1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
|
00459{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"whatsapp.pcap","alias":"nDPId-test","max-flows-per-thread":2048,"max-idle-flows-per-thread":64,"tick-resolution":1000,"reader-thread-count":1,"flow-scan-interval":10000,"generic-max-idle-time":600000,"icmp-max-idle-time":120000,"udp-max-idle-time":180000,"tcp-max-idle-time":7560000,"max-packets-per-flow-to-send":3,"max-packets-per-flow-to-process":32,"global_ts_msec":0}
00545{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":1,"source":"whatsapp.pcap","alias":"nDPId-test","packets-captured":1,"packets-processed":0,"total-skipped-flows":0,"total-l4-data-len":0,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":0,"total-detection-updates":0,"total-updates":0,"current-active-flows":0,"total-active-flows":0,"total-idle-flows":0,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":2,"global_ts_msec":1655030801747}
00578{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":1,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655030801747,"flow_last_seen":1655030801747,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655030801747,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":44804,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00480{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_last_seen":1655030801747,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655030801747,"pkt":"eJS0JASgYDjgxTWgCABFAAA8ABpAAD8GAijAqAJkszzDMa8EFGbkDT9OAAAAAKAC\/\/\/IawAAAgQFtAQCCArFapnmAAAAAAEDAwk="}
00466{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":2,"flow_last_seen":1655030801776,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655030801776,"pkt":"eJS0JASgYDjgxTWgCABFAAA0ABtAAD8GAi\/AqAJkszzDMa8EFGbkDT9PTyfQe4AQAKy6dAAAAQEICsVqmgM2ROYE"}
00473{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":3,"flow_last_seen":1655030801861,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655030801861,"pkt":"eJS0JASgYDjgxTWgCABFAAA4ABxAAD8GAirAqAJkszzDMa8EFGbkDT9PTyfQe4AYAKx0zgAAAQEICsVqmlg2ROYERUQAAQ=="}
00643{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":1,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655030801747,"flow_last_seen":1655030801890,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":284,"flow_tot_l4_payload_len":288,"flow_avg_l4_payload_len":72,"midstream":0,"thread_ts_msec":1655030801890,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":44804,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00550{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":10,"source":"whatsapp.pcap","alias":"nDPId-test","packets-captured":10,"packets-processed":9,"total-skipped-flows":0,"total-l4-data-len":1537,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":1,"total-detection-updates":0,"total-updates":0,"current-active-flows":1,"total-active-flows":1,"total-idle-flows":0,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":8,"global_ts_msec":1655031983762}
00579{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":10,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":2,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655031983762,"flow_last_seen":1655031983762,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655031983762,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":40084,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00480{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_last_seen":1655031983762,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655031983762,"pkt":"eJS0JASgYDjgxTWgCABFAAA8wNRAAD8GQW3AqAJkszzDMZyUFGb3fC5VAAAAAKAC\/\/8sUAAAAgQFtAQCCAo3N9QvAAAAAAEDAwk="}
00467{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":2,"flow_last_seen":1655031983792,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655031983792,"pkt":"eJS0JASgYDjgxTWgCABFAAA0wNVAAD8GQXTAqAJkszzDMZyUFGb3fC5W\/Bdho4AQAIAA5AAAAQEICjc31GXWXSVb"}
00476{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":3,"flow_last_seen":1655031983812,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655031983812,"pkt":"eJS0JASgYDjgxTWgCABFAAA4wNZAAD8GQW\/AqAJkszzDMZyUFGb3fC5W\/Bdho4AYAIC7fwAAAQEICjc31HjWXSVbRUQAAQ=="}
00644{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":13,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":2,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655031983762,"flow_last_seen":1655031983846,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":290,"flow_tot_l4_payload_len":294,"flow_avg_l4_payload_len":73,"midstream":0,"thread_ts_msec":1655031983846,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":40084,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00579{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":18,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":3,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655032256845,"flow_last_seen":1655032256845,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655032256845,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":42272,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00482{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_last_seen":1655032256845,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655032256845,"pkt":"eJS0JASgYDjgxTWgCABFAAA8\/WJAAD8GBN\/AqAJkszzDMaUgFGax9BloAAAAAKAC\/\/9G8wAAAgQFtAQCCApGZfxIAAAAAAEDAwg="}
00468{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":2,"flow_last_seen":1655032256875,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655032256875,"pkt":"eJS0JASgYDjgxTWgCABFAAA0\/WNAAD8GBObAqAJkszzDMaUgFGax9BlpNUwtP4AQAVdnOAAAAQEICkZl\/HKo3wGM"}
00476{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":3,"flow_last_seen":1655032257086,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655032257086,"pkt":"eJS0JASgYDjgxTWgCABFAAA4\/WRAAD8GBOHAqAJkszzDMaUgFGax9BlpNUwtP4AYAVchFQAAAQEICkZl\/USo3wGMRUQAAQ=="}
00641{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":21,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":3,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655032256845,"flow_last_seen":1655032257115,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":11,"flow_tot_l4_payload_len":15,"flow_avg_l4_payload_len":3,"midstream":0,"thread_ts_msec":1655032257115,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":42272,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00552{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":26,"source":"whatsapp.pcap","alias":"nDPId-test","packets-captured":26,"packets-processed":25,"total-skipped-flows":0,"total-l4-data-len":2151,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":3,"total-detection-updates":0,"total-updates":0,"current-active-flows":3,"total-active-flows":3,"total-idle-flows":0,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":19,"global_ts_msec":1655032857220}
00579{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":26,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":4,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655032857220,"flow_last_seen":1655032857220,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655032857220,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":42436,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00480{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_last_seen":1655032857220,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655032857220,"pkt":"eJS0JASgYDjgxTWgCABFAAA8wH9AAD8GQcLAqAJkszzDMaXEFGbLQu4oAAAAAKAC\/\/8vAgAAAgQFtAQCCApGbyV9AAAAAAEDAwg="}
00467{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":2,"flow_last_seen":1655032857250,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655032857250,"pkt":"eJS0JASgYDjgxTWgCABFAAA0wIBAAD8GQcnAqAJkszzDMaXEFGbLQu4pkG\/w9oAQAVfp3wAAAQEICkZvJafXThmp"}
00475{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":3,"flow_last_seen":1655032857827,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655032857827,"pkt":"eJS0JASgYDjgxTWgCABFAAA4wIFAAD8GQcTAqAJkszzDMaXEFGbLQu4pkG\/w9oAYAVeiWAAAAQEICkZvJ93XThmpRUQAAQ=="}
00644{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":29,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":4,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655032857220,"flow_last_seen":1655032857857,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":273,"flow_tot_l4_payload_len":277,"flow_avg_l4_payload_len":69,"midstream":0,"thread_ts_msec":1655032857857,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":42436,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00552{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":34,"source":"whatsapp.pcap","alias":"nDPId-test","packets-captured":34,"packets-processed":33,"total-skipped-flows":0,"total-l4-data-len":2468,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":4,"total-detection-updates":0,"total-updates":0,"current-active-flows":4,"total-active-flows":4,"total-idle-flows":0,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":25,"global_ts_msec":1655033482376}
00579{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":34,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":5,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655033482376,"flow_last_seen":1655033482376,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655033482376,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":40178,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00480{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_last_seen":1655033482376,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655033482376,"pkt":"eJS0JASgYDjgxTWgCABFAAA8gelAAD8GgFjAqAJkszzDMZzyFGaeLx0YAAAAAKAC\/\/83kgAAAgQFtAQCCAo3PDMVAAAAAAEDAwk="}
00468{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":2,"flow_last_seen":1655033482414,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655033482414,"pkt":"eJS0JASgYDjgxTWgCABFAAA0gepAAD8GgF\/AqAJkszzDMZzyFGaeLx0Zpn\/BEoAQAIBtAgAAAQEICjc8MzXDJ83z"}
00475{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":3,"flow_last_seen":1655033482468,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655033482468,"pkt":"eJS0JASgYDjgxTWgCABFAAA4getAAD8GgFrAqAJkszzDMZzyFGaeLx0Zpn\/BEoAYAIAneAAAAQEICjc8M27DJ83zRUQAAQ=="}
00641{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":37,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":5,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655033482376,"flow_last_seen":1655033482498,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":11,"flow_tot_l4_payload_len":15,"flow_avg_l4_payload_len":3,"midstream":0,"thread_ts_msec":1655033482498,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":40178,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00579{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":42,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":6,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655033797377,"flow_last_seen":1655033797377,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655033797377,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":42646,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00481{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_last_seen":1655033797377,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655033797377,"pkt":"eJS0JASgYDjgxTWgCABFAAA8nO5AAD8GZVPAqAJkszzDMaaWFGa281iWAAAAAKAC\/\/9\/gAAAAgQFtAQCCApGfX4AAAAAAAEDAwg="}
00466{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":2,"flow_last_seen":1655033797408,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655033797408,"pkt":"eJS0JASgYDjgxTWgCABFAAA0nO9AAD8GZVrAqAJkszzDMaaWFGa281iXgu6c24AQAVcrDQAAAQEICkZ9fiWj+b3w"}
00474{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":3,"flow_last_seen":1655033797436,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655033797436,"pkt":"eJS0JASgYDjgxTWgCABFAAA4nPBAAD8GZVXAqAJkszzDMaaWFGa281iXgu6c24AYAVfloAAAAQEICkZ9fkCj+b3wRUQAAQ=="}
00644{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":45,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":6,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655033797377,"flow_last_seen":1655033797468,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":273,"flow_tot_l4_payload_len":277,"flow_avg_l4_payload_len":69,"midstream":0,"thread_ts_msec":1655033797468,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":42646,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00579{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":50,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":7,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655033850395,"flow_last_seen":1655033850395,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655033850395,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":40204,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00482{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_last_seen":1655033850395,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655033850395,"pkt":"eJS0JASgYDjgxTWgCABFAAA88ONAAD8GEV7AqAJkszzDMZ0MFGa\/1NfCAAAAAKAC\/\/\/I8wAAAgQFtAQCCAo3PcVIAAAAAAEDAwk="}
00468{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":2,"flow_last_seen":1655033850502,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655033850502,"pkt":"eJS0JASgYDjgxTWgCABFAAA08ORAAD8GEWXAqAJkszzDMZ0MFGa\/1NfDoiLOPYAQAIA8iQAAAQEICjc9xe1pw9\/f"}
00476{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":3,"flow_last_seen":1655033850502,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655033850502,"pkt":"eJS0JASgYDjgxTWgCABFAAA48OVAAD8GEWDAqAJkszzDMZ0MFGa\/1NfDoiLOPYAYAID3LAAAAQEICjc9xfhpw9\/fRUQAAQ=="}
00644{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":53,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":7,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655033850395,"flow_last_seen":1655033850680,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":290,"flow_tot_l4_payload_len":294,"flow_avg_l4_payload_len":73,"midstream":0,"thread_ts_msec":1655033850680,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":40204,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00552{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":58,"source":"whatsapp.pcap","alias":"nDPId-test","packets-captured":58,"packets-processed":57,"total-skipped-flows":0,"total-l4-data-len":3413,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":7,"total-detection-updates":0,"total-updates":0,"current-active-flows":7,"total-active-flows":7,"total-idle-flows":0,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":41,"global_ts_msec":1655034332550}
00579{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":58,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":8,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655034332550,"flow_last_seen":1655034332550,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655034332550,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":45932,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00480{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":58,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_last_seen":1655034332550,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655034332550,"pkt":"eJS0JASgYDjgxTWgCABFAAA8s3tAAD8GTsbAqAJkszzDMbNsFGaY2PgHAAAAAKAC\/\/+CVAAAAgQFtAQCCArFiW3yAAAAAAEDAwk="}
00467{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":59,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":2,"flow_last_seen":1655034332580,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655034332580,"pkt":"eJS0JASgYDjgxTWgCABFAAA0s3xAAD8GTs3AqAJkszzDMbNsFGaY2PgILoO694AQAKylowAAAQEICsWJbhFxU6\/V"}
00475{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":3,"flow_last_seen":1655034332651,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655034332651,"pkt":"eJS0JASgYDjgxTWgCABFAAA4s31AAD8GTsjAqAJkszzDMbNsFGaY2PgILoO694AYAKxgDAAAAQEICsWJbldxU6\/VRUQAAQ=="}
00644{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":61,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":8,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655034332550,"flow_last_seen":1655034332681,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":284,"flow_tot_l4_payload_len":288,"flow_avg_l4_payload_len":72,"midstream":0,"thread_ts_msec":1655034332681,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":45932,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00552{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":66,"source":"whatsapp.pcap","alias":"nDPId-test","packets-captured":66,"packets-processed":65,"total-skipped-flows":0,"total-l4-data-len":3741,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":8,"total-detection-updates":0,"total-updates":0,"current-active-flows":8,"total-active-flows":8,"total-idle-flows":0,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":47,"global_ts_msec":1655036863658}
00579{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":66,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":9,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655036863658,"flow_last_seen":1655036863658,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655036863658,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":40954,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00482{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_last_seen":1655036863658,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655036863658,"pkt":"eJS0JASgYDjgxTWgCABFAAA8VU1AAD8GrPTAqAJkszzDMZ\/6FGZJAAaOAAAAAKAC\/\/\/gngAAAgQFtAQCCAo3avKLAAAAAAEDAwk="}
00467{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":2,"flow_last_seen":1655036863694,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655036863694,"pkt":"eJS0JASgYDjgxTWgCABFAAA0VU5AAD8GrPvAqAJkszzDMZ\/6FGZJAAaPQBkrQIAQAIAuZAAAAQEICjdq8tim3M31"}
00475{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":3,"flow_last_seen":1655036863777,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655036863777,"pkt":"eJS0JASgYDjgxTWgCABFAAA4VU9AAD8GrPbAqAJkszzDMZ\/6FGZJAAaPQBkrQIAYAIDovgAAAQEICjdq8yym3M31RUQAAQ=="}
00644{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":69,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":9,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655036863658,"flow_last_seen":1655036863823,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":290,"flow_tot_l4_payload_len":294,"flow_avg_l4_payload_len":73,"midstream":0,"thread_ts_msec":1655036863823,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":40954,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00552{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":74,"source":"whatsapp.pcap","alias":"nDPId-test","packets-captured":74,"packets-processed":73,"total-skipped-flows":0,"total-l4-data-len":4075,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":9,"total-detection-updates":0,"total-updates":0,"current-active-flows":9,"total-active-flows":9,"total-idle-flows":0,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":53,"global_ts_msec":1655037784969}
00580{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":74,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":10,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655037784969,"flow_last_seen":1655037784969,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655037784969,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":41214,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00484{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":74,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_last_seen":1655037784969,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655037784969,"pkt":"eJS0JASgYDjgxTWgCABFAAA8eZJAAD8GiK\/AqAJkszzDMaD+FGaPGwMEAAAAAKAC\/\/\/PkAAAAgQFtAQCCAo3eL\/2AAAAAAEDAwk="}
00467{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":75,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":2,"flow_last_seen":1655037785024,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655037785024,"pkt":"eJS0JASgYDjgxTWgCABFAAA0eZNAAD8GiLbAqAJkszzDMaD+FGaPGwMFTC+Ch4AQAIA0RwAAAQEICjd4wGKeH1xF"}
00475{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":76,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":3,"flow_last_seen":1655037785072,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655037785072,"pkt":"eJS0JASgYDjgxTWgCABFAAA4eZRAAD8GiLHAqAJkszzDMaD+FGaPGwMFTC+Ch4AYAIDu7QAAAQEICjd4wGqeH1xFRUQAAQ=="}
00645{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":77,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":10,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655037784969,"flow_last_seen":1655037785114,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":290,"flow_tot_l4_payload_len":294,"flow_avg_l4_payload_len":73,"midstream":0,"thread_ts_msec":1655037785114,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":41214,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00580{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":82,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":11,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655037943346,"flow_last_seen":1655037943346,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655037943346,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.33","src_port":49026,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00482{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":82,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_last_seen":1655037943346,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655037943346,"pkt":"eJS0JASgYDjgxTWgCABFAAA8ZIBAAD8GndHAqAJkszzDIb+CFGZJeEW8AAAAAKAC\/\/\/DuQAAAgQFtAQCCApZCY6zAAAAAAEDAwk="}
00467{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":2,"flow_last_seen":1655037943378,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655037943378,"pkt":"eJS0JASgYDjgxTWgCABFAAA0ZIFAAD8GndjAqAJkszzDIb+CFGZJeEW9lbThyYAQAKz4BQAAAQEIClkJjtOTiu6c"}
00475{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":84,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":3,"flow_last_seen":1655037943378,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655037943378,"pkt":"eJS0JASgYDjgxTWgCABFAAA4ZIJAAD8GndPAqAJkszzDIb+CFGZJeEW9lbThyYAYAKyyswAAAQEIClkJjtSTiu6cRUQAAQ=="}
00641{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":85,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":11,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655037943346,"flow_last_seen":1655037943383,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":7,"flow_tot_l4_payload_len":11,"flow_avg_l4_payload_len":2,"midstream":0,"thread_ts_msec":1655037943383,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.33","src_port":49026,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00555{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":90,"source":"whatsapp.pcap","alias":"nDPId-test","packets-captured":90,"packets-processed":89,"total-skipped-flows":0,"total-l4-data-len":6885,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":11,"total-detection-updates":0,"total-updates":0,"current-active-flows":11,"total-active-flows":11,"total-idle-flows":0,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":64,"global_ts_msec":1655038737650}
00580{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":90,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":12,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655038737650,"flow_last_seen":1655038737650,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655038737650,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":41288,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00481{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":90,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_last_seen":1655038737650,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655038737650,"pkt":"eJS0JASgYDjgxTWgCABFAAA8+jpAAD8GCAfAqAJkszzDMaFIFGaFGhCGAAAAAKAC\/\/9PGwAAAgQFtAQCCAo3gTyYAAAAAAEDAwk="}
00467{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":91,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":2,"flow_last_seen":1655038737824,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655038737824,"pkt":"eJS0JASgYDjgxTWgCABFAAA0+jtAAD8GCA7AqAJkszzDMaFIFGaFGhCH4E9fBoAQAIAQ0gAAAQEICjeBPUjxtjrK"}
00475{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":92,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":3,"flow_last_seen":1655038738001,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655038738001,"pkt":"eJS0JASgYDjgxTWgCABFAAA4+jxAAD8GCAnAqAJkszzDMaFIFGaFGhCH4E9fBoAYAIDK4wAAAQEICjeBPeXxtjrKRUQAAQ=="}
00645{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":93,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":12,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655038737650,"flow_last_seen":1655038738036,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":290,"flow_tot_l4_payload_len":294,"flow_avg_l4_payload_len":73,"midstream":0,"thread_ts_msec":1655038738036,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":41288,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00686{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":98,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":1,"flow_state":"finished","flow_packets_processed":9,"flow_first_seen":1655030801747,"flow_last_seen":1655030802079,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1024,"flow_tot_l4_payload_len":1537,"flow_avg_l4_payload_len":170,"midstream":0,"thread_ts_msec":1655038738381,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":44804,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00555{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":98,"source":"whatsapp.pcap","alias":"nDPId-test","packets-captured":98,"packets-processed":97,"total-skipped-flows":0,"total-l4-data-len":7219,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":12,"total-detection-updates":0,"total-updates":0,"current-active-flows":11,"total-active-flows":12,"total-idle-flows":1,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":71,"global_ts_msec":1655041569928}
00580{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":98,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":13,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655041569928,"flow_last_seen":1655041569928,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655041569928,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":41610,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00482{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":98,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_last_seen":1655041569928,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655041569928,"pkt":"eJS0JASgYDjgxTWgCABFAAA8yNhAAD8GOWnAqAJkszzDMaKKFGb8FC6CAAAAAKAC\/\/\/RUwAAAgQFtAQCCAo3qCQAAAAAAAEDAwk="}
00467{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":99,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":2,"flow_last_seen":1655041569964,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655041569964,"pkt":"eJS0JASgYDjgxTWgCABFAAA0yNlAAD8GOXDAqAJkszzDMaKKFGb8FC6DekSzAYAQAIDQKAAAAQEICjeoJCQj994H"}
00476{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":100,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":3,"flow_last_seen":1655041570092,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655041570092,"pkt":"eJS0JASgYDjgxTWgCABFAAA4yNpAAD8GOWvAqAJkszzDMaKKFGb8FC6DekSzAYAYAICKaAAAAQEICjeoJJMj994HRUQAAQ=="}
00643{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":101,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":13,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655041569928,"flow_last_seen":1655041570160,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":11,"flow_tot_l4_payload_len":15,"flow_avg_l4_payload_len":3,"midstream":0,"thread_ts_msec":1655041570160,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":41610,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00684{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":106,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":6,"flow_state":"finished","flow_packets_processed":8,"flow_first_seen":1655033797377,"flow_last_seen":1655033797657,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":273,"flow_tot_l4_payload_len":317,"flow_avg_l4_payload_len":39,"midstream":0,"thread_ts_msec":1655041570363,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":42646,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00684{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":106,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":2,"flow_state":"finished","flow_packets_processed":8,"flow_first_seen":1655031983762,"flow_last_seen":1655031984056,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":290,"flow_tot_l4_payload_len":334,"flow_avg_l4_payload_len":41,"midstream":0,"thread_ts_msec":1655041570363,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":40084,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00684{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":106,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":5,"flow_state":"finished","flow_packets_processed":8,"flow_first_seen":1655033482376,"flow_last_seen":1655033482899,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":276,"flow_tot_l4_payload_len":294,"flow_avg_l4_payload_len":36,"midstream":0,"thread_ts_msec":1655041570363,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":40178,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00684{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":106,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":7,"flow_state":"finished","flow_packets_processed":8,"flow_first_seen":1655033850395,"flow_last_seen":1655033851037,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":290,"flow_tot_l4_payload_len":334,"flow_avg_l4_payload_len":41,"midstream":0,"thread_ts_msec":1655041570363,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":40204,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00684{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":106,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":3,"flow_state":"finished","flow_packets_processed":8,"flow_first_seen":1655032256845,"flow_last_seen":1655032257332,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":262,"flow_tot_l4_payload_len":280,"flow_avg_l4_payload_len":35,"midstream":0,"thread_ts_msec":1655041570363,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":42272,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00684{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":106,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":4,"flow_state":"finished","flow_packets_processed":8,"flow_first_seen":1655032857220,"flow_last_seen":1655032858052,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":273,"flow_tot_l4_payload_len":317,"flow_avg_l4_payload_len":39,"midstream":0,"thread_ts_msec":1655041570363,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":42436,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00557{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":106,"source":"whatsapp.pcap","alias":"nDPId-test","packets-captured":106,"packets-processed":105,"total-skipped-flows":0,"total-l4-data-len":7516,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":13,"total-detection-updates":0,"total-updates":0,"current-active-flows":6,"total-active-flows":13,"total-idle-flows":7,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":83,"global_ts_msec":1655042688447}
00581{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":106,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":14,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655042688447,"flow_last_seen":1655042688447,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655042688447,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":41808,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00482{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":106,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_last_seen":1655042688447,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655042688447,"pkt":"eJS0JASgYDjgxTWgCABFAAA8k4BAAD8GbsHAqAJkszzDMaNQFGac145xAAAAAKAC\/\/+5KwAAAgQFtAQCCAo3tzqhAAAAAAEDAwk="}
00468{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":107,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":2,"flow_last_seen":1655042688525,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655042688525,"pkt":"eJS0JASgYDjgxTWgCABFAAA0k4FAAD8GbsjAqAJkszzDMaNQFGac145yikooJoAQAIAprAAAAQEICje3OwWKYYCH"}
00476{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":108,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":3,"flow_last_seen":1655042689647,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655042689647,"pkt":"eJS0JASgYDjgxTWgCABFAAA4k4JAAD8GbsPAqAJkszzDMaNQFGac145yikooJoAYAIDgCgAAAQEICje3P1WKYYCHRUQAAQ=="}
00643{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":109,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":14,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655042688447,"flow_last_seen":1655042689683,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":11,"flow_tot_l4_payload_len":15,"flow_avg_l4_payload_len":3,"midstream":0,"thread_ts_msec":1655042689683,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":41808,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00684{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":114,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":8,"flow_state":"finished","flow_packets_processed":8,"flow_first_seen":1655034332550,"flow_last_seen":1655034332854,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":284,"flow_tot_l4_payload_len":328,"flow_avg_l4_payload_len":41,"midstream":0,"thread_ts_msec":1655042690163,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":45932,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00557{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":114,"source":"whatsapp.pcap","alias":"nDPId-test","packets-captured":114,"packets-processed":113,"total-skipped-flows":0,"total-l4-data-len":7810,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":14,"total-detection-updates":0,"total-updates":0,"current-active-flows":6,"total-active-flows":14,"total-idle-flows":8,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":90,"global_ts_msec":1655043596112}
00581{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":114,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":15,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655043596112,"flow_last_seen":1655043596112,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655043596112,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.33","src_port":37482,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00483{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":114,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_last_seen":1655043596112,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655043596112,"pkt":"eJS0JASgYDjgxTWgCABFAAA8sPxAAD8GUVXAqAJkszzDIZJqFGboXByKAAAAAKAC\/\/9iMwAAAgQFtAQCCAoEt\/vxAAAAAAEDAwk="}
00469{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":115,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":2,"flow_last_seen":1655043596145,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655043596145,"pkt":"eJS0JASgYDjgxTWgCABFAAA0sP1AAD8GUVzAqAJkszzDIZJqFGboXByLxoplnYAQAKyC0AAAAQEICgS3\/BKyfC6v"}
00477{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":116,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":3,"flow_last_seen":1655043596145,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655043596145,"pkt":"eJS0JASgYDjgxTWgCABFAAA4sP5AAD8GUVfAqAJkszzDIZJqFGboXByLxoplnYAYAKw9fwAAAQEICgS3\/BKyfC6vRUQAAQ=="}
00642{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":117,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":15,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655043596112,"flow_last_seen":1655043596146,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":7,"flow_tot_l4_payload_len":11,"flow_avg_l4_payload_len":2,"midstream":0,"thread_ts_msec":1655043596146,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.33","src_port":37482,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00557{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":122,"source":"whatsapp.pcap","alias":"nDPId-test","packets-captured":122,"packets-processed":121,"total-skipped-flows":0,"total-l4-data-len":9083,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":15,"total-detection-updates":0,"total-updates":0,"current-active-flows":7,"total-active-flows":15,"total-idle-flows":8,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":96,"global_ts_msec":1655044288744}
00581{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":122,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":16,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655044288744,"flow_last_seen":1655044288744,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655044288744,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.33","src_port":37582,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00482{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":122,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_last_seen":1655044288744,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655044288744,"pkt":"eJS0JASgYDjgxTWgCABFAAA8Rj1AAD8GvBTAqAJkszzDIZLOFGbS4v0+AAAAAKAC\/\/8FAwAAAgQFtAQCCAoEwo14AAAAAAEDAwk="}
00469{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":123,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":2,"flow_last_seen":1655044288776,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655044288776,"pkt":"eJS0JASgYDjgxTWgCABFAAA0Rj5AAD8GvBvAqAJkszzDIZLOFGbS4v0\/XwbxEoAQAKw+pwAAAQEICgTCjaZrpjiA"}
00477{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":124,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":3,"flow_last_seen":1655044288777,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655044288777,"pkt":"eJS0JASgYDjgxTWgCABFAAA4Rj9AAD8GvBbAqAJkszzDIZLOFGbS4v0\/XwbxEoAYAKz5VAAAAQEICgTCjadrpjiARUQAAQ=="}
00642{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":125,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":16,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655044288744,"flow_last_seen":1655044288777,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":7,"flow_tot_l4_payload_len":11,"flow_avg_l4_payload_len":2,"midstream":0,"thread_ts_msec":1655044288777,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.33","src_port":37582,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00559{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":130,"source":"whatsapp.pcap","alias":"nDPId-test","packets-captured":130,"packets-processed":129,"total-skipped-flows":0,"total-l4-data-len":10356,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":16,"total-detection-updates":0,"total-updates":0,"current-active-flows":8,"total-active-flows":16,"total-idle-flows":8,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":102,"global_ts_msec":1655044965142}
00581{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":130,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":17,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655044965142,"flow_last_seen":1655044965142,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655044965142,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":45754,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00483{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":130,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_last_seen":1655044965142,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655044965142,"pkt":"eJS0JASgYDjgxTWgCABFAAA8At1AAD8G\/2TAqAJkszzDMbK6FGZec+QxAAAAAKAC\/\/+2PgAAAgQFtAQCCApG+geGAAAAAAEDAwg="}
00469{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":131,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":2,"flow_last_seen":1655044965172,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655044965172,"pkt":"eJS0JASgYDjgxTWgCABFAAA0At5AAD8G\/2vAqAJkszzDMbK6FGZec+QyZebbNIAQAVdZxAAAAQEICkb6B6qVR7NZ"}
00477{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":132,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":3,"flow_last_seen":1655044965191,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655044965191,"pkt":"eJS0JASgYDjgxTWgCABFAAA4At9AAD8G\/2bAqAJkszzDMbK6FGZec+QyZebbNIAYAVcUYAAAAQEICkb6B72VR7NZRUQAAQ=="}
00646{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":133,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":17,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655044965142,"flow_last_seen":1655044965221,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":273,"flow_tot_l4_payload_len":277,"flow_avg_l4_payload_len":69,"midstream":0,"thread_ts_msec":1655044965221,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":45754,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00684{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":138,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":9,"flow_state":"finished","flow_packets_processed":8,"flow_first_seen":1655036863658,"flow_last_seen":1655036864020,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":290,"flow_tot_l4_payload_len":334,"flow_avg_l4_payload_len":41,"midstream":0,"thread_ts_msec":1655044965409,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":40954,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00559{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":138,"source":"whatsapp.pcap","alias":"nDPId-test","packets-captured":138,"packets-processed":137,"total-skipped-flows":0,"total-l4-data-len":10673,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":17,"total-detection-updates":0,"total-updates":0,"current-active-flows":8,"total-active-flows":17,"total-idle-flows":9,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":109,"global_ts_msec":1655045751925}
00581{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":138,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":18,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655045751925,"flow_last_seen":1655045751925,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655045751925,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":45824,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00483{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":138,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_last_seen":1655045751925,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655045751925,"pkt":"eJS0JASgYDjgxTWgCABFAAA8tn9AAD8GS8LAqAJkszzDMbMAFGajVEhsAAAAAKAC\/\/+wTwAAAgQFtAQCCApG\/mQPAAAAAAEDAwg="}
00469{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":139,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":2,"flow_last_seen":1655045751957,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655045751957,"pkt":"eJS0JASgYDjgxTWgCABFAAA0toBAAD8GS8nAqAJkszzDMbMAFGajVEhtoOKxA4AQAVeXTwAAAQEICkb+ZC\/0vP+i"}
00476{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":140,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":3,"flow_last_seen":1655045751963,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655045751963,"pkt":"eJS0JASgYDjgxTWgCABFAAA4toFAAD8GS8TAqAJkszzDMbMAFGajVEhtoOKxA4AYAVdR+QAAAQEICkb+ZDT0vP+iRUQAAQ=="}
00646{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":141,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":18,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655045751925,"flow_last_seen":1655045751993,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":273,"flow_tot_l4_payload_len":277,"flow_avg_l4_payload_len":69,"midstream":0,"thread_ts_msec":1655045751993,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":45824,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00688{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":146,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":11,"flow_state":"finished","flow_packets_processed":8,"flow_first_seen":1655037943346,"flow_last_seen":1655037943539,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1249,"flow_tot_l4_payload_len":2513,"flow_avg_l4_payload_len":314,"midstream":0,"thread_ts_msec":1655045752178,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.33","src_port":49026,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00685{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":146,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":10,"flow_state":"finished","flow_packets_processed":8,"flow_first_seen":1655037784969,"flow_last_seen":1655037785423,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":290,"flow_tot_l4_payload_len":297,"flow_avg_l4_payload_len":37,"midstream":0,"thread_ts_msec":1655045752178,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":41214,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00560{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":146,"source":"whatsapp.pcap","alias":"nDPId-test","packets-captured":146,"packets-processed":145,"total-skipped-flows":0,"total-l4-data-len":10990,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":18,"total-detection-updates":0,"total-updates":0,"current-active-flows":7,"total-active-flows":18,"total-idle-flows":11,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":117,"global_ts_msec":1655049443230}
00581{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":146,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":19,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655049443230,"flow_last_seen":1655049443230,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655049443230,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":46406,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00484{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":146,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_last_seen":1655049443230,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655049443230,"pkt":"eJS0JASgYDjgxTWgCABFAAA8KCVAAD8G2hzAqAJkszzDMbVGFGZeo\/3WAAAAAKAC\/\/\/eUwAAAgQFtAQCCApHIcLoAAAAAAEDAwg="}
00469{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":147,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":2,"flow_last_seen":1655049443263,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655049443263,"pkt":"eJS0JASgYDjgxTWgCABFAAA0KCZAAD8G2iPAqAJkszzDMbVGFGZeo\/3XmmmBIoAQAVfWlwAAAQEICkchwwlHYNIU"}
00477{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":148,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":3,"flow_last_seen":1655049443356,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655049443356,"pkt":"eJS0JASgYDjgxTWgCABFAAA4KCdAAD8G2h7AqAJkszzDMbVGFGZeo\/3XmmmBIoAYAVeQ6QAAAQEICkchw2ZHYNIURUQAAQ=="}
00646{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":149,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":19,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655049443230,"flow_last_seen":1655049443389,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":273,"flow_tot_l4_payload_len":277,"flow_avg_l4_payload_len":69,"midstream":0,"thread_ts_msec":1655049443389,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":46406,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00685{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":154,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":12,"flow_state":"finished","flow_packets_processed":8,"flow_first_seen":1655038737650,"flow_last_seen":1655038738381,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":290,"flow_tot_l4_payload_len":334,"flow_avg_l4_payload_len":41,"midstream":0,"thread_ts_msec":1655049443593,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":41288,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00685{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":154,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":13,"flow_state":"finished","flow_packets_processed":8,"flow_first_seen":1655041569928,"flow_last_seen":1655041570363,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":279,"flow_tot_l4_payload_len":297,"flow_avg_l4_payload_len":37,"midstream":0,"thread_ts_msec":1655049443593,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":41610,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00560{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":154,"source":"whatsapp.pcap","alias":"nDPId-test","packets-captured":154,"packets-processed":153,"total-skipped-flows":0,"total-l4-data-len":11307,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":19,"total-detection-updates":0,"total-updates":0,"current-active-flows":6,"total-active-flows":19,"total-idle-flows":13,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":125,"global_ts_msec":1655050704430}
00579{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":154,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":20,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655050704430,"flow_last_seen":1655050704430,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655050704430,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"31.13.83.49","src_port":40224,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00482{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":154,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_last_seen":1655050704430,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655050704430,"pkt":"eJS0JASgYDjgxTWgCABFAAA84MFAAD8GJbDAqAJkHw1TMZ0gFGZ02VSkAAAAAKAC\/\/8otQAAAgQFtAQCCAoO3mAcAAAAAAEDAwk="}
00468{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":155,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":2,"flow_last_seen":1655050704485,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655050704485,"pkt":"eJS0JASgYDjgxTWgCABFAAA04MJAAD8GJbfAqAJkHw1TMZ0gFGZ02VSlljrOS4AQAKxhJgAAAQEICg7eYFQ9kVNR"}
00476{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":156,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":3,"flow_last_seen":1655050704506,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655050704506,"pkt":"eJS0JASgYDjgxTWgCABFAAA44MNAAD8GJbLAqAJkHw1TMZ0gFGZ02VSlljrOS4AYAKwbyQAAAQEICg7eYGA9kVNRRUQAAQ=="}
00644{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":157,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":20,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655050704430,"flow_last_seen":1655050704560,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":279,"flow_tot_l4_payload_len":283,"flow_avg_l4_payload_len":70,"midstream":0,"thread_ts_msec":1655050704560,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"31.13.83.49","src_port":40224,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00685{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":162,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":14,"flow_state":"finished","flow_packets_processed":8,"flow_first_seen":1655042688447,"flow_last_seen":1655042690163,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":276,"flow_tot_l4_payload_len":294,"flow_avg_l4_payload_len":36,"midstream":0,"thread_ts_msec":1655050704962,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":41808,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00581{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":162,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":21,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655051220512,"flow_last_seen":1655051220512,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655051220512,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.33","src_port":45470,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00483{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":162,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":1,"flow_last_seen":1655051220512,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655051220512,"pkt":"eJS0JASgYDjgxTWgCABFAAA8rVBAAD8GVQHAqAJkszzDIbGeFGYTOuPqAAAAAKAC\/\/\/5owAAAgQFtAQCCAoFLFKaAAAAAAEDAwk="}
00468{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":163,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":2,"flow_last_seen":1655051220546,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655051220546,"pkt":"eJS0JASgYDjgxTWgCABFAAA0rVFAAD8GVQjAqAJkszzDIbGeFGYTOuPr8T6CsoAQAKwtBgAAAQEICgUsUry7e8sg"}
00476{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":164,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":3,"flow_last_seen":1655051220578,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655051220578,"pkt":"eJS0JASgYDjgxTWgCABFAAA4rVJAAD8GVQPAqAJkszzDIbGeFGYTOuPr8T6CsoAYAKznlAAAAQEICgUsUty7e8sgRUQAAQ=="}
00642{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":165,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":21,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655051220512,"flow_last_seen":1655051220578,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":7,"flow_tot_l4_payload_len":11,"flow_avg_l4_payload_len":2,"midstream":0,"thread_ts_msec":1655051220578,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.33","src_port":45470,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00688{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":170,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":15,"flow_state":"finished","flow_packets_processed":8,"flow_first_seen":1655043596112,"flow_last_seen":1655043596381,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1258,"flow_tot_l4_payload_len":1273,"flow_avg_l4_payload_len":159,"midstream":0,"thread_ts_msec":1655051220729,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.33","src_port":37482,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00560{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":170,"source":"whatsapp.pcap","alias":"nDPId-test","packets-captured":170,"packets-processed":169,"total-skipped-flows":0,"total-l4-data-len":13293,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":21,"total-detection-updates":0,"total-updates":0,"current-active-flows":6,"total-active-flows":21,"total-idle-flows":15,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":138,"global_ts_msec":1655051492307}
00581{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":170,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":22,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655051492307,"flow_last_seen":1655051492307,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655051492307,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":43084,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00482{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":170,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":1,"flow_last_seen":1655051492307,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655051492307,"pkt":"eJS0JASgYDjgxTWgCABFAAA8gfhAAD8GgEnAqAJkszzDMahMFGbuqHaiAAAAAKAC\/\/+qzgAAAgQFtAQCCAo39wnAAAAAAAEDAwk="}
00468{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":171,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":2,"flow_last_seen":1655051492339,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655051492339,"pkt":"eJS0JASgYDjgxTWgCABFAAA0gflAAD8GgFDAqAJkszzDMahMFGbuqHajLwsyzYAQAIACagAAAQEICjf3Cd8Kl2oU"}
00476{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":172,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":3,"flow_last_seen":1655051492356,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655051492356,"pkt":"eJS0JASgYDjgxTWgCABFAAA4gfpAAD8GgEvAqAJkszzDMahMFGbuqHajLwsyzYAYAIC9BgAAAQEICjf3CfEKl2oURUQAAQ=="}
00646{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":173,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":22,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655051492307,"flow_last_seen":1655051492493,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":290,"flow_tot_l4_payload_len":294,"flow_avg_l4_payload_len":73,"midstream":0,"thread_ts_msec":1655051492493,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":43084,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00581{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":177,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":23,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655051794002,"flow_last_seen":1655051794002,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655051794002,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.33","src_port":45602,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00482{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":177,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_last_seen":1655051794002,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655051794002,"pkt":"eJS0JASgYDjgxTWgCABFAAA8Ow1AAD8Gx0TAqAJkszzDIbIiFGatOxWzAAAAAKAC\/\/9tHgAAAgQFtAQCCAoFNRLJAAAAAAEDAwk="}
00470{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":178,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":2,"flow_last_seen":1655051794036,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655051794036,"pkt":"eJS0JASgYDjgxTWgCABFAAA0Ow5AAD8Gx0vAqAJkszzDIbIiFGatOxW0\/J8dd4AQAKwWfwAAAQEICgU1Eusr+T5\/"}
00478{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":179,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":3,"flow_last_seen":1655051794037,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655051794037,"pkt":"eJS0JASgYDjgxTWgCABFAAA4Ow9AAD8Gx0bAqAJkszzDIbIiFGatOxW0\/J8dd4AYAKzRLAAAAQEICgU1Euwr+T5\/RUQAAQ=="}
00642{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":180,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":23,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655051794002,"flow_last_seen":1655051794037,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":7,"flow_tot_l4_payload_len":11,"flow_avg_l4_payload_len":2,"midstream":0,"thread_ts_msec":1655051794037,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.33","src_port":45602,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00688{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":185,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":16,"flow_state":"finished","flow_packets_processed":8,"flow_first_seen":1655044288744,"flow_last_seen":1655044288931,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1258,"flow_tot_l4_payload_len":1273,"flow_avg_l4_payload_len":159,"midstream":0,"thread_ts_msec":1655051794206,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.33","src_port":37582,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00560{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":185,"source":"whatsapp.pcap","alias":"nDPId-test","packets-captured":185,"packets-processed":184,"total-skipped-flows":0,"total-l4-data-len":14860,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":23,"total-detection-updates":0,"total-updates":0,"current-active-flows":7,"total-active-flows":23,"total-idle-flows":16,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":150,"global_ts_msec":1655052148615}
00581{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":185,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":24,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655052148615,"flow_last_seen":1655052148615,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655052148615,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":43152,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00483{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":185,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_last_seen":1655052148615,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655052148615,"pkt":"eJS0JASgYDjgxTWgCABFAAA8kfpAAD8GcEfAqAJkszzDMaiQFGZmurw1AAAAAKAC\/\/+h\/wAAAgQFtAQCCAo3+VSkAAAAAAEDAwk="}
00468{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":186,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":2,"flow_last_seen":1655052148658,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655052148658,"pkt":"eJS0JASgYDjgxTWgCABFAAA0kftAAD8GcE7AqAJkszzDMaiQFGZmurw2KlSpWIAQAIA0yQAAAQEICjf5VPJAoYbY"}
00476{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":187,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":3,"flow_last_seen":1655052148713,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655052148713,"pkt":"eJS0JASgYDjgxTWgCABFAAA4kfxAAD8GcEnAqAJkszzDMaiQFGZmurw2KlSpWIAYAIDvQAAAAQEICjf5VSlAoYbYRUQAAQ=="}
00646{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":188,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":24,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655052148615,"flow_last_seen":1655052148758,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":290,"flow_tot_l4_payload_len":294,"flow_avg_l4_payload_len":73,"midstream":0,"thread_ts_msec":1655052148758,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":43152,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00581{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":193,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":25,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655052438619,"flow_last_seen":1655052438619,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655052438619,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.33","src_port":46042,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00482{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":193,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":1,"flow_last_seen":1655052438619,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655052438619,"pkt":"eJS0JASgYDjgxTWgCABFAAA8kqtAAD8Gb6bAqAJkszzDIbPaFGZdYrgnAAAAAKAC\/\/9CuwAAAgQFtAQCCAoFPujPAAAAAAEDAwk="}
00468{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":194,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":2,"flow_last_seen":1655052438652,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655052438652,"pkt":"eJS0JASgYDjgxTWgCABFAAA0kqxAAD8Gb63AqAJkszzDIbPaFGZdYrgoyEw0oYAQAKw1RwAAAQEICgU+6PHmsVfE"}
00476{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":195,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":3,"flow_last_seen":1655052438653,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655052438653,"pkt":"eJS0JASgYDjgxTWgCABFAAA4kq1AAD8Gb6jAqAJkszzDIbPaFGZdYrgoyEw0oYAYAKzv9AAAAQEICgU+6PLmsVfERUQAAQ=="}
00642{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":196,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":25,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655052438619,"flow_last_seen":1655052438654,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":7,"flow_tot_l4_payload_len":11,"flow_avg_l4_payload_len":2,"midstream":0,"thread_ts_msec":1655052438654,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.33","src_port":46042,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00685{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":201,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":17,"flow_state":"finished","flow_packets_processed":8,"flow_first_seen":1655044965142,"flow_last_seen":1655044965409,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":273,"flow_tot_l4_payload_len":317,"flow_avg_l4_payload_len":39,"midstream":0,"thread_ts_msec":1655052438807,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":45754,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00560{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":201,"source":"whatsapp.pcap","alias":"nDPId-test","packets-captured":201,"packets-processed":200,"total-skipped-flows":0,"total-l4-data-len":16467,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":25,"total-detection-updates":0,"total-updates":0,"current-active-flows":8,"total-active-flows":25,"total-idle-flows":17,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":162,"global_ts_msec":1655052853504}
00581{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":201,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":26,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655052853504,"flow_last_seen":1655052853504,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655052853504,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":43206,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00483{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":201,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":1,"flow_last_seen":1655052853504,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655052853504,"pkt":"eJS0JASgYDjgxTWgCABFAAA8WWJAAD8GqN\/AqAJkszzDMajGFGY2dfJkAAAAAKAC\/\/87qwAAAgQFtAQCCAo3+7TWAAAAAAEDAwk="}
00468{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":202,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":2,"flow_last_seen":1655052853586,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655052853586,"pkt":"eJS0JASgYDjgxTWgCABFAAA0WWNAAD8GqObAqAJkszzDMajGFGY2dfJl9PmkqoAQAICs4QAAAQEICjf7tS9HlNt1"}
00476{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":203,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":3,"flow_last_seen":1655052853610,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655052853610,"pkt":"eJS0JASgYDjgxTWgCABFAAA4WWRAAD8GqOHAqAJkszzDMajGFGY2dfJl9PmkqoAYAIBnfgAAAQEICjf7tUFHlNt1RUQAAQ=="}
00646{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":204,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":26,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655052853504,"flow_last_seen":1655052853647,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":290,"flow_tot_l4_payload_len":294,"flow_avg_l4_payload_len":73,"midstream":0,"thread_ts_msec":1655052853647,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":43206,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00560{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":209,"source":"whatsapp.pcap","alias":"nDPId-test","packets-captured":209,"packets-processed":208,"total-skipped-flows":0,"total-l4-data-len":16801,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":26,"total-detection-updates":0,"total-updates":0,"current-active-flows":9,"total-active-flows":26,"total-idle-flows":17,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":168,"global_ts_msec":1655053633670}
00581{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":209,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":27,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655053633670,"flow_last_seen":1655053633670,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655053633670,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":43230,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00484{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":209,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":1,"flow_last_seen":1655053633670,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655053633670,"pkt":"eJS0JASgYDjgxTWgCABFAAA8mVhAAD8GaOnAqAJkszzDMajeFGZP5tJgAAAAAKAC\/\/\/ryAAAAgQFtAQCCAo3\/AszAAAAAAEDAwk="}
00468{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":210,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":2,"flow_last_seen":1655053633701,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655053633701,"pkt":"eJS0JASgYDjgxTWgCABFAAA0mVlAAD8GaPDAqAJkszzDMajeFGZP5tJhk8uMoIAQAIDJOAAAAQEICjf8C1OqRoX7"}
00476{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":211,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":3,"flow_last_seen":1655053633708,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655053633708,"pkt":"eJS0JASgYDjgxTWgCABFAAA4mVpAAD8GaOvAqAJkszzDMajeFGZP5tJhk8uMoIAYAICD4QAAAQEICjf8C1mqRoX7RUQAAQ=="}
00646{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":212,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":27,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655053633670,"flow_last_seen":1655053633738,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":290,"flow_tot_l4_payload_len":294,"flow_avg_l4_payload_len":73,"midstream":0,"thread_ts_msec":1655053633738,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":43230,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00685{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":217,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":18,"flow_state":"finished","flow_packets_processed":8,"flow_first_seen":1655045751925,"flow_last_seen":1655045752178,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":273,"flow_tot_l4_payload_len":317,"flow_avg_l4_payload_len":39,"midstream":0,"thread_ts_msec":1655053633932,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":45824,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00560{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":217,"source":"whatsapp.pcap","alias":"nDPId-test","packets-captured":217,"packets-processed":216,"total-skipped-flows":0,"total-l4-data-len":17135,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":27,"total-detection-updates":0,"total-updates":0,"current-active-flows":9,"total-active-flows":27,"total-idle-flows":18,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":175,"global_ts_msec":1655054457330}
00581{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":217,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":28,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655054457330,"flow_last_seen":1655054457330,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655054457330,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.33","src_port":46468,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00484{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":217,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":1,"flow_last_seen":1655054457330,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655054457330,"pkt":"eJS0JASgYDjgxTWgCABFAAA8VnBAAD8Gq+HAqAJkszzDIbWEFGa\/BmevAAAAAKAC\/\/\/mlQAAAgQFtAQCCAoFUzIKAAAAAAEDAwk="}
00469{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":218,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":2,"flow_last_seen":1655054457362,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655054457362,"pkt":"eJS0JASgYDjgxTWgCABFAAA0VnFAAD8Gq+jAqAJkszzDIbWEFGa\/Bmewdx424oAQAKySKwAAAQEICgVTMiqQiUPS"}
00477{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":219,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":3,"flow_last_seen":1655054457363,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655054457363,"pkt":"eJS0JASgYDjgxTWgCABFAAA4VnJAAD8Gq+PAqAJkszzDIbWEFGa\/Bmewdx424oAYAKxM2QAAAQEICgVTMiuQiUPSRUQAAQ=="}
00642{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":220,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":28,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655054457330,"flow_last_seen":1655054457365,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":7,"flow_tot_l4_payload_len":11,"flow_avg_l4_payload_len":2,"midstream":0,"thread_ts_msec":1655054457365,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.33","src_port":46468,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00561{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":225,"source":"whatsapp.pcap","alias":"nDPId-test","packets-captured":225,"packets-processed":224,"total-skipped-flows":0,"total-l4-data-len":18408,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":28,"total-detection-updates":0,"total-updates":0,"current-active-flows":10,"total-active-flows":28,"total-idle-flows":18,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":181,"global_ts_msec":1655056441533}
00581{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":225,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":29,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655056441533,"flow_last_seen":1655056441533,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655056441533,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.33","src_port":47360,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00483{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":225,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":1,"flow_last_seen":1655056441533,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655056441533,"pkt":"eJS0JASgYDjgxTWgCABFAAA8SQJAAD8GuU\/AqAJkszzDIbkAFGYVt3HxAAAAAKAC\/\/87QgAAAgQFtAQCCAoFcXjRAAAAAAEDAwk="}
00468{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":226,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":2,"flow_last_seen":1655056441563,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655056441563,"pkt":"eJS0JASgYDjgxTWgCABFAAA0SQNAAD8GuVbAqAJkszzDIbkAFGYVt3Hym+tfO4AQAKzuQwAAAQEICgVxePCucNFZ"}
00476{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":227,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":3,"flow_last_seen":1655056441564,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655056441564,"pkt":"eJS0JASgYDjgxTWgCABFAAA4SQRAAD8GuVHAqAJkszzDIbkAFGYVt3Hym+tfO4AYAKyo8gAAAQEICgVxePCucNFZRUQAAQ=="}
00642{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":228,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":29,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655056441533,"flow_last_seen":1655056441565,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":7,"flow_tot_l4_payload_len":11,"flow_avg_l4_payload_len":2,"midstream":0,"thread_ts_msec":1655056441565,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.33","src_port":47360,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00561{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":233,"source":"whatsapp.pcap","alias":"nDPId-test","packets-captured":233,"packets-processed":232,"total-skipped-flows":0,"total-l4-data-len":19681,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":29,"total-detection-updates":0,"total-updates":0,"current-active-flows":11,"total-active-flows":29,"total-idle-flows":18,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":187,"global_ts_msec":1655059510580}
00581{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":233,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":30,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655059510580,"flow_last_seen":1655059510580,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655059510580,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.33","src_port":39828,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00485{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":233,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":1,"flow_last_seen":1655059510580,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655059510580,"pkt":"eJS0JASgYDjgxTWgCABFAAA8GcJAAD8G6I\/AqAJkszzDIZuUFGY95P\/EAAAAAKAC\/\/\/fxAAAAgQFtAQCCAoFoDuLAAAAAAEDAwk="}
00469{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":234,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":2,"flow_last_seen":1655059510610,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655059510610,"pkt":"eJS0JASgYDjgxTWgCABFAAA0GcNAAD8G6JbAqAJkszzDIZuUFGY95P\/FCFqhLIAQAKyMSwAAAQEICgWgO6lMbYt5"}
00477{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":235,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":3,"flow_last_seen":1655059510610,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655059510610,"pkt":"eJS0JASgYDjgxTWgCABFAAA4GcRAAD8G6JHAqAJkszzDIZuUFGY95P\/FCFqhLIAYAKxG+gAAAQEICgWgO6lMbYt5RUQAAQ=="}
00642{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":236,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":30,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655059510580,"flow_last_seen":1655059510611,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":7,"flow_tot_l4_payload_len":11,"flow_avg_l4_payload_len":2,"midstream":0,"thread_ts_msec":1655059510611,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.33","src_port":39828,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00685{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":241,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":22,"flow_state":"finished","flow_packets_processed":7,"flow_first_seen":1655051492307,"flow_last_seen":1655051493108,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":290,"flow_tot_l4_payload_len":294,"flow_avg_l4_payload_len":42,"midstream":0,"thread_ts_msec":1655059510757,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":43084,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00688{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":241,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":21,"flow_state":"finished","flow_packets_processed":8,"flow_first_seen":1655051220512,"flow_last_seen":1655051220729,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1258,"flow_tot_l4_payload_len":1273,"flow_avg_l4_payload_len":159,"midstream":0,"thread_ts_msec":1655059510757,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.33","src_port":45470,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00688{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":241,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":23,"flow_state":"finished","flow_packets_processed":8,"flow_first_seen":1655051794002,"flow_last_seen":1655051794206,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1258,"flow_tot_l4_payload_len":1273,"flow_avg_l4_payload_len":159,"midstream":0,"thread_ts_msec":1655059510757,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.33","src_port":45602,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00685{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":241,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":19,"flow_state":"finished","flow_packets_processed":8,"flow_first_seen":1655049443230,"flow_last_seen":1655049443593,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":273,"flow_tot_l4_payload_len":317,"flow_avg_l4_payload_len":39,"midstream":0,"thread_ts_msec":1655059510757,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":46406,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00683{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":241,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":20,"flow_state":"finished","flow_packets_processed":8,"flow_first_seen":1655050704430,"flow_last_seen":1655050704962,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":427,"flow_tot_l4_payload_len":713,"flow_avg_l4_payload_len":89,"midstream":0,"thread_ts_msec":1655059510757,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"31.13.83.49","src_port":40224,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00560{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":241,"source":"whatsapp.pcap","alias":"nDPId-test","packets-captured":241,"packets-processed":240,"total-skipped-flows":0,"total-l4-data-len":20954,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":30,"total-detection-updates":0,"total-updates":0,"current-active-flows":7,"total-active-flows":30,"total-idle-flows":23,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":198,"global_ts_msec":1655060495977}
00581{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":241,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":31,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655060495977,"flow_last_seen":1655060495977,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655060495977,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.33","src_port":40108,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00482{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":241,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":1,"flow_last_seen":1655060495977,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655060495977,"pkt":"eJS0JASgYDjgxTWgCABFAAA8YJ5AAD8GobPAqAJkszzDIZysFGYCJGGJAAAAAKAC\/\/+p9wAAAgQFtAQCCAoFq0oxAAAAAAEDAwk="}
00469{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":242,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":2,"flow_last_seen":1655060496008,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655060496008,"pkt":"eJS0JASgYDjgxTWgCABFAAA0YJ9AAD8GobrAqAJkszzDIZysFGYCJGGK2sw1x4AQAKwONAAAAQEICgWrSlDEovR\/"}
00477{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":243,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":3,"flow_last_seen":1655060496009,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655060496009,"pkt":"eJS0JASgYDjgxTWgCABFAAA4YKBAAD8GobXAqAJkszzDIZysFGYCJGGK2sw1x4AYAKzI4QAAAQEICgWrSlHEovR\/RUQAAQ=="}
00642{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":244,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":31,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655060495977,"flow_last_seen":1655060496009,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":7,"flow_tot_l4_payload_len":11,"flow_avg_l4_payload_len":2,"midstream":0,"thread_ts_msec":1655060496009,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.33","src_port":40108,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00685{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":250,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":24,"flow_state":"finished","flow_packets_processed":8,"flow_first_seen":1655052148615,"flow_last_seen":1655052148966,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":290,"flow_tot_l4_payload_len":334,"flow_avg_l4_payload_len":41,"midstream":0,"thread_ts_msec":1655060496256,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":43152,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00685{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":250,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":26,"flow_state":"finished","flow_packets_processed":8,"flow_first_seen":1655052853504,"flow_last_seen":1655052853872,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":290,"flow_tot_l4_payload_len":334,"flow_avg_l4_payload_len":41,"midstream":0,"thread_ts_msec":1655060496256,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":43206,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00688{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":250,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":25,"flow_state":"finished","flow_packets_processed":8,"flow_first_seen":1655052438619,"flow_last_seen":1655052438807,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1258,"flow_tot_l4_payload_len":1273,"flow_avg_l4_payload_len":159,"midstream":0,"thread_ts_msec":1655060496256,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.33","src_port":46042,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00560{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":250,"source":"whatsapp.pcap","alias":"nDPId-test","packets-captured":250,"packets-processed":249,"total-skipped-flows":0,"total-l4-data-len":22271,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":31,"total-detection-updates":0,"total-updates":0,"current-active-flows":5,"total-active-flows":31,"total-idle-flows":26,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":207,"global_ts_msec":1655061657436}
00581{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":250,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":32,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655061657436,"flow_last_seen":1655061657436,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655061657436,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":43954,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00482{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":250,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":1,"flow_last_seen":1655061657436,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655061657436,"pkt":"eJS0JASgYDjgxTWgCABFAAA88nlAAD8GD8jAqAJkszzDMauyFGbsqzKiAAAAAKAC\/\/9iSAAAAgQFtAQCCAo4IpSyAAAAAAEDAwk="}
00469{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":251,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":2,"flow_last_seen":1655061657568,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655061657568,"pkt":"eJS0JASgYDjgxTWgCABFAAA08npAAD8GD8\/AqAJkszzDMauyFGbsqzKjnK08DIAQAIBE+AAAAQEICjgilXAR0WBF"}
00477{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":252,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":3,"flow_last_seen":1655061657568,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655061657568,"pkt":"eJS0JASgYDjgxTWgCABFAAA48ntAAD8GD8rAqAJkszzDMauyFGbsqzKjnK08DIAYAID\/ogAAAQEICjgilXQR0WBFRUQAAQ=="}
00646{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":253,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":32,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655061657436,"flow_last_seen":1655061657706,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":290,"flow_tot_l4_payload_len":294,"flow_avg_l4_payload_len":73,"midstream":0,"thread_ts_msec":1655061657706,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":43954,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00685{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":258,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":27,"flow_state":"finished","flow_packets_processed":8,"flow_first_seen":1655053633670,"flow_last_seen":1655053633932,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":290,"flow_tot_l4_payload_len":334,"flow_avg_l4_payload_len":41,"midstream":0,"thread_ts_msec":1655061657966,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":43230,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00579{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":258,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":33,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655061873005,"flow_last_seen":1655061873005,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655061873005,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"31.13.93.54","src_port":49096,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00484{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":258,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":1,"flow_last_seen":1655061873005,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655061873005,"pkt":"eJS0JASgYDjgxTWgCABFAAA8rKJAAD8GT8rAqAJkHw1dNr\/IFGZDXSW2AAAAAKAC\/\/\/P8AAAAgQFtAQCCAokHtddAAAAAAEDAwk="}
00470{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":259,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":2,"flow_last_seen":1655061873153,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655061873153,"pkt":"eJS0JASgYDjgxTWgCABFAAA0rKNAAD8GT9HAqAJkHw1dNr\/IFGZDXSW3fPQug4AQAID6IQAAAQEICiQe1\/I8Thuy"}
00477{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":260,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":3,"flow_last_seen":1655061873186,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655061873186,"pkt":"eJS0JASgYDjgxTWgCABFAAA4rKRAAD8GT8zAqAJkHw1dNr\/IFGZDXSW3fPQug4AYAIC0sAAAAQEICiQe2BI8ThuyRUQAAQ=="}
00644{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":261,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":33,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655061873005,"flow_last_seen":1655061873368,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":278,"flow_tot_l4_payload_len":282,"flow_avg_l4_payload_len":70,"midstream":0,"thread_ts_msec":1655061873368,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"31.13.93.54","src_port":49096,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00560{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":266,"source":"whatsapp.pcap","alias":"nDPId-test","packets-captured":266,"packets-processed":265,"total-skipped-flows":0,"total-l4-data-len":23230,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":33,"total-detection-updates":0,"total-updates":0,"current-active-flows":6,"total-active-flows":33,"total-idle-flows":27,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":219,"global_ts_msec":1655062569330}
00581{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":266,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":34,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655062569330,"flow_last_seen":1655062569330,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655062569330,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":43978,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00482{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":266,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":1,"flow_last_seen":1655062569330,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655062569330,"pkt":"eJS0JASgYDjgxTWgCABFAAA8MZZAAD8G0KvAqAJkszzDMavKFGbYH58HAAAAAKAC\/\/9yPQAAAgQFtAQCCAo4IyzLAAAAAAEDAwk="}
00468{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":267,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":2,"flow_last_seen":1655062569374,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655062569374,"pkt":"eJS0JASgYDjgxTWgCABFAAA0MZdAAD8G0LLAqAJkszzDMavKFGbYH58IMQLbuIAQAIC6CgAAAQEICjgjLRYTN8Yz"}
00476{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":268,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":3,"flow_last_seen":1655062569381,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655062569381,"pkt":"eJS0JASgYDjgxTWgCABFAAA4MZhAAD8G0K3AqAJkszzDMavKFGbYH58IMQLbuIAYAIB0sgAAAQEICjgjLR0TN8YzRUQAAQ=="}
00646{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":269,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":34,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655062569330,"flow_last_seen":1655062569427,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":290,"flow_tot_l4_payload_len":294,"flow_avg_l4_payload_len":73,"midstream":0,"thread_ts_msec":1655062569427,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":43978,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00688{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":274,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":28,"flow_state":"finished","flow_packets_processed":8,"flow_first_seen":1655054457330,"flow_last_seen":1655054457533,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1258,"flow_tot_l4_payload_len":1273,"flow_avg_l4_payload_len":159,"midstream":0,"thread_ts_msec":1655062569674,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.33","src_port":46468,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00560{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":274,"source":"whatsapp.pcap","alias":"nDPId-test","packets-captured":274,"packets-processed":273,"total-skipped-flows":0,"total-l4-data-len":23564,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":34,"total-detection-updates":0,"total-updates":0,"current-active-flows":6,"total-active-flows":34,"total-idle-flows":28,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":226,"global_ts_msec":1655063661893}
00581{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":274,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":35,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655063661893,"flow_last_seen":1655063661893,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655063661893,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.33","src_port":40990,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00483{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":274,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":1,"flow_last_seen":1655063661893,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655063661893,"pkt":"eJS0JASgYDjgxTWgCABFAAA86plAAD8GF7jAqAJkszzDIaAeFGY4VRBmAAAAAKAC\/\/\/+RwAAAgQFtAQCCAoF0w05AAAAAAEDAwk="}
00469{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":275,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":2,"flow_last_seen":1655063661925,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655063661925,"pkt":"eJS0JASgYDjgxTWgCABFAAA06ppAAD8GF7\/AqAJkszzDIaAeFGY4VRBnHmH5pIAQAKyJNgAAAQEICgXTDVr1t5VE"}
00476{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":276,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":3,"flow_last_seen":1655063661926,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655063661926,"pkt":"eJS0JASgYDjgxTWgCABFAAA46ptAAD8GF7rAqAJkszzDIaAeFGY4VRBnHmH5pIAYAKxD5AAAAQEICgXTDVv1t5VERUQAAQ=="}
00642{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":277,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":35,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655063661893,"flow_last_seen":1655063661927,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":7,"flow_tot_l4_payload_len":11,"flow_avg_l4_payload_len":2,"midstream":0,"thread_ts_msec":1655063661927,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.33","src_port":40990,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00560{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":282,"source":"whatsapp.pcap","alias":"nDPId-test","packets-captured":282,"packets-processed":281,"total-skipped-flows":0,"total-l4-data-len":24837,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":35,"total-detection-updates":0,"total-updates":0,"current-active-flows":7,"total-active-flows":35,"total-idle-flows":28,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":232,"global_ts_msec":1655064434682}
00581{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":282,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":36,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655064434682,"flow_last_seen":1655064434682,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655064434682,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":45290,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00484{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":282,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":1,"flow_last_seen":1655064434682,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655064434682,"pkt":"eJS0JASgYDjgxTWgCABFAAA8Z49AAD8GmrLAqAJkszzDMbDqFGZ3oUxiAAAAAKAC\/\/\/KHwAAAgQFtAQCCArGt\/RXAAAAAAEDAwk="}
00468{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":283,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":2,"flow_last_seen":1655064434714,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655064434714,"pkt":"eJS0JASgYDjgxTWgCABFAAA0Z5BAAD8GmrnAqAJkszzDMbDqFGZ3oUxjZjrG2IAQAKzrtwAAAQEICsa39HeqpjSg"}
00476{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":284,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":3,"flow_last_seen":1655064434759,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655064434759,"pkt":"eJS0JASgYDjgxTWgCABFAAA4Z5FAAD8GmrTAqAJkszzDMbDqFGZ3oUxjZjrG2IAYAKymOQAAAQEICsa39KSqpjSgRUQAAQ=="}
00646{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":285,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":36,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655064434682,"flow_last_seen":1655064434792,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":279,"flow_tot_l4_payload_len":283,"flow_avg_l4_payload_len":70,"midstream":0,"thread_ts_msec":1655064434792,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":45290,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00688{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":290,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":29,"flow_state":"finished","flow_packets_processed":8,"flow_first_seen":1655056441533,"flow_last_seen":1655056441715,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1258,"flow_tot_l4_payload_len":1273,"flow_avg_l4_payload_len":159,"midstream":0,"thread_ts_msec":1655064435041,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.33","src_port":47360,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00560{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":290,"source":"whatsapp.pcap","alias":"nDPId-test","packets-captured":290,"packets-processed":289,"total-skipped-flows":0,"total-l4-data-len":25160,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":36,"total-detection-updates":0,"total-updates":0,"current-active-flows":7,"total-active-flows":36,"total-idle-flows":29,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":239,"global_ts_msec":1655065264797}
00581{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":290,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":37,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655065264797,"flow_last_seen":1655065264797,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655065264797,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":51544,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00483{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":290,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":1,"flow_last_seen":1655065264797,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655065264797,"pkt":"eJS0JASgYDjgxTWgCABFAAA8ttVAAD8GS2zAqAJkszzDMclYFGbchY4CAAAAAKAC\/\/8wGwAAAgQFtAQCCApH\/04jAAAAAAEDAwg="}
00469{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":291,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":2,"flow_last_seen":1655065264828,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655065264828,"pkt":"eJS0JASgYDjgxTWgCABFAAA0ttZAAD8GS3PAqAJkszzDMclYFGbchY4DukzwuYAQAVeNLQAAAQEICkf\/TkbK+lov"}
00477{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":292,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":3,"flow_last_seen":1655065265098,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655065265098,"pkt":"eJS0JASgYDjgxTWgCABFAAA4ttdAAD8GS27AqAJkszzDMclYFGbchY4DukzwuYAYAVdG0gAAAQEICkf\/T1DK+lovRUQAAQ=="}
00643{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":293,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":37,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655065264797,"flow_last_seen":1655065265128,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":11,"flow_tot_l4_payload_len":15,"flow_avg_l4_payload_len":3,"midstream":0,"thread_ts_msec":1655065265128,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":51544,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00560{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":298,"source":"whatsapp.pcap","alias":"nDPId-test","packets-captured":298,"packets-processed":297,"total-skipped-flows":0,"total-l4-data-len":25440,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":37,"total-detection-updates":0,"total-updates":0,"current-active-flows":8,"total-active-flows":37,"total-idle-flows":29,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":245,"global_ts_msec":1655065885451}
00581{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":298,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":38,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655065885451,"flow_last_seen":1655065885451,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655065885451,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":47948,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00482{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":298,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":1,"flow_last_seen":1655065885451,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655065885451,"pkt":"eJS0JASgYDjgxTWgCABFAAA8arBAAD8Gl5HAqAJkszzDMbtMFGZqrJ7gAAAAAKAC\/\/9fsQAAAgQFtAQCCApxKmRoAAAAAAEDAwk="}
00468{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":299,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":2,"flow_last_seen":1655065885484,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655065885484,"pkt":"eJS0JASgYDjgxTWgCABFAAA0arFAAD8Gl5jAqAJkszzDMbtMFGZqrJ7h+p4p8oAQAIDu2wAAAQEICnEqZIk6KEA5"}
00476{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":300,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":3,"flow_last_seen":1655065885533,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655065885533,"pkt":"eJS0JASgYDjgxTWgCABFAAA4arJAAD8Gl5PAqAJkszzDMbtMFGZqrJ7h+p4p8oAYAICpZQAAAQEICnEqZK46KEA5RUQAAQ=="}
00646{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":301,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":38,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655065885451,"flow_last_seen":1655065885566,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":278,"flow_tot_l4_payload_len":282,"flow_avg_l4_payload_len":70,"midstream":0,"thread_ts_msec":1655065885566,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":47948,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00581{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":305,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":39,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655065885823,"flow_last_seen":1655065885823,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655065885823,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":51724,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00482{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":305,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":39,"flow_packet_id":1,"flow_last_seen":1655065885823,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655065885823,"pkt":"eJS0JASgYDjgxTWgCABFAAA8ghFAAD8GgDDAqAJkszzDMcoMFGZjsgDIAAAAAKAC\/\/8NZwAAAgQFtAQCCApICHYoAAAAAAEDAwg="}
00468{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":306,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":39,"flow_packet_id":2,"flow_last_seen":1655065885823,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655065885823,"pkt":"eJS0JASgYDjgxTWgCABFAAA0ghJAAD8GgDfAqAJkszzDMcoMFGZjsgDJIofjooAQAVdpNQAAAQEICkgIdkmT2Dd0"}
00476{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":307,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":39,"flow_packet_id":3,"flow_last_seen":1655065885823,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655065885823,"pkt":"eJS0JASgYDjgxTWgCABFAAA4ghNAAD8GgDLAqAJkszzDMcoMFGZjsgDJIofjooAYAVcjvgAAAQEICkgIdm+T2Dd0RUQAAQ=="}
00646{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":308,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":39,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655065885823,"flow_last_seen":1655065885823,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":273,"flow_tot_l4_payload_len":277,"flow_avg_l4_payload_len":69,"midstream":0,"thread_ts_msec":1655065885823,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":51724,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00561{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":313,"source":"whatsapp.pcap","alias":"nDPId-test","packets-captured":313,"packets-processed":312,"total-skipped-flows":0,"total-l4-data-len":26320,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":39,"total-detection-updates":0,"total-updates":0,"current-active-flows":10,"total-active-flows":39,"total-idle-flows":29,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":256,"global_ts_msec":1655067574156}
00581{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":313,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":40,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655067574156,"flow_last_seen":1655067574156,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655067574156,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":45334,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00484{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":313,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":40,"flow_packet_id":1,"flow_last_seen":1655067574156,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655067574156,"pkt":"eJS0JASgYDjgxTWgCABFAAA8ZktAAD8Gm\/bAqAJkszzDMbEWFGZP\/CSfAAAAAKAC\/\/80aAAAAgQFtAQCCArGuNlKAAAAAAEDAwk="}
00471{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":314,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":40,"flow_packet_id":2,"flow_last_seen":1655067574187,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655067574187,"pkt":"eJS0JASgYDjgxTWgCABFAAA0ZkxAAD8Gm\/3AqAJkszzDMbEWFGZP\/CSg\/FJ4JoAQAKwGCgAAAQEICsa42a+DX2Qy"}
00479{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":315,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":40,"flow_packet_id":3,"flow_last_seen":1655067574192,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655067574192,"pkt":"eJS0JASgYDjgxTWgCABFAAA4Zk1AAD8Gm\/jAqAJkszzDMbEWFGZP\/CSg\/FJ4JoAYAKzAswAAAQEICsa42bSDX2QyRUQAAQ=="}
00646{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":316,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":40,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655067574156,"flow_last_seen":1655067574223,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":279,"flow_tot_l4_payload_len":283,"flow_avg_l4_payload_len":70,"midstream":0,"thread_ts_msec":1655067574223,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":45334,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00688{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":321,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":30,"flow_state":"finished","flow_packets_processed":8,"flow_first_seen":1655059510580,"flow_last_seen":1655059510757,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1258,"flow_tot_l4_payload_len":1273,"flow_avg_l4_payload_len":159,"midstream":0,"thread_ts_msec":1655067574418,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.33","src_port":39828,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00581{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":321,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":41,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655068071917,"flow_last_seen":1655068071917,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655068071917,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":52152,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00483{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":321,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":1,"flow_last_seen":1655068071917,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655068071917,"pkt":"eJS0JASgYDjgxTWgCABFAAA8f0dAAD8GgvrAqAJkszzDMcu4FGbUWpFrAAAAAKAC\/\/9c\/wAAAgQFtAQCCApIKiN2AAAAAAEDAwg="}
00468{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":322,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":2,"flow_last_seen":1655068071949,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655068071949,"pkt":"eJS0JASgYDjgxTWgCABFAAA0f0hAAD8GgwHAqAJkszzDMcu4FGbUWpFsCrZXEIAQAVd+jAAAAQEICkgqI5aouQE5"}
00476{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":323,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":3,"flow_last_seen":1655068072089,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655068072089,"pkt":"eJS0JASgYDjgxTWgCABFAAA4f0lAAD8GgvzAqAJkszzDMcu4FGbUWpFsCrZXEIAYAVc4rwAAAQEICkgqJCKouQE5RUQAAQ=="}
00646{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":324,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":41,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655068071917,"flow_last_seen":1655068072120,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":273,"flow_tot_l4_payload_len":277,"flow_avg_l4_payload_len":69,"midstream":0,"thread_ts_msec":1655068072120,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":52152,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00688{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":329,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":31,"flow_state":"finished","flow_packets_processed":9,"flow_first_seen":1655060495977,"flow_last_seen":1655060496256,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1258,"flow_tot_l4_payload_len":1317,"flow_avg_l4_payload_len":146,"midstream":0,"thread_ts_msec":1655068072357,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.33","src_port":40108,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00561{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":329,"source":"whatsapp.pcap","alias":"nDPId-test","packets-captured":329,"packets-processed":328,"total-skipped-flows":0,"total-l4-data-len":26960,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":41,"total-detection-updates":0,"total-updates":0,"current-active-flows":10,"total-active-flows":41,"total-idle-flows":31,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":269,"global_ts_msec":1655068204945}
00581{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":329,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":42,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655068204945,"flow_last_seen":1655068204945,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655068204945,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.33","src_port":41664,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00482{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":329,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":42,"flow_packet_id":1,"flow_last_seen":1655068204945,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655068204945,"pkt":"eJS0JASgYDjgxTWgCABFAAA8eR1AAD8GiTTAqAJkszzDIaLAFGY48OrHAAAAAKAC\/\/8oAgAAAgQFtAQCCAoF9wW8AAAAAAEDAwk="}
00469{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":330,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":42,"flow_packet_id":2,"flow_last_seen":1655068204976,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655068204976,"pkt":"eJS0JASgYDjgxTWgCABFAAA0eR5AAD8GiTvAqAJkszzDIaLAFGY48OrIWCi8FIAQAKyAowAAAQEICgX3Bdt\/K0Hp"}
00477{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":331,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":42,"flow_packet_id":3,"flow_last_seen":1655068204977,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655068204977,"pkt":"eJS0JASgYDjgxTWgCABFAAA4eR9AAD8GiTbAqAJkszzDIaLAFGY48OrIWCi8FIAYAKw7UQAAAQEICgX3Bdx\/K0HpRUQAAQ=="}
00642{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":332,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":42,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655068204945,"flow_last_seen":1655068204978,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":7,"flow_tot_l4_payload_len":11,"flow_avg_l4_payload_len":2,"midstream":0,"thread_ts_msec":1655068204978,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.33","src_port":41664,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00581{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":337,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":43,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655068672605,"flow_last_seen":1655068672605,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655068672605,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":52294,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00482{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":337,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":43,"flow_packet_id":1,"flow_last_seen":1655068672605,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655068672605,"pkt":"eJS0JASgYDjgxTWgCABFAAA8f7NAAD8Ggo7AqAJkszzDMcxGFGbT7kd7AAAAAKAC\/\/98VAAAAgQFtAQCCApIM03mAAAAAAEDAwg="}
00468{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":338,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":43,"flow_packet_id":2,"flow_last_seen":1655068672638,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655068672638,"pkt":"eJS0JASgYDjgxTWgCABFAAA0f7RAAD8GgpXAqAJkszzDMcxGFGbT7kd8DNw8XIAQAVenVgAAAQEICkgzTgfXLOHd"}
00476{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":339,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":43,"flow_packet_id":3,"flow_last_seen":1655068672650,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655068672650,"pkt":"eJS0JASgYDjgxTWgCABFAAA4f7VAAD8GgpDAqAJkszzDMcxGFGbT7kd8DNw8XIAYAVdh+QAAAQEICkgzThPXLOHdRUQAAQ=="}
00646{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":340,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":43,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655068672605,"flow_last_seen":1655068672682,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":273,"flow_tot_l4_payload_len":277,"flow_avg_l4_payload_len":69,"midstream":0,"thread_ts_msec":1655068672682,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":52294,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00561{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":345,"source":"whatsapp.pcap","alias":"nDPId-test","packets-captured":345,"packets-processed":344,"total-skipped-flows":0,"total-l4-data-len":28550,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":43,"total-detection-updates":0,"total-updates":0,"current-active-flows":12,"total-active-flows":43,"total-idle-flows":31,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":280,"global_ts_msec":1655069476999}
00581{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":345,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":44,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655069476999,"flow_last_seen":1655069476999,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655069476999,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.33","src_port":41722,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00483{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":345,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":1,"flow_last_seen":1655069476999,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655069476999,"pkt":"eJS0JASgYDjgxTWgCABFAAA8v0dAAD8GQwrAqAJkszzDIaL6FGZl3G3iAAAAAKAC\/\/\/JXwAAAgQFtAQCCAoF+bQbAAAAAAEDAwk="}
00468{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":346,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":2,"flow_last_seen":1655069477033,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655069477033,"pkt":"eJS0JASgYDjgxTWgCABFAAA0v0hAAD8GQxHAqAJkszzDIaL6FGZl3G3jvQquJIAQAKzBYgAAAQEICgX5tE0ysJf9"}
00476{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":347,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":3,"flow_last_seen":1655069477034,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655069477034,"pkt":"eJS0JASgYDjgxTWgCABFAAA4v0lAAD8GQwzAqAJkszzDIaL6FGZl3G3jvQquJIAYAKx8DgAAAQEICgX5tFAysJf9RUQAAQ=="}
00649{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":348,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":44,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655069476999,"flow_last_seen":1655069477066,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1269,"flow_tot_l4_payload_len":1273,"flow_avg_l4_payload_len":318,"midstream":0,"thread_ts_msec":1655069477066,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.33","src_port":41722,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00683{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":353,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":33,"flow_state":"finished","flow_packets_processed":8,"flow_first_seen":1655061873005,"flow_last_seen":1655061873914,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":340,"flow_tot_l4_payload_len":625,"flow_avg_l4_payload_len":78,"midstream":0,"thread_ts_msec":1655069477452,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"31.13.93.54","src_port":49096,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00685{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":353,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":32,"flow_state":"finished","flow_packets_processed":8,"flow_first_seen":1655061657436,"flow_last_seen":1655061657966,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":290,"flow_tot_l4_payload_len":334,"flow_avg_l4_payload_len":41,"midstream":0,"thread_ts_msec":1655069477452,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":43954,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00561{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":353,"source":"whatsapp.pcap","alias":"nDPId-test","packets-captured":353,"packets-processed":352,"total-skipped-flows":0,"total-l4-data-len":29867,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":44,"total-detection-updates":0,"total-updates":0,"current-active-flows":11,"total-active-flows":44,"total-idle-flows":33,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":288,"global_ts_msec":1655071168997}
00581{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":353,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":45,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655071168997,"flow_last_seen":1655071168997,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655071168997,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":48234,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00483{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":353,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":45,"flow_packet_id":1,"flow_last_seen":1655071168997,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655071168997,"pkt":"eJS0JASgYDjgxTWgCABFAAA8\/oFAAD8GA8DAqAJkszzDMbxqFGaCVc7FAAAAAKAC\/\/8bsQAAAgQFtAQCCApxNV+xAAAAAAEDAwk="}
00469{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":354,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":45,"flow_packet_id":2,"flow_last_seen":1655071169028,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655071169028,"pkt":"eJS0JASgYDjgxTWgCABFAAA0\/oJAAD8GA8fAqAJkszzDMbxqFGaCVc7GXkxmWYAQAIBN7gAAAQEICnE1X+Ud8hk1"}
00477{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":355,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":45,"flow_packet_id":3,"flow_last_seen":1655071169033,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655071169033,"pkt":"eJS0JASgYDjgxTWgCABFAAA4\/oNAAD8GA8LAqAJkszzDMbxqFGaCVc7GXkxmWYAYAIAImAAAAQEICnE1X+od8hk1RUQAAQ=="}
00646{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":356,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":45,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655071168997,"flow_last_seen":1655071169064,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":278,"flow_tot_l4_payload_len":282,"flow_avg_l4_payload_len":70,"midstream":0,"thread_ts_msec":1655071169064,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":48234,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00688{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":361,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":35,"flow_state":"finished","flow_packets_processed":8,"flow_first_seen":1655063661893,"flow_last_seen":1655063662083,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1258,"flow_tot_l4_payload_len":1273,"flow_avg_l4_payload_len":159,"midstream":0,"thread_ts_msec":1655071169315,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.33","src_port":40990,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00685{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":361,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":34,"flow_state":"finished","flow_packets_processed":8,"flow_first_seen":1655062569330,"flow_last_seen":1655062569674,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":290,"flow_tot_l4_payload_len":334,"flow_avg_l4_payload_len":41,"midstream":0,"thread_ts_msec":1655071169315,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":43978,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00581{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":361,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":46,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655071203961,"flow_last_seen":1655071203961,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655071203961,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":55038,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00482{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":361,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":46,"flow_packet_id":1,"flow_last_seen":1655071203961,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655071203961,"pkt":"eJS0JASgYDjgxTWgCABFAAA8rm1AAD8GU9TAqAJkszzDMdb+FGbxdk6iAAAAAKAC\/\/+sqwAAAgQFtAQCCApIWe4BAAAAAAEDAwg="}
00468{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":362,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":46,"flow_packet_id":2,"flow_last_seen":1655071203990,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655071203990,"pkt":"eJS0JASgYDjgxTWgCABFAAA0rm5AAD8GU9vAqAJkszzDMdb+FGbxdk6jUznIyYAQAVd2AQAAAQEICkhZ7h+G1MEa"}
00476{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":363,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":46,"flow_packet_id":3,"flow_last_seen":1655071203998,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655071203998,"pkt":"eJS0JASgYDjgxTWgCABFAAA4rm9AAD8GU9bAqAJkszzDMdb+FGbxdk6jUznIyYAYAVcwqAAAAQEICkhZ7ieG1MEaRUQAAQ=="}
00646{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":364,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":46,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655071203961,"flow_last_seen":1655071204028,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":273,"flow_tot_l4_payload_len":277,"flow_avg_l4_payload_len":69,"midstream":0,"thread_ts_msec":1655071204028,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":55038,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00579{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":366,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":47,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655071204543,"flow_last_seen":1655071204543,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655071204543,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"31.13.70.50","src_port":55476,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00483{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":366,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":47,"flow_packet_id":1,"flow_last_seen":1655071204543,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655071204543,"pkt":"eJS0JASgYDjgxTWgCABFAAA8pS5AAD8GbkLAqAJkHw1GMti0FGbC7URPAAAAAKAC\/\/\/+SAAAAgQFtAQCCAqV4ZcxAAAAAAEDAwg="}
00468{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":367,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":47,"flow_packet_id":2,"flow_last_seen":1655071204704,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655071204704,"pkt":"eJS0JASgYDjgxTWgCABFAAA0pS9AAD8GbknAqAJkHw1GMti0FGbC7URQktIbLIAQAVeaBwAAAQEICpXhl9HVew2N"}
00476{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":368,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":47,"flow_packet_id":3,"flow_last_seen":1655071204709,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655071204709,"pkt":"eJS0JASgYDjgxTWgCABFAAA4pTBAAD8GbkTAqAJkHw1GMti0FGbC7URQktIbLIAYAVdUsQAAAQEICpXhl9bVew2NRUQAAQ=="}
00644{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":369,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":47,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655071204543,"flow_last_seen":1655071204870,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":273,"flow_tot_l4_payload_len":277,"flow_avg_l4_payload_len":69,"midstream":0,"thread_ts_msec":1655071204870,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"31.13.70.50","src_port":55476,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00561{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":374,"source":"whatsapp.pcap","alias":"nDPId-test","packets-captured":374,"packets-processed":373,"total-skipped-flows":0,"total-l4-data-len":30706,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":47,"total-detection-updates":0,"total-updates":0,"current-active-flows":12,"total-active-flows":47,"total-idle-flows":35,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":306,"global_ts_msec":1655073402411}
00581{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":374,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":48,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655073402411,"flow_last_seen":1655073402411,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655073402411,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":48538,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00483{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":374,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":48,"flow_packet_id":1,"flow_last_seen":1655073402411,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655073402411,"pkt":"eJS0JASgYDjgxTWgCABFAAA8dBJAAD8Gji\/AqAJkszzDMb2aFGahzCxlAAAAAKAC\/\/+a8AAAAgQFtAQCCApxUGIQAAAAAAEDAwk="}
00468{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":375,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":48,"flow_packet_id":2,"flow_last_seen":1655073402445,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655073402445,"pkt":"eJS0JASgYDjgxTWgCABFAAA0dBNAAD8GjjbAqAJkszzDMb2aFGahzCxmjLLTN4AQAICpvAAAAQEICnFQYjPQSe8a"}
00476{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":376,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":48,"flow_packet_id":3,"flow_last_seen":1655073402465,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655073402465,"pkt":"eJS0JASgYDjgxTWgCABFAAA4dBRAAD8GjjHAqAJkszzDMb2aFGahzCxmjLLTN4AYAIBkWAAAAQEICnFQYkbQSe8aRUQAAQ=="}
00646{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":377,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":48,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655073402411,"flow_last_seen":1655073402498,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":278,"flow_tot_l4_payload_len":282,"flow_avg_l4_payload_len":70,"midstream":0,"thread_ts_msec":1655073402498,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":48538,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00685{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":382,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":36,"flow_state":"finished","flow_packets_processed":8,"flow_first_seen":1655064434682,"flow_last_seen":1655064435041,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":279,"flow_tot_l4_payload_len":323,"flow_avg_l4_payload_len":40,"midstream":0,"thread_ts_msec":1655073402833,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":45290,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00685{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":382,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":37,"flow_state":"finished","flow_packets_processed":8,"flow_first_seen":1655065264797,"flow_last_seen":1655065265368,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":262,"flow_tot_l4_payload_len":280,"flow_avg_l4_payload_len":35,"midstream":0,"thread_ts_msec":1655073402833,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":51544,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00685{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":382,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":39,"flow_state":"finished","flow_packets_processed":8,"flow_first_seen":1655065885823,"flow_last_seen":1655065885823,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":273,"flow_tot_l4_payload_len":317,"flow_avg_l4_payload_len":39,"midstream":0,"thread_ts_msec":1655073402833,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":51724,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00685{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":382,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":38,"flow_state":"finished","flow_packets_processed":7,"flow_first_seen":1655065885451,"flow_last_seen":1655065885823,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":278,"flow_tot_l4_payload_len":563,"flow_avg_l4_payload_len":80,"midstream":0,"thread_ts_msec":1655073402833,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":47948,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00560{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":382,"source":"whatsapp.pcap","alias":"nDPId-test","packets-captured":382,"packets-processed":381,"total-skipped-flows":0,"total-l4-data-len":30991,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":48,"total-detection-updates":0,"total-updates":0,"current-active-flows":9,"total-active-flows":48,"total-idle-flows":39,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":316,"global_ts_msec":1655074111508}
00581{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":382,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":49,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655074111508,"flow_last_seen":1655074111508,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655074111508,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":45850,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00482{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":382,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":49,"flow_packet_id":1,"flow_last_seen":1655074111508,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655074111508,"pkt":"eJS0JASgYDjgxTWgCABFAAA8DYdAAD8G9LrAqAJkszzDMbMaFGYrB92KAAAAAKAC\/\/+Y9QAAAgQFtAQCCAo4NG1HAAAAAAEDAwk="}
00468{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":383,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":49,"flow_packet_id":2,"flow_last_seen":1655074111556,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655074111556,"pkt":"eJS0JASgYDjgxTWgCABFAAA0DYhAAD8G9MHAqAJkszzDMbMaFGYrB92LuiGK2IAQAIABZwAAAQEICjg0bW5hoB8L"}
00476{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":384,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":49,"flow_packet_id":3,"flow_last_seen":1655074111565,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655074111565,"pkt":"eJS0JASgYDjgxTWgCABFAAA4DYlAAD8G9LzAqAJkszzDMbMaFGYrB92LuiGK2IAYAIC8AwAAAQEICjg0bYBhoB8LRUQAAQ=="}
00646{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":385,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":49,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655074111508,"flow_last_seen":1655074111606,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":290,"flow_tot_l4_payload_len":294,"flow_avg_l4_payload_len":73,"midstream":0,"thread_ts_msec":1655074111606,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":45850,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00581{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":390,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":50,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655074455881,"flow_last_seen":1655074455881,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655074455881,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.33","src_port":42622,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00483{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":390,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":50,"flow_packet_id":1,"flow_last_seen":1655074455881,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655074455881,"pkt":"eJS0JASgYDjgxTWgCABFAAA8sLNAAD8GUZ7AqAJkszzDIaZ+FGbSFVW5AAAAAKAC\/\/\/0VAAAAgQFtAQCCAoGIjFpAAAAAAEDAwk="}
00469{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":391,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":50,"flow_packet_id":2,"flow_last_seen":1655074455913,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655074455913,"pkt":"eJS0JASgYDjgxTWgCABFAAA0sLRAAD8GUaXAqAJkszzDIaZ+FGbSFVW6wmRwfoAQAKwXRAAAAQEICgYiMYo6n51\/"}
00477{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":392,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":50,"flow_packet_id":3,"flow_last_seen":1655074455915,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655074455915,"pkt":"eJS0JASgYDjgxTWgCABFAAA4sLVAAD8GUaDAqAJkszzDIaZ+FGbSFVW6wmRwfoAYAKzR8QAAAQEICgYiMYs6n51\/RUQAAQ=="}
00642{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":393,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":50,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655074455881,"flow_last_seen":1655074455915,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":7,"flow_tot_l4_payload_len":11,"flow_avg_l4_payload_len":2,"midstream":0,"thread_ts_msec":1655074455915,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.33","src_port":42622,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00581{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":398,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":51,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655074681295,"flow_last_seen":1655074681295,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655074681295,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":58198,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00483{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":398,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":51,"flow_packet_id":1,"flow_last_seen":1655074681295,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655074681295,"pkt":"eJS0JASgYDjgxTWgCABFAAA81rZAAD8GK4vAqAJkszzDMeNWFGYDhPITAAAAAKAC\/\/\/bRgAAAgQFtAQCCApIjv1aAAAAAAEDAwg="}
00469{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":399,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":51,"flow_packet_id":2,"flow_last_seen":1655074681328,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655074681328,"pkt":"eJS0JASgYDjgxTWgCABFAAA01rdAAD8GK5LAqAJkszzDMeNWFGYDhPIU+mPdyoAQAVfaOgAAAQEICkiO\/XvslGmN"}
00477{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":400,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":51,"flow_packet_id":3,"flow_last_seen":1655074681508,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655074681508,"pkt":"eJS0JASgYDjgxTWgCABFAAA41rhAAD8GK43AqAJkszzDMeNWFGYDhPIU+mPdyoAYAVeUNgAAAQEICkiO\/i7slGmNRUQAAQ=="}
00646{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":401,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":51,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655074681295,"flow_last_seen":1655074681541,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":273,"flow_tot_l4_payload_len":277,"flow_avg_l4_payload_len":69,"midstream":0,"thread_ts_msec":1655074681541,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":58198,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00561{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":406,"source":"whatsapp.pcap","alias":"nDPId-test","packets-captured":406,"packets-processed":405,"total-skipped-flows":0,"total-l4-data-len":32915,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":51,"total-detection-updates":0,"total-updates":0,"current-active-flows":12,"total-active-flows":51,"total-idle-flows":39,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":332,"global_ts_msec":1655075014427}
00581{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":406,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":52,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655075014427,"flow_last_seen":1655075014427,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655075014427,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.33","src_port":42796,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00482{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":406,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":52,"flow_packet_id":1,"flow_last_seen":1655075014427,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655075014427,"pkt":"eJS0JASgYDjgxTWgCABFAAA84Y1AAD8GIMTAqAJkszzDIacsFGb7al66AAAAAKAC\/\/87hQAAAgQFtAQCCAoGKrcsAAAAAAEDAwk="}
00469{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":407,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":52,"flow_packet_id":2,"flow_last_seen":1655075014457,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655075014457,"pkt":"eJS0JASgYDjgxTWgCABFAAA04Y5AAD8GIMvAqAJkszzDIacsFGb7al674\/2+D4AQAKzv2QAAAQEICgYqt1ks76qT"}
00477{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":408,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":52,"flow_packet_id":3,"flow_last_seen":1655075014458,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655075014458,"pkt":"eJS0JASgYDjgxTWgCABFAAA44Y9AAD8GIMbAqAJkszzDIacsFGb7al674\/2+D4AYAKyqhgAAAQEICgYqt1ss76qTRUQAAQ=="}
00642{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":409,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":52,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655075014427,"flow_last_seen":1655075014459,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":7,"flow_tot_l4_payload_len":11,"flow_avg_l4_payload_len":2,"midstream":0,"thread_ts_msec":1655075014459,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.33","src_port":42796,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00685{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":414,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":40,"flow_state":"finished","flow_packets_processed":8,"flow_first_seen":1655067574156,"flow_last_seen":1655067574418,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":279,"flow_tot_l4_payload_len":323,"flow_avg_l4_payload_len":40,"midstream":0,"thread_ts_msec":1655075014609,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":45334,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00561{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":414,"source":"whatsapp.pcap","alias":"nDPId-test","packets-captured":414,"packets-processed":413,"total-skipped-flows":0,"total-l4-data-len":34188,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":52,"total-detection-updates":0,"total-updates":0,"current-active-flows":12,"total-active-flows":52,"total-idle-flows":40,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":339,"global_ts_msec":1655075686356}
00581{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":414,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":53,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655075686356,"flow_last_seen":1655075686356,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655075686356,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.33","src_port":43152,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00483{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":414,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":53,"flow_packet_id":1,"flow_last_seen":1655075686356,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655075686356,"pkt":"eJS0JASgYDjgxTWgCABFAAA8QvtAAD8Gv1bAqAJkszzDIaiQFGbxmYdKAAAAAKAC\/\/\/ajwAAAgQFtAQCCAoGNPf0AAAAAAEDAwk="}
00468{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":415,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":53,"flow_packet_id":2,"flow_last_seen":1655075686389,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655075686389,"pkt":"eJS0JASgYDjgxTWgCABFAAA0QvxAAD8Gv13AqAJkszzDIaiQFGbxmYdLWdXXDoAQAKw7swAAAQEICgY0+BVuVC2V"}
00476{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":416,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":53,"flow_packet_id":3,"flow_last_seen":1655075686390,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655075686390,"pkt":"eJS0JASgYDjgxTWgCABFAAA4Qv1AAD8Gv1jAqAJkszzDIaiQFGbxmYdLWdXXDoAYAKz2XwAAAQEICgY0+BduVC2VRUQAAQ=="}
00642{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":417,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":53,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655075686356,"flow_last_seen":1655075686391,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":7,"flow_tot_l4_payload_len":11,"flow_avg_l4_payload_len":2,"midstream":0,"thread_ts_msec":1655075686391,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.33","src_port":43152,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00688{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":422,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":42,"flow_state":"finished","flow_packets_processed":8,"flow_first_seen":1655068204945,"flow_last_seen":1655068205140,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1258,"flow_tot_l4_payload_len":1273,"flow_avg_l4_payload_len":159,"midstream":0,"thread_ts_msec":1655075686549,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.33","src_port":41664,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00685{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":422,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":41,"flow_state":"finished","flow_packets_processed":8,"flow_first_seen":1655068071917,"flow_last_seen":1655068072357,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":273,"flow_tot_l4_payload_len":317,"flow_avg_l4_payload_len":39,"midstream":0,"thread_ts_msec":1655075686549,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":52152,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00561{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":422,"source":"whatsapp.pcap","alias":"nDPId-test","packets-captured":422,"packets-processed":421,"total-skipped-flows":0,"total-l4-data-len":35461,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":53,"total-detection-updates":0,"total-updates":0,"current-active-flows":11,"total-active-flows":53,"total-idle-flows":42,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":347,"global_ts_msec":1655078415178}
00581{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":422,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":54,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655078415178,"flow_last_seen":1655078415178,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655078415178,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":46732,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00482{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":422,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":54,"flow_packet_id":1,"flow_last_seen":1655078415178,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655078415178,"pkt":"eJS0JASgYDjgxTWgCABFAAA8CblAAD8G+IjAqAJkszzDMbaMFGYZMLRzAAAAAKAC\/\/8IFAAAAgQFtAQCCArHDabLAAAAAAEDAwk="}
00469{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":423,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":54,"flow_packet_id":2,"flow_last_seen":1655078415208,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655078415208,"pkt":"eJS0JASgYDjgxTWgCABFAAA0CbpAAD8G+I\/AqAJkszzDMbaMFGYZMLR0Md5NzYAQAKysVQAAAQEICscNpurDrEZZ"}
00476{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":424,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":54,"flow_packet_id":3,"flow_last_seen":1655078415272,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655078415272,"pkt":"eJS0JASgYDjgxTWgCABFAAA4CbtAAD8G+IrAqAJkszzDMbaMFGYZMLR0Md5NzYAYAKxmxQAAAQEICscNpynDrEZZRUQAAQ=="}
00646{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":425,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":54,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655078415178,"flow_last_seen":1655078415302,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":279,"flow_tot_l4_payload_len":283,"flow_avg_l4_payload_len":70,"midstream":0,"thread_ts_msec":1655078415302,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":46732,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00581{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":430,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":55,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655078417966,"flow_last_seen":1655078417966,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655078417966,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":58882,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00482{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":430,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":55,"flow_packet_id":1,"flow_last_seen":1655078417966,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655078417966,"pkt":"eJS0JASgYDjgxTWgCABFAAA8aDVAAD8GmgzAqAJkszzDMeYCFGZBxg2JAAAAAKAC\/\/96TQAAAgQFtAQCCApIyAG3AAAAAAEDAwg="}
00468{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":431,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":55,"flow_packet_id":2,"flow_last_seen":1655078418007,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655078418007,"pkt":"eJS0JASgYDjgxTWgCABFAAA0aDZAAD8GmhPAqAJkszzDMeYCFGZBxg2KkGSxpoAQAVfcVQAAAQEICkjIAeVbmS2L"}
00477{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":432,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":55,"flow_packet_id":3,"flow_last_seen":1655078418014,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655078418014,"pkt":"eJS0JASgYDjgxTWgCABFAAA4aDdAAD8Gmg7AqAJkszzDMeYCFGZBxg2KkGSxpoAYAVeW\/gAAAQEICkjIAetbmS2LRUQAAQ=="}
00646{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":433,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":55,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655078417966,"flow_last_seen":1655078418062,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":273,"flow_tot_l4_payload_len":277,"flow_avg_l4_payload_len":69,"midstream":0,"thread_ts_msec":1655078418062,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":58882,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00581{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":435,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":56,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655078418150,"flow_last_seen":1655078418150,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655078418150,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":46598,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00483{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":435,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":56,"flow_packet_id":1,"flow_last_seen":1655078418150,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655078418150,"pkt":"eJS0JASgYDjgxTWgCABFAAA86upAAD8GF1fAqAJkszzDMbYGFGbAe04zAAAAAKAC\/\/8ChgAAAgQFtAQCCAo4N\/qqAAAAAAEDAwk="}
00468{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":436,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":56,"flow_packet_id":2,"flow_last_seen":1655078418150,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655078418150,"pkt":"eJS0JASgYDjgxTWgCABFAAA06utAAD8GF17AqAJkszzDMbYGFGbAe040KCJ2LIAQAIB2bQAAAQEICjg3+s2LqpA6"}
00476{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":437,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":56,"flow_packet_id":3,"flow_last_seen":1655078418150,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655078418150,"pkt":"eJS0JASgYDjgxTWgCABFAAA46uxAAD8GF1nAqAJkszzDMbYGFGbAe040KCJ2LIAYAIAxGAAAAQEICjg3+tGLqpA6RUQAAQ=="}
00646{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":438,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":56,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655078418150,"flow_last_seen":1655078418150,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":290,"flow_tot_l4_payload_len":294,"flow_avg_l4_payload_len":73,"midstream":0,"thread_ts_msec":1655078418150,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":46598,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00688{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":442,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":44,"flow_state":"finished","flow_packets_processed":8,"flow_first_seen":1655069476999,"flow_last_seen":1655069477452,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1269,"flow_tot_l4_payload_len":1317,"flow_avg_l4_payload_len":164,"midstream":0,"thread_ts_msec":1655078418150,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.33","src_port":41722,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00685{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":442,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":43,"flow_state":"finished","flow_packets_processed":8,"flow_first_seen":1655068672605,"flow_last_seen":1655068672866,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":273,"flow_tot_l4_payload_len":317,"flow_avg_l4_payload_len":39,"midstream":0,"thread_ts_msec":1655078418150,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":52294,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00561{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":442,"source":"whatsapp.pcap","alias":"nDPId-test","packets-captured":442,"packets-processed":441,"total-skipped-flows":0,"total-l4-data-len":36355,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":56,"total-detection-updates":0,"total-updates":0,"current-active-flows":12,"total-active-flows":56,"total-idle-flows":44,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":365,"global_ts_msec":1655079015860}
00581{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":442,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":57,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655079015860,"flow_last_seen":1655079015860,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655079015860,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":46768,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00482{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":442,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":57,"flow_packet_id":1,"flow_last_seen":1655079015860,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655079015860,"pkt":"eJS0JASgYDjgxTWgCABFAAA8+71AAD8GBoTAqAJkszzDMbawFGbU0lPTAAAAAKAC\/\/+CegAAAgQFtAQCCArHFtE1AAAAAAEDAwk="}
00468{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":443,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":57,"flow_packet_id":2,"flow_last_seen":1655079015890,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655079015890,"pkt":"eJS0JASgYDjgxTWgCABFAAA0+75AAD8GBovAqAJkszzDMbawFGbU0lPU4I1M54AQAKyMuwAAAQEICscW0VNPFaco"}
00476{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":444,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":57,"flow_packet_id":3,"flow_last_seen":1655079015897,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655079015897,"pkt":"eJS0JASgYDjgxTWgCABFAAA4+79AAD8GBobAqAJkszzDMbawFGbU0lPU4I1M54AYAKxHYwAAAQEICscW0VpPFacoRUQAAQ=="}
00646{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":445,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":57,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655079015860,"flow_last_seen":1655079015927,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":279,"flow_tot_l4_payload_len":283,"flow_avg_l4_payload_len":70,"midstream":0,"thread_ts_msec":1655079015927,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":46768,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00685{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":450,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":46,"flow_state":"finished","flow_packets_processed":5,"flow_first_seen":1655071203961,"flow_last_seen":1655071204088,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":273,"flow_tot_l4_payload_len":277,"flow_avg_l4_payload_len":55,"midstream":0,"thread_ts_msec":1655079016137,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":55038,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00683{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":450,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":47,"flow_state":"finished","flow_packets_processed":8,"flow_first_seen":1655071204543,"flow_last_seen":1655071205708,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":273,"flow_tot_l4_payload_len":277,"flow_avg_l4_payload_len":34,"midstream":0,"thread_ts_msec":1655079016137,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"31.13.70.50","src_port":55476,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00685{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":450,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":45,"flow_state":"finished","flow_packets_processed":8,"flow_first_seen":1655071168997,"flow_last_seen":1655071169315,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":278,"flow_tot_l4_payload_len":285,"flow_avg_l4_payload_len":35,"midstream":0,"thread_ts_msec":1655079016137,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":48234,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00581{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":450,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":58,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655079242727,"flow_last_seen":1655079242727,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655079242727,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.33","src_port":45130,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00482{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":450,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":58,"flow_packet_id":1,"flow_last_seen":1655079242727,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655079242727,"pkt":"eJS0JASgYDjgxTWgCABFAAA81XtAAD8GLNbAqAJkszzDIbBKFGYSKeedAAAAAKAC\/\/8NrgAAAgQFtAQCCAoGazwDAAAAAAEDAwk="}
00468{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":451,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":58,"flow_packet_id":2,"flow_last_seen":1655079242758,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655079242758,"pkt":"eJS0JASgYDjgxTWgCABFAAA01XxAAD8GLN3AqAJkszzDIbBKFGYSKeee9mtN3YAQAKzI+QAAAQEICgZrPCF7C7NT"}
00476{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":452,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":58,"flow_packet_id":3,"flow_last_seen":1655079242759,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655079242759,"pkt":"eJS0JASgYDjgxTWgCABFAAA41X1AAD8GLNjAqAJkszzDIbBKFGYSKeee9mtN3YAYAKyDpgAAAQEICgZrPCN7C7NTRUQAAQ=="}
00642{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":453,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":58,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655079242727,"flow_last_seen":1655079242760,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":7,"flow_tot_l4_payload_len":11,"flow_avg_l4_payload_len":2,"midstream":0,"thread_ts_msec":1655079242760,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.33","src_port":45130,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00561{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":458,"source":"whatsapp.pcap","alias":"nDPId-test","packets-captured":458,"packets-processed":457,"total-skipped-flows":0,"total-l4-data-len":37951,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":58,"total-detection-updates":0,"total-updates":0,"current-active-flows":11,"total-active-flows":58,"total-idle-flows":47,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":379,"global_ts_msec":1655085444940}
00581{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":458,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":59,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655085444940,"flow_last_seen":1655085444940,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655085444940,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":60328,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00482{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":458,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":59,"flow_packet_id":1,"flow_last_seen":1655085444940,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655085444940,"pkt":"eJS0JASgYDjgxTWgCABFAAA8OS9AAD8GyRLAqAJkszzDMeuoFGZwsQ0oAAAAAKAC\/\/8MiAAAAgQFtAQCCApJMzrhAAAAAAEDAwg="}
00468{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":459,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":59,"flow_packet_id":2,"flow_last_seen":1655085444971,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655085444971,"pkt":"eJS0JASgYDjgxTWgCABFAAA0OTBAAD8GyRnAqAJkszzDMeuoFGZwsQ0pZQWH8YAQAVeTjwAAAQEICkkzOwA0eITQ"}
00476{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":460,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":59,"flow_packet_id":3,"flow_last_seen":1655085445085,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655085445085,"pkt":"eJS0JASgYDjgxTWgCABFAAA4OTFAAD8GyRTAqAJkszzDMeuoFGZwsQ0pZQWH8YAYAVdNzAAAAQEICkkzO3I0eITQRUQAAQ=="}
00646{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":461,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":59,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655085444940,"flow_last_seen":1655085445116,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":273,"flow_tot_l4_payload_len":277,"flow_avg_l4_payload_len":69,"midstream":0,"thread_ts_msec":1655085445116,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":60328,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00688{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":466,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":50,"flow_state":"finished","flow_packets_processed":8,"flow_first_seen":1655074455881,"flow_last_seen":1655074456133,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1258,"flow_tot_l4_payload_len":1273,"flow_avg_l4_payload_len":159,"midstream":0,"thread_ts_msec":1655085445318,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.33","src_port":42622,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00688{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":466,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":52,"flow_state":"finished","flow_packets_processed":8,"flow_first_seen":1655075014427,"flow_last_seen":1655075014609,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1258,"flow_tot_l4_payload_len":1273,"flow_avg_l4_payload_len":159,"midstream":0,"thread_ts_msec":1655085445318,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.33","src_port":42796,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00688{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":466,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":53,"flow_state":"finished","flow_packets_processed":8,"flow_first_seen":1655075686356,"flow_last_seen":1655075686549,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1258,"flow_tot_l4_payload_len":1273,"flow_avg_l4_payload_len":159,"midstream":0,"thread_ts_msec":1655085445318,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.33","src_port":43152,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00685{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":466,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":49,"flow_state":"finished","flow_packets_processed":8,"flow_first_seen":1655074111508,"flow_last_seen":1655074111844,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":290,"flow_tot_l4_payload_len":334,"flow_avg_l4_payload_len":41,"midstream":0,"thread_ts_msec":1655085445318,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":45850,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00685{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":466,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":51,"flow_state":"finished","flow_packets_processed":8,"flow_first_seen":1655074681295,"flow_last_seen":1655074681757,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":273,"flow_tot_l4_payload_len":317,"flow_avg_l4_payload_len":39,"midstream":0,"thread_ts_msec":1655085445318,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":58198,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00685{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":466,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":48,"flow_state":"finished","flow_packets_processed":8,"flow_first_seen":1655073402411,"flow_last_seen":1655073402833,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":278,"flow_tot_l4_payload_len":285,"flow_avg_l4_payload_len":35,"midstream":0,"thread_ts_msec":1655085445318,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":48538,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00560{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":466,"source":"whatsapp.pcap","alias":"nDPId-test","packets-captured":466,"packets-processed":465,"total-skipped-flows":0,"total-l4-data-len":38268,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":59,"total-detection-updates":0,"total-updates":0,"current-active-flows":6,"total-active-flows":59,"total-idle-flows":53,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":391,"global_ts_msec":1655089030478}
00581{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":466,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":60,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655089030478,"flow_last_seen":1655089030478,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655089030478,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":32798,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00482{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":466,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":60,"flow_packet_id":1,"flow_last_seen":1655089030478,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655089030478,"pkt":"eJS0JASgYDjgxTWgCABFAAA8PU5AAD8GxPPAqAJkszzDMYAeFGbXqdzGAAAAAKAC\/\/+LPgAAAgQFtAQCCApJafDnAAAAAAEDAwg="}
00468{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":467,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":60,"flow_packet_id":2,"flow_last_seen":1655089030510,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655089030510,"pkt":"eJS0JASgYDjgxTWgCABFAAA0PU9AAD8GxPrAqAJkszzDMYAeFGbXqdzHU7KHPoAQAVeFmQAAAQEICklp8QcyIyXX"}
00477{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":468,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":60,"flow_packet_id":3,"flow_last_seen":1655089030611,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655089030611,"pkt":"eJS0JASgYDjgxTWgCABFAAA4PVBAAD8GxPXAqAJkszzDMYAeFGbXqdzHU7KHPoAYAVc\/4gAAAQEICklp8W0yIyXXRUQAAQ=="}
00646{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":469,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":60,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655089030478,"flow_last_seen":1655089030643,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":273,"flow_tot_l4_payload_len":277,"flow_avg_l4_payload_len":69,"midstream":0,"thread_ts_msec":1655089030643,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":32798,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00685{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":474,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":54,"flow_state":"finished","flow_packets_processed":8,"flow_first_seen":1655078415178,"flow_last_seen":1655078415507,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":279,"flow_tot_l4_payload_len":323,"flow_avg_l4_payload_len":40,"midstream":0,"thread_ts_msec":1655089030857,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":46732,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00685{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":474,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":57,"flow_state":"finished","flow_packets_processed":8,"flow_first_seen":1655079015860,"flow_last_seen":1655079016137,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":279,"flow_tot_l4_payload_len":323,"flow_avg_l4_payload_len":40,"midstream":0,"thread_ts_msec":1655089030857,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":46768,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00688{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":474,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":58,"flow_state":"finished","flow_packets_processed":8,"flow_first_seen":1655079242727,"flow_last_seen":1655079242898,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1258,"flow_tot_l4_payload_len":1273,"flow_avg_l4_payload_len":159,"midstream":0,"thread_ts_msec":1655089030857,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.33","src_port":45130,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00685{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":474,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":55,"flow_state":"finished","flow_packets_processed":5,"flow_first_seen":1655078417966,"flow_last_seen":1655078418150,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":273,"flow_tot_l4_payload_len":277,"flow_avg_l4_payload_len":55,"midstream":0,"thread_ts_msec":1655089030857,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":58882,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00685{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":474,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":56,"flow_state":"finished","flow_packets_processed":7,"flow_first_seen":1655078418150,"flow_last_seen":1655078418150,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":290,"flow_tot_l4_payload_len":294,"flow_avg_l4_payload_len":42,"midstream":0,"thread_ts_msec":1655089030857,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":46598,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00560{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":474,"source":"whatsapp.pcap","alias":"nDPId-test","packets-captured":474,"packets-processed":473,"total-skipped-flows":0,"total-l4-data-len":38585,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":60,"total-detection-updates":0,"total-updates":0,"current-active-flows":2,"total-active-flows":60,"total-idle-flows":58,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":402,"global_ts_msec":1655090233457}
00581{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":474,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":61,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655090233457,"flow_last_seen":1655090233457,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655090233457,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":47086,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00482{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":474,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":61,"flow_packet_id":1,"flow_last_seen":1655090233457,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655090233457,"pkt":"eJS0JASgYDjgxTWgCABFAAA8YMVAAD8GoXzAqAJkszzDMbfuFGYjjxw1AAAAAKAC\/\/8ccQAAAgQFtAQCCArHvx46AAAAAAEDAwk="}
00470{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":475,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":61,"flow_packet_id":2,"flow_last_seen":1655090233489,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655090233489,"pkt":"eJS0JASgYDjgxTWgCABFAAA0YMZAAD8GoYPAqAJkszzDMbfuFGYjjxw2tsj\/nIAQAKzs8QAAAQEICse\/HlqH9x8U"}
00478{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":476,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":61,"flow_packet_id":3,"flow_last_seen":1655090233571,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655090233571,"pkt":"eJS0JASgYDjgxTWgCABFAAA4YMdAAD8GoX7AqAJkszzDMbfuFGYjjxw2tsj\/nIAYAKynTQAAAQEICse\/Hq2H9x8URUQAAQ=="}
00646{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":477,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":61,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655090233457,"flow_last_seen":1655090233603,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":279,"flow_tot_l4_payload_len":283,"flow_avg_l4_payload_len":70,"midstream":0,"thread_ts_msec":1655090233603,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":47086,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00560{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":482,"source":"whatsapp.pcap","alias":"nDPId-test","packets-captured":482,"packets-processed":481,"total-skipped-flows":0,"total-l4-data-len":38908,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":61,"total-detection-updates":0,"total-updates":0,"current-active-flows":3,"total-active-flows":61,"total-idle-flows":58,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":408,"global_ts_msec":1655091294583}
00581{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":482,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":62,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655091294583,"flow_last_seen":1655091294583,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655091294583,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":49182,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00484{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":482,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":62,"flow_packet_id":1,"flow_last_seen":1655091294583,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655091294583,"pkt":"eJS0JASgYDjgxTWgCABFAAA8\/r9AAD8GA4LAqAJkszzDMcAeFGacobJEAAAAAKAC\/\/\/yvwAAAgQFtAQCCApxiYbPAAAAAAEDAwk="}
00469{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":483,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":62,"flow_packet_id":2,"flow_last_seen":1655091294836,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655091294836,"pkt":"eJS0JASgYDjgxTWgCABFAAA0\/sBAAD8GA4nAqAJkszzDMcAeFGacobJFhNtvm4AQAIBe2QAAAQEICnGJh9AM9r+2"}
00477{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":484,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":62,"flow_packet_id":3,"flow_last_seen":1655091294836,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655091294836,"pkt":"eJS0JASgYDjgxTWgCABFAAA4\/sFAAD8GA4TAqAJkszzDMcAeFGacobJFhNtvm4AYAIAZggAAAQEICnGJh9YM9r+2RUQAAQ=="}
00646{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":485,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":62,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655091294583,"flow_last_seen":1655091294939,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":278,"flow_tot_l4_payload_len":282,"flow_avg_l4_payload_len":70,"midstream":0,"thread_ts_msec":1655091294939,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":49182,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00560{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":489,"source":"whatsapp.pcap","alias":"nDPId-test","packets-captured":489,"packets-processed":488,"total-skipped-flows":0,"total-l4-data-len":39230,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":62,"total-detection-updates":0,"total-updates":0,"current-active-flows":4,"total-active-flows":62,"total-idle-flows":58,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":414,"global_ts_msec":1655096063383}
00581{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":489,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":63,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655096063383,"flow_last_seen":1655096063383,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655096063383,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":49232,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00482{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":489,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":63,"flow_packet_id":1,"flow_last_seen":1655096063383,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655096063383,"pkt":"eJS0JASgYDjgxTWgCABFAAA80GdAAD8GMdrAqAJkszzDMcBQFGYzpQPcAAAAAKAC\/\/+30QAAAgQFtAQCCApxjNjtAAAAAAEDAwk="}
00468{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":490,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":63,"flow_packet_id":2,"flow_last_seen":1655096063418,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655096063418,"pkt":"eJS0JASgYDjgxTWgCABFAAA00GhAAD8GMeHAqAJkszzDMcBQFGYzpQPdMmkwzoAQAIAjpQAAAQEICnGM2RDAwp5N"}
00476{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":491,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":63,"flow_packet_id":3,"flow_last_seen":1655096063425,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655096063425,"pkt":"eJS0JASgYDjgxTWgCABFAAA40GlAAD8GMdzAqAJkszzDMcBQFGYzpQPdMmkwzoAYAIDeTAAAAQEICnGM2RfAwp5NRUQAAQ=="}
00646{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":492,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":63,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655096063383,"flow_last_seen":1655096063459,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":278,"flow_tot_l4_payload_len":282,"flow_avg_l4_payload_len":70,"midstream":0,"thread_ts_msec":1655096063459,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":49232,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00685{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":497,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":59,"flow_state":"finished","flow_packets_processed":8,"flow_first_seen":1655085444940,"flow_last_seen":1655085445318,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":273,"flow_tot_l4_payload_len":317,"flow_avg_l4_payload_len":39,"midstream":0,"thread_ts_msec":1655096063826,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":60328,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00560{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":497,"source":"whatsapp.pcap","alias":"nDPId-test","packets-captured":497,"packets-processed":496,"total-skipped-flows":0,"total-l4-data-len":39512,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":63,"total-detection-updates":0,"total-updates":0,"current-active-flows":4,"total-active-flows":63,"total-idle-flows":59,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":421,"global_ts_msec":1655097851208}
00581{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":497,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":64,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655097851208,"flow_last_seen":1655097851208,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655097851208,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":47350,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00483{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":497,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":64,"flow_packet_id":1,"flow_last_seen":1655097851208,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655097851208,"pkt":"eJS0JASgYDjgxTWgCABFAAA8hVJAAD8GfO\/AqAJkszzDMbj2FGbdMghiAAAAAKAC\/\/9ZggAAAgQFtAQCCAo4P8nQAAAAAAEDAwk="}
00469{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":498,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":64,"flow_packet_id":2,"flow_last_seen":1655097851243,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655097851243,"pkt":"eJS0JASgYDjgxTWgCABFAAA0hVNAAD8GfPbAqAJkszzDMbj2FGbdMghj2gcbf4AQAIDKFgAAAQEICjg\/yfKnyyA1"}
00477{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":499,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":64,"flow_packet_id":3,"flow_last_seen":1655097851444,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655097851444,"pkt":"eJS0JASgYDjgxTWgCABFAAA4hVRAAD8GfPHAqAJkszzDMbj2FGbdMghj2gcbf4AYAICEGAAAAQEICjg\/yp+nyyA1RUQAAQ=="}
00646{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":500,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":64,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655097851208,"flow_last_seen":1655097851476,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":290,"flow_tot_l4_payload_len":294,"flow_avg_l4_payload_len":73,"midstream":0,"thread_ts_msec":1655097851476,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":47350,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00685{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":505,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":61,"flow_state":"finished","flow_packets_processed":8,"flow_first_seen":1655090233457,"flow_last_seen":1655090233805,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":279,"flow_tot_l4_payload_len":323,"flow_avg_l4_payload_len":40,"midstream":0,"thread_ts_msec":1655097851805,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":47086,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00685{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":505,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":60,"flow_state":"finished","flow_packets_processed":8,"flow_first_seen":1655089030478,"flow_last_seen":1655089030857,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":273,"flow_tot_l4_payload_len":317,"flow_avg_l4_payload_len":39,"midstream":0,"thread_ts_msec":1655097851805,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":32798,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00560{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":505,"source":"whatsapp.pcap","alias":"nDPId-test","packets-captured":505,"packets-processed":504,"total-skipped-flows":0,"total-l4-data-len":39806,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":64,"total-detection-updates":0,"total-updates":0,"current-active-flows":3,"total-active-flows":64,"total-idle-flows":61,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":429,"global_ts_msec":1655099328045}
00581{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":505,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":65,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655099328045,"flow_last_seen":1655099328045,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655099328045,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":49238,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00484{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":505,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":65,"flow_packet_id":1,"flow_last_seen":1655099328045,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655099328045,"pkt":"eJS0JASgYDjgxTWgCABFAAA8L\/pAAD8G0kfAqAJkszzDMcBWFGYVxjf+AAAAAKAC\/\/\/UVQAAAgQFtAQCCApxjaYfAAAAAAEDAwk="}
00470{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":506,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":65,"flow_packet_id":2,"flow_last_seen":1655099328158,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655099328158,"pkt":"eJS0JASgYDjgxTWgCABFAAA0L\/tAAD8G0k7AqAJkszzDMcBWFGYVxjf\/2SNcwIAQAIBe7wAAAQEICnGNpo+IgeTO"}
00478{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":507,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":65,"flow_packet_id":3,"flow_last_seen":1655099328163,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655099328163,"pkt":"eJS0JASgYDjgxTWgCABFAAA4L\/xAAD8G0knAqAJkszzDMcBWFGYVxjf\/2SNcwIAYAIAZmQAAAQEICnGNppSIgeTORUQAAQ=="}
00646{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":508,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":65,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655099328045,"flow_last_seen":1655099328197,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":278,"flow_tot_l4_payload_len":282,"flow_avg_l4_payload_len":70,"midstream":0,"thread_ts_msec":1655099328197,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":49238,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00685{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":513,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":62,"flow_state":"finished","flow_packets_processed":7,"flow_first_seen":1655091294583,"flow_last_seen":1655091295192,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":278,"flow_tot_l4_payload_len":322,"flow_avg_l4_payload_len":46,"midstream":0,"thread_ts_msec":1655099328610,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":49182,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00560{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":513,"source":"whatsapp.pcap","alias":"nDPId-test","packets-captured":513,"packets-processed":512,"total-skipped-flows":0,"total-l4-data-len":40128,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":65,"total-detection-updates":0,"total-updates":0,"current-active-flows":3,"total-active-flows":65,"total-idle-flows":62,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":436,"global_ts_msec":1655100445438}
00581{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":513,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":66,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655100445438,"flow_last_seen":1655100445438,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655100445438,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":49250,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00483{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":513,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":66,"flow_packet_id":1,"flow_last_seen":1655100445438,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655100445438,"pkt":"eJS0JASgYDjgxTWgCABFAAA8dbNAAD8GjI7AqAJkszzDMcBiFGbUEWBGAAAAAKAC\/\/9\/mgAAAgQFtAQCCApxjhQ6AAAAAAEDAwk="}
00469{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":514,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":66,"flow_packet_id":2,"flow_last_seen":1655100445526,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655100445526,"pkt":"eJS0JASgYDjgxTWgCABFAAA0dbRAAD8GjJXAqAJkszzDMcBiFGbUEWBH1mTBCIAQAIABwwAAAQEICnGOFJasjGe\/"}
00477{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":515,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":66,"flow_packet_id":3,"flow_last_seen":1655100445560,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655100445560,"pkt":"eJS0JASgYDjgxTWgCABFAAA4dbVAAD8GjJDAqAJkszzDMcBiFGbUEWBH1mTBCIAYAIC8UQAAAQEICnGOFLasjGe\/RUQAAQ=="}
00646{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":516,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":66,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655100445438,"flow_last_seen":1655100445594,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":278,"flow_tot_l4_payload_len":282,"flow_avg_l4_payload_len":70,"midstream":0,"thread_ts_msec":1655100445594,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":49250,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00560{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":521,"source":"whatsapp.pcap","alias":"nDPId-test","packets-captured":521,"packets-processed":520,"total-skipped-flows":0,"total-l4-data-len":40413,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":66,"total-detection-updates":0,"total-updates":0,"current-active-flows":4,"total-active-flows":66,"total-idle-flows":62,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":442,"global_ts_msec":1655101503188}
00581{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":521,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":67,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655101503188,"flow_last_seen":1655101503188,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655101503188,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":47296,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00482{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":521,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":67,"flow_packet_id":1,"flow_last_seen":1655101503188,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655101503188,"pkt":"eJS0JASgYDjgxTWgCABFAAA8uEdAAD8GSfrAqAJkszzDMbjAFGZ59kNkAAAAAKAC\/\/+x6gAAAgQFtAQCCArH7AorAAAAAAEDAwk="}
00468{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":522,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":67,"flow_packet_id":2,"flow_last_seen":1655101503221,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655101503221,"pkt":"eJS0JASgYDjgxTWgCABFAAA0uEhAAD8GSgHAqAJkszzDMbjAFGZ59kNlF+8VdoAQAKz2ngAAAQEICsfsCkuDiThP"}
00476{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":523,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":67,"flow_packet_id":3,"flow_last_seen":1655101503234,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655101503234,"pkt":"eJS0JASgYDjgxTWgCABFAAA4uElAAD8GSfzAqAJkszzDMbjAFGZ59kNlF+8VdoAYAKyxQAAAAQEICsfsCliDiThPRUQAAQ=="}
00646{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":524,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":67,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655101503188,"flow_last_seen":1655101503267,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":279,"flow_tot_l4_payload_len":283,"flow_avg_l4_payload_len":70,"midstream":0,"thread_ts_msec":1655101503267,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":47296,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00560{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":529,"source":"whatsapp.pcap","alias":"nDPId-test","packets-captured":529,"packets-processed":528,"total-skipped-flows":0,"total-l4-data-len":40736,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":67,"total-detection-updates":0,"total-updates":0,"current-active-flows":5,"total-active-flows":67,"total-idle-flows":62,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":448,"global_ts_msec":1655104186658}
00581{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":529,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":68,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655104186658,"flow_last_seen":1655104186658,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655104186658,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":47900,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00484{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":529,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":68,"flow_packet_id":1,"flow_last_seen":1655104186658,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655104186658,"pkt":"eJS0JASgYDjgxTWgCABFAAA8z9lAAD8GMmjAqAJkszzDMbscFGbxjY\/TAAAAAKAC\/\/\/9wgAAAgQFtAQCCAo4WoeCAAAAAAEDAwk="}
00471{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":530,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":68,"flow_packet_id":2,"flow_last_seen":1655104186714,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655104186714,"pkt":"eJS0JASgYDjgxTWgCABFAAA0z9pAAD8GMm\/AqAJkszzDMbscFGbxjY\/UkjD8dIAQAIBW5gAAAQEICjhah\/LAS4W5"}
00477{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":531,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":68,"flow_packet_id":3,"flow_last_seen":1655104186877,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655104186877,"pkt":"eJS0JASgYDjgxTWgCABFAAA4z9tAAD8GMmrAqAJkszzDMbscFGbxjY\/UkjD8dIAYAIARCwAAAQEICjhaiHzAS4W5RUQAAQ=="}
00646{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":532,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":68,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655104186658,"flow_last_seen":1655104186938,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":290,"flow_tot_l4_payload_len":294,"flow_avg_l4_payload_len":73,"midstream":0,"thread_ts_msec":1655104186938,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":47900,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00685{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":537,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":63,"flow_state":"finished","flow_packets_processed":8,"flow_first_seen":1655096063383,"flow_last_seen":1655096063826,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":278,"flow_tot_l4_payload_len":282,"flow_avg_l4_payload_len":35,"midstream":0,"thread_ts_msec":1655104187274,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":49232,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00560{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":537,"source":"whatsapp.pcap","alias":"nDPId-test","packets-captured":537,"packets-processed":536,"total-skipped-flows":0,"total-l4-data-len":41070,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":68,"total-detection-updates":0,"total-updates":0,"current-active-flows":5,"total-active-flows":68,"total-idle-flows":63,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":455,"global_ts_msec":1655105188559}
00581{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":537,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":69,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655105188559,"flow_last_seen":1655105188559,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655105188559,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":47590,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00484{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":537,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":69,"flow_packet_id":1,"flow_last_seen":1655105188559,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655105188559,"pkt":"eJS0JASgYDjgxTWgCABFAAA8S7JAAD8Gto\/AqAJkszzDMbnmFGYb9oTUAAAAAKAC\/\/+DSwAAAgQFtAQCCArH\/lQiAAAAAAEDAwk="}
00468{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":538,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":69,"flow_packet_id":2,"flow_last_seen":1655105188592,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655105188592,"pkt":"eJS0JASgYDjgxTWgCABFAAA0S7NAAD8GtpbAqAJkszzDMbnmFGYb9oTVXDwEToAQAKxqDAAAAQEICsf+VEPB4STE"}
00477{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":539,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":69,"flow_packet_id":3,"flow_last_seen":1655105188604,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655105188604,"pkt":"eJS0JASgYDjgxTWgCABFAAA4S7RAAD8GtpHAqAJkszzDMbnmFGYb9oTVXDwEToAYAKwkrwAAAQEICsf+VE\/B4STERUQAAQ=="}
00646{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":540,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":69,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655105188559,"flow_last_seen":1655105188638,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":279,"flow_tot_l4_payload_len":283,"flow_avg_l4_payload_len":70,"midstream":0,"thread_ts_msec":1655105188638,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":47590,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00581{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":545,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":70,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655105755895,"flow_last_seen":1655105755895,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655105755895,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":49428,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00482{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":545,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":70,"flow_packet_id":1,"flow_last_seen":1655105755895,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655105755895,"pkt":"eJS0JASgYDjgxTWgCABFAAA8kAlAAD8GcjjAqAJkszzDMcEUFGaXC5Z3AAAAAKAC\/\/9ZoAAAAgQFtAQCCAo4cnlzAAAAAAEDAwk="}
00470{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":546,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":70,"flow_packet_id":2,"flow_last_seen":1655105755961,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655105755961,"pkt":"eJS0JASgYDjgxTWgCABFAAA0kApAAD8Gcj\/AqAJkszzDMcEUFGaXC5Z47mWksoAQAIBl6QAAAQEICjhyea4zIlt\/"}
00477{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":547,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":70,"flow_packet_id":3,"flow_last_seen":1655105755972,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655105755972,"pkt":"eJS0JASgYDjgxTWgCABFAAA4kAtAAD8GcjrAqAJkszzDMcEUFGaXC5Z47mWksoAYAIAgbgAAAQEICjhyedgzIlt\/RUQAAQ=="}
00646{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":548,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":70,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655105755895,"flow_last_seen":1655105756007,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":290,"flow_tot_l4_payload_len":294,"flow_avg_l4_payload_len":73,"midstream":0,"thread_ts_msec":1655105756007,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":49428,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00685{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":553,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":64,"flow_state":"finished","flow_packets_processed":8,"flow_first_seen":1655097851208,"flow_last_seen":1655097851805,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":290,"flow_tot_l4_payload_len":294,"flow_avg_l4_payload_len":36,"midstream":0,"thread_ts_msec":1655105756270,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":47350,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00560{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":553,"source":"whatsapp.pcap","alias":"nDPId-test","packets-captured":553,"packets-processed":552,"total-skipped-flows":0,"total-l4-data-len":41992,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":70,"total-detection-updates":0,"total-updates":0,"current-active-flows":6,"total-active-flows":70,"total-idle-flows":64,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":467,"global_ts_msec":1655105790019}
00581{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":553,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":71,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655105790019,"flow_last_seen":1655105790019,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655105790019,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":47634,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00483{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":553,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":71,"flow_packet_id":1,"flow_last_seen":1655105790019,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655105790019,"pkt":"eJS0JASgYDjgxTWgCABFAAA8DWBAAD8G9OHAqAJkszzDMboSFGb46AYSAAAAAKAC\/\/\/MkwAAAgQFtAQCCArIAKx7AAAAAAEDAwk="}
00468{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":554,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":71,"flow_packet_id":2,"flow_last_seen":1655105790049,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655105790049,"pkt":"eJS0JASgYDjgxTWgCABFAAA0DWFAAD8G9OjAqAJkszzDMboSFGb46AYTXUqYTIAQAKwfkAAAAQEICsgArJpsf3jg"}
00476{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":555,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":71,"flow_packet_id":3,"flow_last_seen":1655105790056,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655105790056,"pkt":"eJS0JASgYDjgxTWgCABFAAA4DWJAAD8G9OPAqAJkszzDMboSFGb46AYTXUqYTIAYAKzaNwAAAQEICsgArKFsf3jgRUQAAQ=="}
00646{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":556,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":71,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655105790019,"flow_last_seen":1655105790086,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":279,"flow_tot_l4_payload_len":283,"flow_avg_l4_payload_len":70,"midstream":0,"thread_ts_msec":1655105790086,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":47634,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00560{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":561,"source":"whatsapp.pcap","alias":"nDPId-test","packets-captured":561,"packets-processed":560,"total-skipped-flows":0,"total-l4-data-len":42315,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":71,"total-detection-updates":0,"total-updates":0,"current-active-flows":7,"total-active-flows":71,"total-idle-flows":64,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":473,"global_ts_msec":1655108001441}
00581{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":561,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":72,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655108001441,"flow_last_seen":1655108001441,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655108001441,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":49610,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00482{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":561,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":72,"flow_packet_id":1,"flow_last_seen":1655108001441,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655108001441,"pkt":"eJS0JASgYDjgxTWgCABFAAA8CbZAAD8G+IvAqAJkszzDMcHKFGbmPQGiAAAAAKAC\/\/9GsQAAAgQFtAQCCApxlpgrAAAAAAEDAwk="}
00468{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":562,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":72,"flow_packet_id":2,"flow_last_seen":1655108001604,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655108001604,"pkt":"eJS0JASgYDjgxTWgCABFAAA0CbdAAD8G+JLAqAJkszzDMcHKFGbmPQGj6JAdY4AQAICr2gAAAQEICnGWmOHkUd4Y"}
00476{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":563,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":72,"flow_packet_id":3,"flow_last_seen":1655108001607,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655108001607,"pkt":"eJS0JASgYDjgxTWgCABFAAA4CbhAAD8G+I3AqAJkszzDMcHKFGbmPQGj6JAdY4AYAIBmhgAAAQEICnGWmOTkUd4YRUQAAQ=="}
00646{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":564,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":72,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655108001441,"flow_last_seen":1655108001707,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":278,"flow_tot_l4_payload_len":282,"flow_avg_l4_payload_len":70,"midstream":0,"thread_ts_msec":1655108001707,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":49610,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00685{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":569,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":65,"flow_state":"finished","flow_packets_processed":8,"flow_first_seen":1655099328045,"flow_last_seen":1655099328610,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":278,"flow_tot_l4_payload_len":322,"flow_avg_l4_payload_len":40,"midstream":0,"thread_ts_msec":1655108001999,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":49238,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00685{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":569,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":66,"flow_state":"finished","flow_packets_processed":8,"flow_first_seen":1655100445438,"flow_last_seen":1655100445972,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":278,"flow_tot_l4_payload_len":285,"flow_avg_l4_payload_len":35,"midstream":0,"thread_ts_msec":1655108001999,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":49250,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00581{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":569,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":73,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655108385462,"flow_last_seen":1655108385462,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655108385462,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":37378,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00482{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":569,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":73,"flow_packet_id":1,"flow_last_seen":1655108385462,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655108385462,"pkt":"eJS0JASgYDjgxTWgCABFAAA831VAAD8GIuzAqAJkszzDMZICFGbERxQMAAAAAKAC\/\/+w2QAAAgQFtAQCCAo4haZoAAAAAAEDAwk="}
00468{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":570,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":73,"flow_packet_id":2,"flow_last_seen":1655108385503,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655108385503,"pkt":"eJS0JASgYDjgxTWgCABFAAA031ZAAD8GIvPAqAJkszzDMZICFGbERxQNeBSrR4AQAIBROQAAAQEICjiFpqKHOOMP"}
00476{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":571,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":73,"flow_packet_id":3,"flow_last_seen":1655108385507,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655108385507,"pkt":"eJS0JASgYDjgxTWgCABFAAA431dAAD8GIu7AqAJkszzDMZICFGbERxQNeBSrR4AYAIAL5AAAAQEICjiFpqaHOOMPRUQAAQ=="}
00646{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":572,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":73,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655108385462,"flow_last_seen":1655108385546,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":290,"flow_tot_l4_payload_len":294,"flow_avg_l4_payload_len":73,"midstream":0,"thread_ts_msec":1655108385546,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":37378,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00581{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":577,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":74,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655108453657,"flow_last_seen":1655108453657,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655108453657,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":47738,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00482{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":577,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":74,"flow_packet_id":1,"flow_last_seen":1655108453657,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655108453657,"pkt":"eJS0JASgYDjgxTWgCABFAAA8GD5AAD8G6gPAqAJkszzDMbp6FGaSP+CCAAAAAKAC\/\/8T9gAAAgQFtAQCCArICfDgAAAAAAEDAwk="}
00468{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":578,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":74,"flow_packet_id":2,"flow_last_seen":1655108453690,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655108453690,"pkt":"eJS0JASgYDjgxTWgCABFAAA0GD9AAD8G6grAqAJkszzDMbp6FGaSP+CDCev7oYAQAKwykAAAAQEICsgJ8QFJX8Bq"}
00476{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":579,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":74,"flow_packet_id":3,"flow_last_seen":1655108453696,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655108453696,"pkt":"eJS0JASgYDjgxTWgCABFAAA4GEBAAD8G6gXAqAJkszzDMbp6FGaSP+CDCev7oYAYAKztOAAAAQEICsgJ8QdJX8BqRUQAAQ=="}
00646{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":580,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":74,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655108453657,"flow_last_seen":1655108453728,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":279,"flow_tot_l4_payload_len":283,"flow_avg_l4_payload_len":70,"midstream":0,"thread_ts_msec":1655108453728,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":47738,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00560{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":585,"source":"whatsapp.pcap","alias":"nDPId-test","packets-captured":585,"packets-processed":584,"total-skipped-flows":0,"total-l4-data-len":43736,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":74,"total-detection-updates":0,"total-updates":0,"current-active-flows":8,"total-active-flows":74,"total-idle-flows":66,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":491,"global_ts_msec":1655108977493}
00581{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":585,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":75,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655108977493,"flow_last_seen":1655108977493,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655108977493,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":37404,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00482{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":585,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":75,"flow_packet_id":1,"flow_last_seen":1655108977493,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655108977493,"pkt":"eJS0JASgYDjgxTWgCABFAAA8FDpAAD8G7gfAqAJkszzDMZIcFGYxkZdqAAAAAKAC\/\/+qXQAAAgQFtAQCCAo4hrwhAAAAAAEDAwk="}
00468{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":586,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":75,"flow_packet_id":2,"flow_last_seen":1655108977535,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655108977535,"pkt":"eJS0JASgYDjgxTWgCABFAAA0FDtAAD8G7g7AqAJkszzDMZIcFGYxkZdrFO3l4YAQAIAhNgAAAQEICjiGvEzZk+LX"}
00476{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":587,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":75,"flow_packet_id":3,"flow_last_seen":1655108977728,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655108977728,"pkt":"eJS0JASgYDjgxTWgCABFAAA4FDxAAD8G7gnAqAJkszzDMZIcFGYxkZdrFO3l4YAYAIDbJQAAAQEICjiGvQvZk+LXRUQAAQ=="}
00646{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":588,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":75,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655108977493,"flow_last_seen":1655108977793,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":290,"flow_tot_l4_payload_len":294,"flow_avg_l4_payload_len":73,"midstream":0,"thread_ts_msec":1655108977793,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":37404,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00685{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":593,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":67,"flow_state":"finished","flow_packets_processed":8,"flow_first_seen":1655101503188,"flow_last_seen":1655101503710,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":279,"flow_tot_l4_payload_len":323,"flow_avg_l4_payload_len":40,"midstream":0,"thread_ts_msec":1655108978075,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":47296,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00560{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":593,"source":"whatsapp.pcap","alias":"nDPId-test","packets-captured":593,"packets-processed":592,"total-skipped-flows":0,"total-l4-data-len":44070,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":75,"total-detection-updates":0,"total-updates":0,"current-active-flows":8,"total-active-flows":75,"total-idle-flows":67,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":498,"global_ts_msec":1655109656108}
00581{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":593,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":76,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655109656108,"flow_last_seen":1655109656108,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655109656108,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":47776,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00482{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":593,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":76,"flow_packet_id":1,"flow_last_seen":1655109656108,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655109656108,"pkt":"eJS0JASgYDjgxTWgCABFAAA8kRFAAD8GcTDAqAJkszzDMbqgFGZw+MTeAAAAAKAC\/\/+uLgAAAgQFtAQCCArIDZNpAAAAAAEDAwk="}
00468{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":594,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":76,"flow_packet_id":2,"flow_last_seen":1655109656138,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655109656138,"pkt":"eJS0JASgYDjgxTWgCABFAAA0kRJAAD8GcTfAqAJkszzDMbqgFGZw+MTfqcWd3IAQAKwWxQAAAQEICsgNk4cgPV1+"}
00476{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":595,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":76,"flow_packet_id":3,"flow_last_seen":1655109656145,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655109656145,"pkt":"eJS0JASgYDjgxTWgCABFAAA4kRNAAD8GcTLAqAJkszzDMbqgFGZw+MTfqcWd3IAYAKzRawAAAQEICsgNk48gPV1+RUQAAQ=="}
00646{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":596,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":76,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655109656108,"flow_last_seen":1655109656174,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":279,"flow_tot_l4_payload_len":283,"flow_avg_l4_payload_len":70,"midstream":0,"thread_ts_msec":1655109656174,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":47776,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00560{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":601,"source":"whatsapp.pcap","alias":"nDPId-test","packets-captured":601,"packets-processed":600,"total-skipped-flows":0,"total-l4-data-len":44353,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":76,"total-detection-updates":0,"total-updates":0,"current-active-flows":9,"total-active-flows":76,"total-idle-flows":67,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":504,"global_ts_msec":1655110961423}
00581{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":601,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":77,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655110961423,"flow_last_seen":1655110961423,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655110961423,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":37766,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00482{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":601,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":77,"flow_packet_id":1,"flow_last_seen":1655110961423,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655110961423,"pkt":"eJS0JASgYDjgxTWgCABFAAA8fpBAAD8Gg7HAqAJkszzDMZOGFGbaRgeTAAAAAKAC\/\/9KQgAAAgQFtAQCCAo4pQHWAAAAAAEDAwk="}
00468{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":602,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":77,"flow_packet_id":2,"flow_last_seen":1655110961452,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655110961452,"pkt":"eJS0JASgYDjgxTWgCABFAAA0fpFAAD8Gg7jAqAJkszzDMZOGFGbaRgeUJF2xy4AQAIA9NgAAAQEICjilAfPDMqHR"}
00476{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":603,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":77,"flow_packet_id":3,"flow_last_seen":1655110962269,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655110962269,"pkt":"eJS0JASgYDjgxTWgCABFAAA4fpJAAD8Gg7PAqAJkszzDMZOGFGbaRgeUJF2xy4AYAID0swAAAQEICjilBSTDMqHRRUQAAQ=="}
00643{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":604,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":77,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655110961423,"flow_last_seen":1655110962300,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":11,"flow_tot_l4_payload_len":15,"flow_avg_l4_payload_len":3,"midstream":0,"thread_ts_msec":1655110962300,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":37766,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00581{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":609,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":78,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655111268965,"flow_last_seen":1655111268965,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655111268965,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":37674,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00482{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":609,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":78,"flow_packet_id":1,"flow_last_seen":1655111268965,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655111268965,"pkt":"eJS0JASgYDjgxTWgCABFAAA8EatAAD8G8JbAqAJkszzDMZMqFGZD+lK5AAAAAKAC\/\/8O2QAAAgQFtAQCCApKc3b0AAAAAAEDAwg="}
00469{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":610,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":78,"flow_packet_id":2,"flow_last_seen":1655111268994,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655111268994,"pkt":"eJS0JASgYDjgxTWgCABFAAA0EaxAAD8G8J3AqAJkszzDMZMqFGZD+lK6LP1J\/oAQAVcnzwAAAQEICkpzdxL1CahM"}
00477{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":611,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":78,"flow_packet_id":3,"flow_last_seen":1655111269269,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655111269269,"pkt":"eJS0JASgYDjgxTWgCABFAAA4Ea1AAD8G8JjAqAJkszzDMZMqFGZD+lK6LP1J\/oAYAVfhawAAAQEICkpzeCT1CahMRUQAAQ=="}
00646{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":612,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":78,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655111268965,"flow_last_seen":1655111269298,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":273,"flow_tot_l4_payload_len":277,"flow_avg_l4_payload_len":69,"midstream":0,"thread_ts_msec":1655111269298,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":37674,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00561{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":617,"source":"whatsapp.pcap","alias":"nDPId-test","packets-captured":617,"packets-processed":616,"total-skipped-flows":0,"total-l4-data-len":44964,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":78,"total-detection-updates":0,"total-updates":0,"current-active-flows":11,"total-active-flows":78,"total-idle-flows":67,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":515,"global_ts_msec":1655111789393}
00581{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":617,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":79,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655111789393,"flow_last_seen":1655111789393,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655111789393,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":47810,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00482{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":617,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":79,"flow_packet_id":1,"flow_last_seen":1655111789393,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655111789393,"pkt":"eJS0JASgYDjgxTWgCABFAAA8zPVAAD8GNUzAqAJkszzDMbrCFGZ1lRVTAAAAAKAC\/\/8y6QAAAgQFtAQCCArIErl2AAAAAAEDAwk="}
00468{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":618,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":79,"flow_packet_id":2,"flow_last_seen":1655111789426,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655111789426,"pkt":"eJS0JASgYDjgxTWgCABFAAA0zPZAAD8GNVPAqAJkszzDMbrCFGZ1lRVUyQX5N4AQAKyN9wAAAQEICsgSuZfNwELk"}
00476{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":619,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":79,"flow_packet_id":3,"flow_last_seen":1655111789520,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655111789520,"pkt":"eJS0JASgYDjgxTWgCABFAAA4zPdAAD8GNU7AqAJkszzDMbrCFGZ1lRVUyQX5N4AYAKxISAAAAQEICsgSufXNwELkRUQAAQ=="}
00646{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":620,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":79,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655111789393,"flow_last_seen":1655111789552,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":279,"flow_tot_l4_payload_len":283,"flow_avg_l4_payload_len":70,"midstream":0,"thread_ts_msec":1655111789552,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":47810,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00685{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":624,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":68,"flow_state":"finished","flow_packets_processed":8,"flow_first_seen":1655104186658,"flow_last_seen":1655104187274,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":290,"flow_tot_l4_payload_len":334,"flow_avg_l4_payload_len":41,"midstream":0,"thread_ts_msec":1655111789765,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":47900,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00581{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":624,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":80,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655111826253,"flow_last_seen":1655111826253,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655111826253,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.33","src_port":46394,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00482{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":624,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":80,"flow_packet_id":1,"flow_last_seen":1655111826253,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655111826253,"pkt":"eJS0JASgYDjgxTWgCABFAAA8UhNAAD8GsD7AqAJkszzDIbU6FGZjXyJuAAAAAKAC\/\/8VRAAAAgQFtAQCCAoGi6NWAAAAAAEDAwk="}
00468{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":625,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":80,"flow_packet_id":2,"flow_last_seen":1655111826283,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655111826283,"pkt":"eJS0JASgYDjgxTWgCABFAAA0UhRAAD8GsEXAqAJkszzDIbU6FGZjXyJv3hHXrIAQAKwMuwAAAQEICgaLo3SOAvK7"}
00476{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":626,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":80,"flow_packet_id":3,"flow_last_seen":1655111826284,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655111826284,"pkt":"eJS0JASgYDjgxTWgCABFAAA4UhVAAD8GsEDAqAJkszzDIbU6FGZjXyJv3hHXrIAYAKzHZwAAAQEICgaLo3aOAvK7RUQAAQ=="}
00642{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":627,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":80,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655111826253,"flow_last_seen":1655111826285,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":7,"flow_tot_l4_payload_len":11,"flow_avg_l4_payload_len":2,"midstream":0,"thread_ts_msec":1655111826285,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.33","src_port":46394,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00581{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":632,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":81,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655111980061,"flow_last_seen":1655111980061,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655111980061,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":37822,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00482{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":632,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":81,"flow_packet_id":1,"flow_last_seen":1655111980061,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655111980061,"pkt":"eJS0JASgYDjgxTWgCABFAAA8q99AAD8GVmLAqAJkszzDMZO+FGb1swWwAAAAAKAC\/\/8QqwAAAgQFtAQCCAo4qiGmAAAAAAEDAwk="}
00468{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":633,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":81,"flow_packet_id":2,"flow_last_seen":1655111980164,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655111980164,"pkt":"eJS0JASgYDjgxTWgCABFAAA0q+BAAD8GVmnAqAJkszzDMZO+FGb1swWxsMz8dIAQAICfhAAAAQEICjiqIhkXwNnv"}
00476{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":634,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":81,"flow_packet_id":3,"flow_last_seen":1655111980338,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655111980338,"pkt":"eJS0JASgYDjgxTWgCABFAAA4q+FAAD8GVmTAqAJkszzDMZO+FGb1swWxsMz8dIAYAIBZhQAAAQEICjiqIscXwNnvRUQAAQ=="}
00643{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":635,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":81,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655111980061,"flow_last_seen":1655111980422,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":11,"flow_tot_l4_payload_len":15,"flow_avg_l4_payload_len":3,"midstream":0,"thread_ts_msec":1655111980422,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":37822,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00581{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":640,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":82,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655111980926,"flow_last_seen":1655111980926,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655111980926,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.33","src_port":46576,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00482{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":640,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":82,"flow_packet_id":1,"flow_last_seen":1655111980926,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655111980926,"pkt":"eJS0JASgYDjgxTWgCABFAAA8nTtAAD8GZRbAqAJkszzDIbXwFGY7fhdqAAAAAKAC\/\/9FJAAAAgQFtAQCCAoGjKWkAAAAAAEDAwk="}
00468{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":641,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":82,"flow_packet_id":2,"flow_last_seen":1655111980926,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655111980926,"pkt":"eJS0JASgYDjgxTWgCABFAAA0nTxAAD8GZR3AqAJkszzDIbXwFGY7fhdrAsizuoAQAKw+YAAAAQEICgaMpcT4l4Wb"}
00476{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":642,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":82,"flow_packet_id":3,"flow_last_seen":1655111980926,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655111980926,"pkt":"eJS0JASgYDjgxTWgCABFAAA4nT1AAD8GZRjAqAJkszzDIbXwFGY7fhdrAsizuoAYAKz5CQAAAQEICgaMpcn4l4WbRUQAAQ=="}
00642{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":643,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":82,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655111980926,"flow_last_seen":1655111980926,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":7,"flow_tot_l4_payload_len":11,"flow_avg_l4_payload_len":2,"midstream":0,"thread_ts_msec":1655111980926,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.33","src_port":46576,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00561{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":648,"source":"whatsapp.pcap","alias":"nDPId-test","packets-captured":648,"packets-processed":647,"total-skipped-flows":0,"total-l4-data-len":48127,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":82,"total-detection-updates":0,"total-updates":0,"current-active-flows":14,"total-active-flows":82,"total-idle-flows":68,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":537,"global_ts_msec":1655113084330}
00581{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":648,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":83,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655113084330,"flow_last_seen":1655113084330,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655113084330,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":38234,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00482{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":648,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":83,"flow_packet_id":1,"flow_last_seen":1655113084330,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655113084330,"pkt":"eJS0JASgYDjgxTWgCABFAAA81OlAAD8GLVjAqAJkszzDMZVaFGZIDGKXAAAAAKAC\/\/9f+wAAAgQFtAQCCAo4tSFvAAAAAAEDAwk="}
00470{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":649,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":83,"flow_packet_id":2,"flow_last_seen":1655113084383,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655113084383,"pkt":"eJS0JASgYDjgxTWgCABFAAA01OpAAD8GLV\/AqAJkszzDMZVaFGZIDGKYqtuzMYAQAID\/YQAAAQEICji1IaRj8syi"}
00476{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":650,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":83,"flow_packet_id":3,"flow_last_seen":1655113084570,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655113084570,"pkt":"eJS0JASgYDjgxTWgCABFAAA41OtAAD8GLVrAqAJkszzDMZVaFGZIDGKYqtuzMYAYAIC5cwAAAQEICji1IkFj8syiRUQAAQ=="}
00643{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":651,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":83,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655113084330,"flow_last_seen":1655113084612,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":11,"flow_tot_l4_payload_len":15,"flow_avg_l4_payload_len":3,"midstream":0,"thread_ts_msec":1655113084612,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":38234,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00685{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":656,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":69,"flow_state":"finished","flow_packets_processed":8,"flow_first_seen":1655105188559,"flow_last_seen":1655105188835,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":302,"flow_tot_l4_payload_len":588,"flow_avg_l4_payload_len":73,"midstream":0,"thread_ts_msec":1655113084909,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":47590,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00561{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":656,"source":"whatsapp.pcap","alias":"nDPId-test","packets-captured":656,"packets-processed":655,"total-skipped-flows":0,"total-l4-data-len":48424,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":83,"total-detection-updates":0,"total-updates":0,"current-active-flows":14,"total-active-flows":83,"total-idle-flows":69,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":544,"global_ts_msec":1655114622076}
00581{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":656,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":84,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655114622076,"flow_last_seen":1655114622076,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655114622076,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.33","src_port":47284,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00483{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":656,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":84,"flow_packet_id":1,"flow_last_seen":1655114622076,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655114622076,"pkt":"eJS0JASgYDjgxTWgCABFAAA8E3JAAD8G7t\/AqAJkszzDIbi0FGYRoZALAAAAAKAC\/\/83+QAAAgQFtAQCCAoGqmEpAAAAAAEDAwk="}
00468{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":657,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":84,"flow_packet_id":2,"flow_last_seen":1655114622106,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655114622106,"pkt":"eJS0JASgYDjgxTWgCABFAAA0E3NAAD8G7ubAqAJkszzDIbi0FGYRoZAMgQqHroAQAKz9CwAAAQEICgaqYVZ8b+Op"}
00476{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":658,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":84,"flow_packet_id":3,"flow_last_seen":1655114622112,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655114622112,"pkt":"eJS0JASgYDjgxTWgCABFAAA4E3RAAD8G7uHAqAJkszzDIbi0FGYRoZAMgQqHroAYAKy3tQAAAQEICgaqYVt8b+OpRUQAAQ=="}
00642{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":659,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":84,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655114622076,"flow_last_seen":1655114622114,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":7,"flow_tot_l4_payload_len":11,"flow_avg_l4_payload_len":2,"midstream":0,"thread_ts_msec":1655114622114,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.33","src_port":47284,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00685{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":664,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":70,"flow_state":"finished","flow_packets_processed":8,"flow_first_seen":1655105755895,"flow_last_seen":1655105756270,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":290,"flow_tot_l4_payload_len":334,"flow_avg_l4_payload_len":41,"midstream":0,"thread_ts_msec":1655114622275,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":49428,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00685{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":664,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":71,"flow_state":"finished","flow_packets_processed":8,"flow_first_seen":1655105790019,"flow_last_seen":1655105790289,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":279,"flow_tot_l4_payload_len":323,"flow_avg_l4_payload_len":40,"midstream":0,"thread_ts_msec":1655114622275,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":47634,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00561{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":664,"source":"whatsapp.pcap","alias":"nDPId-test","packets-captured":664,"packets-processed":663,"total-skipped-flows":0,"total-l4-data-len":49697,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":84,"total-detection-updates":0,"total-updates":0,"current-active-flows":13,"total-active-flows":84,"total-idle-flows":71,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":552,"global_ts_msec":1655116217773}
00581{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":664,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":85,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655116217773,"flow_last_seen":1655116217773,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655116217773,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":39334,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00482{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":664,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":85,"flow_packet_id":1,"flow_last_seen":1655116217773,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655116217773,"pkt":"eJS0JASgYDjgxTWgCABFAAA8AehAAD8GAFrAqAJkszzDMZmmFGbbOiylAAAAAKAC\/\/9QjQAAAgQFtAQCCApyEZX4AAAAAAEDAwk="}
00468{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":665,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":85,"flow_packet_id":2,"flow_last_seen":1655116217805,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655116217805,"pkt":"eJS0JASgYDjgxTWgCABFAAA0AelAAD8GAGHAqAJkszzDMZmmFGbbOiymFXtouYAQAIBHtQAAAQEICnIRlijWRuJq"}
00476{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":666,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":85,"flow_packet_id":3,"flow_last_seen":1655116217850,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655116217850,"pkt":"eJS0JASgYDjgxTWgCABFAAA4AepAAD8GAFzAqAJkszzDMZmmFGbbOiymFXtouYAYAIACNwAAAQEICnIRllXWRuJqRUQAAQ=="}
00646{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":667,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":85,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655116217773,"flow_last_seen":1655116217880,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":278,"flow_tot_l4_payload_len":282,"flow_avg_l4_payload_len":70,"midstream":0,"thread_ts_msec":1655116217880,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":39334,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00685{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":672,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":72,"flow_state":"finished","flow_packets_processed":8,"flow_first_seen":1655108001441,"flow_last_seen":1655108001999,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":278,"flow_tot_l4_payload_len":518,"flow_avg_l4_payload_len":64,"midstream":0,"thread_ts_msec":1655116218131,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":49610,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00685{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":672,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":73,"flow_state":"finished","flow_packets_processed":8,"flow_first_seen":1655108385462,"flow_last_seen":1655108385787,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":290,"flow_tot_l4_payload_len":297,"flow_avg_l4_payload_len":37,"midstream":0,"thread_ts_msec":1655116218131,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":37378,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00685{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":672,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":74,"flow_state":"finished","flow_packets_processed":8,"flow_first_seen":1655108453657,"flow_last_seen":1655108453928,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":320,"flow_tot_l4_payload_len":606,"flow_avg_l4_payload_len":75,"midstream":0,"thread_ts_msec":1655116218131,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":47738,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00561{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":672,"source":"whatsapp.pcap","alias":"nDPId-test","packets-captured":672,"packets-processed":671,"total-skipped-flows":0,"total-l4-data-len":50313,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":85,"total-detection-updates":0,"total-updates":0,"current-active-flows":11,"total-active-flows":85,"total-idle-flows":74,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":561,"global_ts_msec":1655116940904}
00581{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":672,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":86,"flow_state":"info","flow_packets_processed":1,"flow_first_seen":1655116940904,"flow_last_seen":1655116940904,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"thread_ts_msec":1655116940904,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":40006,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3}
00482{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":672,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":86,"flow_packet_id":1,"flow_last_seen":1655116940904,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_msec":1655116940904,"pkt":"eJS0JASgYDjgxTWgCABFAAA890NAAD8GCv7AqAJkszzDMZxGFGZlwIwQAAAAAKAC\/\/9j2AAAAgQFtAQCCApyHJYRAAAAAAEDAwk="}
00468{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":673,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":86,"flow_packet_id":2,"flow_last_seen":1655116940935,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_msec":1655116940935,"pkt":"eJS0JASgYDjgxTWgCABFAAA090RAAD8GCwXAqAJkszzDMZxGFGZlwIwR5J7sZYAQAIAZ6gAAAQEICnIclkN2QDC1"}
00476{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":674,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":86,"flow_packet_id":3,"flow_last_seen":1655116940973,"flow_idle_time":7580000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_msec":1655116940973,"pkt":"eJS0JASgYDjgxTWgCABFAAA490VAAD8GCwDAqAJkszzDMZxGFGZlwIwR5J7sZYAYAIDUcQAAAQEICnIclmp2QDC1RUQAAQ=="}
00646{"flow_event_id":6,"flow_event_name":"detected","thread_id":0,"packet_id":675,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":86,"flow_state":"info","flow_packets_processed":4,"flow_first_seen":1655116940904,"flow_last_seen":1655116941004,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":278,"flow_tot_l4_payload_len":282,"flow_avg_l4_payload_len":70,"midstream":0,"thread_ts_msec":1655116941004,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":40006,"dst_port":5222,"l4_proto":"tcp","ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00688{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":679,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":84,"flow_state":"finished","flow_packets_processed":8,"flow_first_seen":1655114622076,"flow_last_seen":1655114622275,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1258,"flow_tot_l4_payload_len":1273,"flow_avg_l4_payload_len":159,"midstream":0,"thread_ts_msec":1655116941291,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.33","src_port":47284,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00685{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":679,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":85,"flow_state":"finished","flow_packets_processed":8,"flow_first_seen":1655116217773,"flow_last_seen":1655116218131,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":331,"flow_tot_l4_payload_len":616,"flow_avg_l4_payload_len":77,"midstream":0,"thread_ts_msec":1655116941291,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":39334,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00685{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":679,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":75,"flow_state":"finished","flow_packets_processed":8,"flow_first_seen":1655108977493,"flow_last_seen":1655108978075,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":290,"flow_tot_l4_payload_len":334,"flow_avg_l4_payload_len":41,"midstream":0,"thread_ts_msec":1655116941291,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":37404,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00685{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":679,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":76,"flow_state":"finished","flow_packets_processed":8,"flow_first_seen":1655109656108,"flow_last_seen":1655109656661,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":279,"flow_tot_l4_payload_len":283,"flow_avg_l4_payload_len":35,"midstream":0,"thread_ts_msec":1655116941291,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":47776,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00685{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":679,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":79,"flow_state":"finished","flow_packets_processed":7,"flow_first_seen":1655111789393,"flow_last_seen":1655111789765,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":279,"flow_tot_l4_payload_len":323,"flow_avg_l4_payload_len":46,"midstream":0,"thread_ts_msec":1655116941291,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":47810,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00685{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":679,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":78,"flow_state":"finished","flow_packets_processed":8,"flow_first_seen":1655111268965,"flow_last_seen":1655111269503,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":273,"flow_tot_l4_payload_len":317,"flow_avg_l4_payload_len":39,"midstream":0,"thread_ts_msec":1655116941291,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":37674,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00685{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":679,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":77,"flow_state":"finished","flow_packets_processed":8,"flow_first_seen":1655110961423,"flow_last_seen":1655110962551,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":276,"flow_tot_l4_payload_len":294,"flow_avg_l4_payload_len":36,"midstream":0,"thread_ts_msec":1655116941291,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":37766,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00685{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":679,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":81,"flow_state":"finished","flow_packets_processed":8,"flow_first_seen":1655111980061,"flow_last_seen":1655111980926,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":276,"flow_tot_l4_payload_len":294,"flow_avg_l4_payload_len":36,"midstream":0,"thread_ts_msec":1655116941291,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":37822,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00685{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":679,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":86,"flow_state":"finished","flow_packets_processed":8,"flow_first_seen":1655116940904,"flow_last_seen":1655116941291,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":278,"flow_tot_l4_payload_len":322,"flow_avg_l4_payload_len":40,"midstream":0,"thread_ts_msec":1655116941291,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":40006,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00688{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":679,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":80,"flow_state":"finished","flow_packets_processed":8,"flow_first_seen":1655111826253,"flow_last_seen":1655111826511,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1258,"flow_tot_l4_payload_len":1273,"flow_avg_l4_payload_len":159,"midstream":0,"thread_ts_msec":1655116941291,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.33","src_port":46394,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00685{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":679,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":83,"flow_state":"finished","flow_packets_processed":8,"flow_first_seen":1655113084330,"flow_last_seen":1655113084909,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":279,"flow_tot_l4_payload_len":297,"flow_avg_l4_payload_len":37,"midstream":0,"thread_ts_msec":1655116941291,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.49","src_port":38234,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00688{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":679,"source":"whatsapp.pcap","alias":"nDPId-test","flow_id":82,"flow_state":"finished","flow_packets_processed":8,"flow_first_seen":1655111980926,"flow_last_seen":1655111980926,"flow_idle_time":7580000,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1258,"flow_tot_l4_payload_len":1273,"flow_avg_l4_payload_len":159,"midstream":0,"thread_ts_msec":1655116941291,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"179.60.195.33","src_port":46576,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"4":"DPI"},"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}}
00562{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":679,"source":"whatsapp.pcap","alias":"nDPId-test","packets-captured":679,"packets-processed":679,"total-skipped-flows":0,"total-l4-data-len":50635,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":86,"total-detection-updates":0,"total-updates":0,"current-active-flows":0,"total-active-flows":86,"total-idle-flows":86,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":579,"global_ts_msec":1655116941291}
~~~~~~~~~~~~~~~~~~~~ SUMMARY ~~~~~~~~~~~~~~~~~~~~
~~ packets captured/processed: 679/679
~~ skipped flows.............: 0
~~ total layer4 data length..: 50635 bytes
~~ total detected protocols..: 86
~~ total active/idle flows...: 86/86
~~ total timeout flows.......: 0
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~ total memory allocated....: 6152875 bytes
~~ total memory freed........: 6152875 bytes
~~ total allocations/frees...: 119129/119129
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~ json string min len.......: 464 chars
~~ json string max len.......: 693 chars
~~ json string avg len.......: 578 chars
|