,"flow_last_seen":1463089073759,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"47.89.65.229","src_port":50831,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"}}
00494{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"weibo.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":3,"flow_first_seen":1463089073537,"flow_last_seen":1463089073759,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"47.89.65.229","src_port":50831,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00503{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":498,"source":"weibo.pcap","alias":"nDPId-test","flow_id":42,"flow_packet_id":1,"flow_first_seen":1463089073764,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"140.205.170.63","src_port":47721,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"}}
00484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"weibo.pcap","alias":"nDPId-test","flow_id":42,"flow_packet_id":1,"flow_first_seen":1463089073764,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"140.205.170.63","src_port":47721,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00503{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":498,"source":"weibo.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":1,"flow_first_seen":1463089073789,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"140.205.170.63","src_port":47723,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"}}
00484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"weibo.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":1,"flow_first_seen":1463089073789,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"140.205.170.63","src_port":47723,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00497{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"weibo.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":2,"flow_first_seen":1463089073287,"flow_last_seen":1463089073488,"flow_min_l4_payload_len":32,"flow_max_l4_payload_len":70,"flow_tot_l4_payload_len":102,"flow_avg_l4_payload_len":51,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":53466,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00498{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"weibo.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":2,"flow_first_seen":1463089073287,"flow_last_seen":1463089073478,"flow_min_l4_payload_len":30,"flow_max_l4_payload_len":129,"flow_tot_l4_payload_len":159,"flow_avg_l4_payload_len":79,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":51440,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00502{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":498,"source":"weibo.pcap","alias":"nDPId-test","flow_id":40,"flow_packet_id":1,"flow_first_seen":1463089073760,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"42.156.184.19","src_port":52271,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"}}
00483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"weibo.pcap","alias":"nDPId-test","flow_id":40,"flow_packet_id":1,"flow_first_seen":1463089073760,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"42.156.184.19","src_port":52271,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00502{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":498,"source":"weibo.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":1,"flow_first_seen":1463089073760,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"42.156.184.19","src_port":52272,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"}}
00483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"weibo.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":1,"flow_first_seen":1463089073760,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"42.156.184.19","src_port":52272,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00502{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":498,"source":"weibo.pcap","alias":"nDPId-test","flow_id":43,"flow_packet_id":1,"flow_first_seen":1463089073788,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"42.156.184.19","src_port":52274,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"}}
00483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"weibo.pcap","alias":"nDPId-test","flow_id":43,"flow_packet_id":1,"flow_first_seen":1463089073788,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"42.156.184.19","src_port":52274,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00498{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"weibo.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":2,"flow_first_seen":1463089072333,"flow_last_seen":1463089072444,"flow_min_l4_payload_len":33,"flow_max_l4_payload_len":149,"flow_tot_l4_payload_len":182,"flow_avg_l4_payload_len":91,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":53543,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00498{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"weibo.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":2,"flow_first_seen":1463089072885,"flow_last_seen":1463089073423,"flow_min_l4_payload_len":32,"flow_max_l4_payload_len":148,"flow_tot_l4_payload_len":180,"flow_avg_l4_payload_len":90,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":41352,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"weibo.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":1,"flow_first_seen":1463089073424,"flow_last_seen":0,"flow_min_l4_payload_len":28,"flow_max_l4_payload_len":28,"flow_tot_l4_payload_len":28,"flow_avg_l4_payload_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":16804,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":498,"source":"weibo.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":2,"flow_first_seen":1463089072046,"flow_last_seen":1463089072070,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"216.58.212.65","src_port":34699,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Tracker\/Ads","category":"Web"}}
00495{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"weibo.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":2,"flow_first_seen":1463089072046,"flow_last_seen":1463089072070,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"216.58.212.65","src_port":34699,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00502{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":498,"source":"weibo.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":1,"flow_first_seen":1463089073488,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"140.205.174.1","src_port":48352,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"}}
00483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"weibo.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":1,"flow_first_seen":1463089073488,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"140.205.174.1","src_port":48352,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00502{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":498,"source":"weibo.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":1,"flow_first_seen":1463089073488,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"140.205.174.1","src_port":48353,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"}}
00483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"weibo.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":1,"flow_first_seen":1463089073488,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"140.205.174.1","src_port":48353,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00502{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":498,"source":"weibo.pcap","alias":"nDPId-test","flow_id":39,"flow_packet_id":1,"flow_first_seen":1463089073537,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"140.205.174.1","src_port":48356,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"}}
00483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"weibo.pcap","alias":"nDPId-test","flow_id":39,"flow_packet_id":1,"flow_first_seen":1463089073537,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"140.205.174.1","src_port":48356,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00497{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"weibo.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":2,"flow_first_seen":1463089071551,"flow_last_seen":1463089071612,"flow_min_l4_payload_len":31,"flow_max_l4_payload_len":100,"flow_tot_l4_payload_len":131,"flow_avg_l4_payload_len":65,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":7148,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00498{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"weibo.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":2,"flow_first_seen":1463089073289,"flow_last_seen":1463089073763,"flow_min_l4_payload_len":34,"flow_max_l4_payload_len":124,"flow_tot_l4_payload_len":158,"flow_avg_l4_payload_len":79,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":33822,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00532{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":498,"source":"weibo.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":9,"flow_first_seen":1463089067804,"flow_last_seen":1463089068491,"flow_min_l4_payload_len":35,"flow_max_l4_payload_len":618,"flow_tot_l4_payload_len":1566,"flow_avg_l4_payload_len":174,"midstream":0,"l3_proto":"ip4","src_ip":"216.58.210.14","dst_ip":"192.168.1.105","src_port":443,"dst_port":49361,"l4_proto":"udp","ndpi": {"proto":"Google","breed":"Tracker\/Ads","category":"Web"}}
00502{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"weibo.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":9,"flow_first_seen":1463089067804,"flow_last_seen":1463089068491,"flow_min_l4_payload_len":35,"flow_max_l4_payload_len":618,"flow_tot_l4_payload_len":1566,"flow_avg_l4_payload_len":174,"midstream":0,"l3_proto":"ip4","src_ip":"216.58.210.14","dst_ip":"192.168.1.105","src_port":443,"dst_port":49361,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00500{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":498,"source":"weibo.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":9,"flow_first_seen":1463089070841,"flow_last_seen":1463089071891,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":635,"flow_tot_l4_payload_len":1081,"flow_avg_l4_payload_len":120,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"114.134.80.162","src_port":59119,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00531{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":498,"source":"weibo.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":3,"flow_first_seen":1463089070841,"flow_last_seen":1463089071198,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"114.134.80.162","src_port":59120,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}}
00494{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"weibo.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":3,"flow_first_seen":1463089070841,"flow_last_seen":1463089071198,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"114.134.80.162","src_port":59120,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00531{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":498,"source":"weibo.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":3,"flow_first_seen":1463089071008,"flow_last_seen":1463089071348,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"114.134.80.162","src_port":59121,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}}
00494{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"weibo.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":3,"flow_first_seen":1463089071008,"flow_last_seen":1463089071348,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"114.134.80.162","src_port":59121,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":498,"source":"weibo.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":2,"flow_first_seen":1463089071046,"flow_last_seen":1463089071094,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"216.58.210.206","src_port":35154,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Tracker\/Ads","category":"Web"}}
00495{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"weibo.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":2,"flow_first_seen":1463089071046,"flow_last_seen":1463089071094,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"216.58.210.206","src_port":35154,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00534{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":498,"source":"weibo.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":14,"flow_first_seen":1463089070755,"flow_last_seen":1463089072356,"flow_min_l4_payload_len":25,"flow_max_l4_payload_len":391,"flow_tot_l4_payload_len":1586,"flow_avg_l4_payload_len":113,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"216.58.210.227","src_port":53656,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"Google","breed":"Tracker\/Ads","category":"Web"}}
00504{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"weibo.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":14,"flow_first_seen":1463089070755,"flow_last_seen":1463089072356,"flow_min_l4_payload_len":25,"flow_max_l4_payload_len":391,"flow_tot_l4_payload_len":1586,"flow_avg_l4_payload_len":113,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"216.58.210.227","src_port":53656,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"weibo.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":1,"flow_first_seen":1463089073479,"flow_last_seen":0,"flow_min_l4_payload_len":32,"flow_max_l4_payload_len":32,"flow_tot_l4_payload_len":32,"flow_avg_l4_payload_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":50533,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00505{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"weibo.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":79,"flow_first_seen":1463089071613,"flow_last_seen":1463089072438,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":2872,"flow_tot_l4_payload_len":31898,"flow_avg_l4_payload_len":403,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"93.188.134.137","src_port":51698,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
00498{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"weibo.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":2,"flow_first_seen":1463089073287,"flow_last_seen":1463089073760,"flow_min_l4_payload_len":35,"flow_max_l4_payload_len":115,"flow_tot_l4_payload_len":150,"flow_avg_l4_payload_len":75,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":50640,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"weibo.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":1,"flow_first_seen":1463089073394,"flow_last_seen":0,"flow_min_l4_payload_len":35,"flow_max_l4_payload_len":35,"flow_tot_l4_payload_len":35,"flow_avg_l4_payload_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":11798,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15}
00126{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":498,"source":"weibo.pcap","alias":"nDPId-test"}