mirror of
https://github.com/utoni/nDPId.git
synced 2026-05-19 07:43:04 +00:00
294 lines
194 KiB
Text
294 lines
194 KiB
Text
00583{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","version":"","ndpi_version":"","ndpi_api_version":0,"size_per_flow":1512,"max-flows-per-thread":32768,"max-idle-flows-per-thread":1024,"reader-thread-count":1,"flow-scan-interval":10000000,"generic-max-idle-time":600000000,"icmp-max-idle-time":120000000,"udp-max-idle-time":180000000,"tcp-max-idle-time":7560000000,"max-packets-per-flow-to-send":5,"max-packets-per-flow-to-process":32,"max-packets-per-flow-to-analyse":32,"global_ts_usec":0}
|
|
00804{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":1,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","version":"","ndpi_version":"","ndpi_api_version":0,"size_per_flow":1512,"packets-captured":1,"packets-processed":0,"pfring_active":false,"pfring_recv":0,"pfring_drop":0,"pfring_shunt":0,"total-skipped-flows":0,"total-l4-payload-len":0,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":0,"total-detection-updates":0,"total-updates":0,"current-active-flows":0,"total-active-flows":0,"total-idle-flows":0,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"global-alloc-count":0,"global-free-count":0,"global-alloc-bytes":0,"global-free-bytes":0,"total-events-serialized":2,"global_ts_usec":1757861542562301}
|
|
00774{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":1,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1757861542562301,"flow_src_last_pkt_time":1757861542562301,"flow_dst_last_pkt_time":1757861542562301,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":200,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":200,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":200,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757861542562301,"l3_proto":"ip4","src_ip":"192.168.0.100","dst_ip":"224.0.0.7","src_port":8001,"dst_port":8001,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5}
|
|
00777{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_src_last_pkt_time":1757861542562301,"flow_dst_last_pkt_time":1757861542562301,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":242,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":242,"pkt_l4_len":208,"thread_ts_usec":1757861542562301,"pkt":"AQBeAAAHwCONtffCCABFAADkEkpAAAERxavAqABk4AAABx9BH0EA0F+leyJkYXRhIjp7InYxIjp7InVyaSI6Imh0dHA6Ly8xOTIuMTY4LjAuMTAwOjgwMDEvbXMvMS4wLyJ9LCJ2MiI6eyJ1cmkiOiJodHRwOi8vMTkyLjE2OC4wLjEwMDo4MDAxL2FwaS92Mi8ifX0sInJlbW90ZSI6IjEuMCIsInNpZCI6InV1aWQ6NWE5ZDYyNTMtNTA4Ny00YTQyLTk0MzItODUwMzQxMTdjYTQ3IiwidHRsIjo4MDAwLCJ0eXBlIjoiYWxpdmUifQo="}
|
|
00924{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":1,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1757861542562301,"flow_src_last_pkt_time":1757861542562301,"flow_dst_last_pkt_time":1757861542562301,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":200,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":200,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":200,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757861542562301,"l3_proto":"ip4","src_ip":"192.168.0.100","dst_ip":"224.0.0.7","src_port":8001,"dst_port":8001,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"JSON","proto_id":"468","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
|
|
00778{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":1,"flow_packet_id":2,"flow_src_last_pkt_time":1757861544563224,"flow_dst_last_pkt_time":1757861542562301,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":242,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":242,"pkt_l4_len":208,"thread_ts_usec":1757861544563224,"pkt":"AQBeAAAHwCONtffCCABFAADkFCZAAAERw8\/AqABk4AAABx9BH0EA0F+leyJkYXRhIjp7InYxIjp7InVyaSI6Imh0dHA6Ly8xOTIuMTY4LjAuMTAwOjgwMDEvbXMvMS4wLyJ9LCJ2MiI6eyJ1cmkiOiJodHRwOi8vMTkyLjE2OC4wLjEwMDo4MDAxL2FwaS92Mi8ifX0sInJlbW90ZSI6IjEuMCIsInNpZCI6InV1aWQ6NWE5ZDYyNTMtNTA4Ny00YTQyLTk0MzItODUwMzQxMTdjYTQ3IiwidHRsIjo4MDAwLCJ0eXBlIjoiYWxpdmUifQo="}
|
|
00777{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":1,"flow_packet_id":3,"flow_src_last_pkt_time":1757861546565497,"flow_dst_last_pkt_time":1757861542562301,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":242,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":242,"pkt_l4_len":208,"thread_ts_usec":1757861546565497,"pkt":"AQBeAAAHwCONtffCCABFAADkFH9AAAERw3bAqABk4AAABx9BH0EA0F+leyJkYXRhIjp7InYxIjp7InVyaSI6Imh0dHA6Ly8xOTIuMTY4LjAuMTAwOjgwMDEvbXMvMS4wLyJ9LCJ2MiI6eyJ1cmkiOiJodHRwOi8vMTkyLjE2OC4wLjEwMDo4MDAxL2FwaS92Mi8ifX0sInJlbW90ZSI6IjEuMCIsInNpZCI6InV1aWQ6NWE5ZDYyNTMtNTA4Ny00YTQyLTk0MzItODUwMzQxMTdjYTQ3IiwidHRsIjo4MDAwLCJ0eXBlIjoiYWxpdmUifQo="}
|
|
00777{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":1,"flow_packet_id":4,"flow_src_last_pkt_time":1757861548566906,"flow_dst_last_pkt_time":1757861542562301,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":242,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":242,"pkt_l4_len":208,"thread_ts_usec":1757861548566906,"pkt":"AQBeAAAHwCONtffCCABFAADkFQFAAAERwvTAqABk4AAABx9BH0EA0F+leyJkYXRhIjp7InYxIjp7InVyaSI6Imh0dHA6Ly8xOTIuMTY4LjAuMTAwOjgwMDEvbXMvMS4wLyJ9LCJ2MiI6eyJ1cmkiOiJodHRwOi8vMTkyLjE2OC4wLjEwMDo4MDAxL2FwaS92Mi8ifX0sInJlbW90ZSI6IjEuMCIsInNpZCI6InV1aWQ6NWE5ZDYyNTMtNTA4Ny00YTQyLTk0MzItODUwMzQxMTdjYTQ3IiwidHRsIjo4MDAwLCJ0eXBlIjoiYWxpdmUifQo="}
|
|
00777{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":1,"flow_packet_id":5,"flow_src_last_pkt_time":1757861550568765,"flow_dst_last_pkt_time":1757861542562301,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":242,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":242,"pkt_l4_len":208,"thread_ts_usec":1757861550568765,"pkt":"AQBeAAAHwCONtffCCABFAADkFVpAAAERwpvAqABk4AAABx9BH0EA0F+leyJkYXRhIjp7InYxIjp7InVyaSI6Imh0dHA6Ly8xOTIuMTY4LjAuMTAwOjgwMDEvbXMvMS4wLyJ9LCJ2MiI6eyJ1cmkiOiJodHRwOi8vMTkyLjE2OC4wLjEwMDo4MDAxL2FwaS92Mi8ifX0sInJlbW90ZSI6IjEuMCIsInNpZCI6InV1aWQ6NWE5ZDYyNTMtNTA4Ny00YTQyLTk0MzItODUwMzQxMTdjYTQ3IiwidHRsIjo4MDAwLCJ0eXBlIjoiYWxpdmUifQo="}
|
|
00968{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":26,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":1,"flow_state":"finished","flow_src_packets_processed":25,"flow_dst_packets_processed":0,"flow_first_seen":1757861542562301,"flow_src_last_pkt_time":1757861590603851,"flow_dst_last_pkt_time":1757861542562301,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":200,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":200,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":5000,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757861590603851,"l3_proto":"ip4","src_ip":"192.168.0.100","dst_ip":"224.0.0.7","src_port":8001,"dst_port":8001,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"JSON","proto_id":"468","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
|
|
02260{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":32,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":1,"flow_state":"finished","flow_src_packets_processed":32,"flow_dst_packets_processed":0,"flow_first_seen":1757861542562301,"flow_src_last_pkt_time":1757861604613375,"flow_dst_last_pkt_time":1757861542562301,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":200,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":200,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":6400,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757861604613375,"l3_proto":"ip4","src_ip":"192.168.0.100","dst_ip":"224.0.0.7","src_port":8001,"dst_port":8001,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5,"data_analysis": {"iat": {"min":2000507,"avg":2001647.5,"max":2002608,"stddev":735.7,"var":541200.5,"ent":5.0,"data": [2000923,2002273,2001409,2001859,2002447,2001072,2001519,2002397,2002421,2002176,2000961,2000627,2002253,2002004,2002436,2001479,2000963,2002455,2002608,2001403,2000750,2002285,2000596,2002234,2001189,2000507,2001236,2002315,2001280,2001685,2001312]},"pktlen": {"min":228,"avg":228.0,"max":228,"stddev":0.0,"var":0.0,"ent":5.0,"data": [228,228,228,228,228,228,228,228,228,228,228,228,228,228,228,228,228,228,228,228,228,228,228,228,228,228,228,228,228,228,228,228]},"bins": {"c_to_s": [0,0,0,0,0,0,32,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0],"s_to_c": [0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]},"directions": [0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0],"entropies": [5.099493980,5.099493980,5.083662033,5.090722084,5.099493980,5.090722561,5.099493980,5.066284657,5.099493980,5.099493980,5.083662033,5.075056553,5.099493980,5.087411404,5.099493980,5.081950188,5.071969986,5.099493980,5.099493980,5.099493980,5.099493980,5.099493980,5.090722561,5.083662033,5.099493980,5.082388401,5.083662033,5.083662510,5.070856571,5.050446033,5.075056076,5.071649551]},"ndpi": {"confidence": {"6":"DPI"},"proto":"JSON","proto_id":"468","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
|
|
00969{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":51,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":1,"flow_state":"finished","flow_src_packets_processed":50,"flow_dst_packets_processed":0,"flow_first_seen":1757861542562301,"flow_src_last_pkt_time":1757861640642920,"flow_dst_last_pkt_time":1757861542562301,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":200,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":200,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":10000,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757861640642920,"l3_proto":"ip4","src_ip":"192.168.0.100","dst_ip":"224.0.0.7","src_port":8001,"dst_port":8001,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"JSON","proto_id":"468","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
|
|
00969{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":76,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":1,"flow_state":"finished","flow_src_packets_processed":75,"flow_dst_packets_processed":0,"flow_first_seen":1757861542562301,"flow_src_last_pkt_time":1757861690685999,"flow_dst_last_pkt_time":1757861542562301,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":200,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":200,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":15000,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757861690685999,"l3_proto":"ip4","src_ip":"192.168.0.100","dst_ip":"224.0.0.7","src_port":8001,"dst_port":8001,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"JSON","proto_id":"468","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
|
|
00971{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":101,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":1,"flow_state":"finished","flow_src_packets_processed":100,"flow_dst_packets_processed":0,"flow_first_seen":1757861542562301,"flow_src_last_pkt_time":1757861740731111,"flow_dst_last_pkt_time":1757861542562301,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":200,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":200,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":20000,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757861740731111,"l3_proto":"ip4","src_ip":"192.168.0.100","dst_ip":"224.0.0.7","src_port":8001,"dst_port":8001,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"JSON","proto_id":"468","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
|
|
00971{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":126,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":1,"flow_state":"finished","flow_src_packets_processed":125,"flow_dst_packets_processed":0,"flow_first_seen":1757861542562301,"flow_src_last_pkt_time":1757861790768306,"flow_dst_last_pkt_time":1757861542562301,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":200,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":200,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":25000,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757861790768306,"l3_proto":"ip4","src_ip":"192.168.0.100","dst_ip":"224.0.0.7","src_port":8001,"dst_port":8001,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"JSON","proto_id":"468","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
|
|
00971{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":151,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":1,"flow_state":"finished","flow_src_packets_processed":150,"flow_dst_packets_processed":0,"flow_first_seen":1757861542562301,"flow_src_last_pkt_time":1757861840818120,"flow_dst_last_pkt_time":1757861542562301,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":200,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":200,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":30000,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757861840818120,"l3_proto":"ip4","src_ip":"192.168.0.100","dst_ip":"224.0.0.7","src_port":8001,"dst_port":8001,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"JSON","proto_id":"468","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
|
|
00971{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":176,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":1,"flow_state":"finished","flow_src_packets_processed":175,"flow_dst_packets_processed":0,"flow_first_seen":1757861542562301,"flow_src_last_pkt_time":1757861890862637,"flow_dst_last_pkt_time":1757861542562301,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":200,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":200,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":35000,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757861890862637,"l3_proto":"ip4","src_ip":"192.168.0.100","dst_ip":"224.0.0.7","src_port":8001,"dst_port":8001,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"JSON","proto_id":"468","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
|
|
00971{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":201,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":1,"flow_state":"finished","flow_src_packets_processed":200,"flow_dst_packets_processed":0,"flow_first_seen":1757861542562301,"flow_src_last_pkt_time":1757861940909016,"flow_dst_last_pkt_time":1757861542562301,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":200,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":200,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":40000,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757861940909016,"l3_proto":"ip4","src_ip":"192.168.0.100","dst_ip":"224.0.0.7","src_port":8001,"dst_port":8001,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"JSON","proto_id":"468","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
|
|
00971{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":226,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":1,"flow_state":"finished","flow_src_packets_processed":225,"flow_dst_packets_processed":0,"flow_first_seen":1757861542562301,"flow_src_last_pkt_time":1757861990957758,"flow_dst_last_pkt_time":1757861542562301,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":200,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":200,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":45000,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757861990957758,"l3_proto":"ip4","src_ip":"192.168.0.100","dst_ip":"224.0.0.7","src_port":8001,"dst_port":8001,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"JSON","proto_id":"468","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
|
|
00971{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":251,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":1,"flow_state":"finished","flow_src_packets_processed":250,"flow_dst_packets_processed":0,"flow_first_seen":1757861542562301,"flow_src_last_pkt_time":1757862040999006,"flow_dst_last_pkt_time":1757861542562301,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":200,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":200,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":50000,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757862040999006,"l3_proto":"ip4","src_ip":"192.168.0.100","dst_ip":"224.0.0.7","src_port":8001,"dst_port":8001,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"JSON","proto_id":"468","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
|
|
00816{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":257,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","version":"","ndpi_version":"","ndpi_api_version":0,"size_per_flow":1512,"packets-captured":257,"packets-processed":256,"pfring_active":false,"pfring_recv":0,"pfring_drop":0,"pfring_shunt":0,"total-skipped-flows":0,"total-l4-payload-len":51200,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":1,"total-detection-updates":0,"total-updates":10,"current-active-flows":1,"total-active-flows":1,"total-idle-flows":0,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"global-alloc-count":0,"global-free-count":0,"global-alloc-bytes":0,"global-free-bytes":0,"total-events-serialized":21,"global_ts_usec":1757868120476967}
|
|
00768{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":257,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":2,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1757868120476967,"flow_src_last_pkt_time":1757868120476967,"flow_dst_last_pkt_time":1757868120476967,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757868120476967,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51216,"dst_port":1337,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
|
|
00544{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":257,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_src_last_pkt_time":1757868120476967,"flow_dst_last_pkt_time":1757868120476967,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1757868120476967,"pkt":"AAAAAAAAAAAAAAAACABFAAA0Z3RAAMcGTk1\/AAABfwAAAcgQBTnfRccPAAAAAIAC\/9f+KAAAAgT\/1wEBBAIBAwMH"}
|
|
00544{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":258,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":2,"flow_packet_id":2,"flow_src_last_pkt_time":1757868120476967,"flow_dst_last_pkt_time":1757868120476975,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1757868120476975,"pkt":"AAAAAAAAAAAAAAAACABFAAA0AABAAMcGtcF\/AAABfwAAAQU5yBBoQA0+30XHEIAS\/9f+KAAAAgT\/1wEBBAIBAwMH"}
|
|
00526{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":259,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":2,"flow_packet_id":3,"flow_src_last_pkt_time":1757868120476981,"flow_dst_last_pkt_time":1757868120476975,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1757868120476981,"pkt":"AAAAAAAAAAAAAAAACABFAAAoZ3VAAMcGTlh\/AAABfwAAAcgQBTnfRccQaEANP1AQAgD+HAAA"}
|
|
00530{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":260,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":2,"flow_packet_id":4,"flow_src_last_pkt_time":1757868120477000,"flow_dst_last_pkt_time":1757868120476975,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":56,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":56,"pkt_l4_len":22,"thread_ts_usec":1757868120477000,"pkt":"AAAAAAAAAAAAAAAACABFAAAqZ3ZAAMcGTlV\/AAABfwAAAcgQBTnfRccQaEANP1AYAgD+HgAAe30="}
|
|
00918{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":260,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":2,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1757868120476967,"flow_src_last_pkt_time":1757868120477000,"flow_dst_last_pkt_time":1757868120476975,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":2,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":2,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757868120477000,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51216,"dst_port":1337,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"JSON","proto_id":"468","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
|
|
00527{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":261,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":2,"flow_packet_id":5,"flow_src_last_pkt_time":1757868120477000,"flow_dst_last_pkt_time":1757868120477003,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1757868120477003,"pkt":"AAAAAAAAAAAAAAAACABFAAAoDM5AAMcGqP9\/AAABfwAAAQU5yBBoQA0\/30XHElAQAgD+HAAA"}
|
|
00969{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":265,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":1,"flow_state":"finished","flow_src_packets_processed":256,"flow_dst_packets_processed":0,"flow_first_seen":1757861542562301,"flow_src_last_pkt_time":1757862053009107,"flow_dst_last_pkt_time":1757861542562301,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":200,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":200,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":51200,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757868123204349,"l3_proto":"ip4","src_ip":"192.168.0.100","dst_ip":"224.0.0.7","src_port":8001,"dst_port":8001,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"JSON","proto_id":"468","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
|
|
00768{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":265,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":3,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1757868180389787,"flow_src_last_pkt_time":1757868180389787,"flow_dst_last_pkt_time":1757868180389787,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757868180389787,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":55742,"dst_port":1337,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
|
|
00545{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":265,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_src_last_pkt_time":1757868180389787,"flow_dst_last_pkt_time":1757868180389787,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1757868180389787,"pkt":"AAAAAAAAAAAAAAAACABFAAA0knNAAGsGf05\/AAABfwAAAdm+BTm3MXb\/AAAAAIAC\/9f+KAAAAgT\/1wEBBAIBAwMH"}
|
|
00544{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":266,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":3,"flow_packet_id":2,"flow_src_last_pkt_time":1757868180389787,"flow_dst_last_pkt_time":1757868180389817,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1757868180389817,"pkt":"AAAAAAAAAAAAAAAACABFAAA0AABAAGsGEcJ\/AAABfwAAAQU52b4rAjfttzF3AIAS\/9f+KAAAAgT\/1wEBBAIBAwMH"}
|
|
00526{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":267,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":3,"flow_packet_id":3,"flow_src_last_pkt_time":1757868180389845,"flow_dst_last_pkt_time":1757868180389817,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1757868180389845,"pkt":"AAAAAAAAAAAAAAAACABFAAAoknRAAGsGf1l\/AAABfwAAAdm+BTm3MXcAKwI37lAQAgD+HAAA"}
|
|
00530{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":268,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":3,"flow_packet_id":4,"flow_src_last_pkt_time":1757868180389930,"flow_dst_last_pkt_time":1757868180389817,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":57,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":57,"pkt_l4_len":23,"thread_ts_usec":1757868180389930,"pkt":"AAAAAAAAAAAAAAAACABFAAArknVAAGsGf1V\/AAABfwAAAdm+BTm3MXcAKwI37lAYAgD+HwAAe30N"}
|
|
00918{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":268,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":3,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1757868180389787,"flow_src_last_pkt_time":1757868180389930,"flow_dst_last_pkt_time":1757868180389817,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":3,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":3,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757868180389930,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":55742,"dst_port":1337,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"JSON","proto_id":"468","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
|
|
00526{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":269,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":3,"flow_packet_id":5,"flow_src_last_pkt_time":1757868180389930,"flow_dst_last_pkt_time":1757868180389947,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1757868180389947,"pkt":"AAAAAAAAAAAAAAAACABFAAAoyylAAGsGRqR\/AAABfwAAAQU52b4rAjfutzF3A1AQAgD+HAAA"}
|
|
00768{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":273,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":4,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1757868184569044,"flow_src_last_pkt_time":1757868184569044,"flow_dst_last_pkt_time":1757868184569044,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757868184569044,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":55754,"dst_port":1337,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
|
|
00544{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":273,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_src_last_pkt_time":1757868184569044,"flow_dst_last_pkt_time":1757868184569044,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1757868184569044,"pkt":"AAAAAAAAAAAAAAAACABFAAA0RRFAAHMGxLB\/AAABfwAAAdnKBTmvCVnAAAAAAIAC\/9f+KAAAAgT\/1wEBBAIBAwMH"}
|
|
00544{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":274,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":4,"flow_packet_id":2,"flow_src_last_pkt_time":1757868184569044,"flow_dst_last_pkt_time":1757868184569080,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1757868184569080,"pkt":"AAAAAAAAAAAAAAAACABFAAA0AABAAHMGCcJ\/AAABfwAAAQU52crei+FcrwlZwYAS\/9f+KAAAAgT\/1wEBBAIBAwMH"}
|
|
00526{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":275,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":4,"flow_packet_id":3,"flow_src_last_pkt_time":1757868184569110,"flow_dst_last_pkt_time":1757868184569080,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1757868184569110,"pkt":"AAAAAAAAAAAAAAAACABFAAAoRRJAAHMGxLt\/AAABfwAAAdnKBTmvCVnB3ovhXVAQAgD+HAAA"}
|
|
00530{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":276,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":4,"flow_packet_id":4,"flow_src_last_pkt_time":1757868184569195,"flow_dst_last_pkt_time":1757868184569080,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":57,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":57,"pkt_l4_len":23,"thread_ts_usec":1757868184569195,"pkt":"AAAAAAAAAAAAAAAACABFAAArRRNAAHMGxLd\/AAABfwAAAdnKBTmvCVnB3ovhXVAYAgD+HwAAe30K"}
|
|
00918{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":276,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":4,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1757868184569044,"flow_src_last_pkt_time":1757868184569195,"flow_dst_last_pkt_time":1757868184569080,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":3,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":3,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757868184569195,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":55754,"dst_port":1337,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"JSON","proto_id":"468","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
|
|
00526{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":277,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":4,"flow_packet_id":5,"flow_src_last_pkt_time":1757868184569195,"flow_dst_last_pkt_time":1757868184569213,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1757868184569213,"pkt":"AAAAAAAAAAAAAAAACABFAAAouZhAAHMGUDV\/AAABfwAAAQU52crei+FdrwlZxFAQAgD+HAAA"}
|
|
00768{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":281,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":5,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1757868189297580,"flow_src_last_pkt_time":1757868189297580,"flow_dst_last_pkt_time":1757868189297580,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757868189297580,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":55762,"dst_port":1337,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
|
|
00544{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":281,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_src_last_pkt_time":1757868189297580,"flow_dst_last_pkt_time":1757868189297580,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1757868189297580,"pkt":"AAAAAAAAAAAAAAAACABFAAA0DhVAAHMG+6x\/AAABfwAAAdnSBTlLNpT8AAAAAIAC\/9f+KAAAAgT\/1wEBBAIBAwMH"}
|
|
00545{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":282,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":5,"flow_packet_id":2,"flow_src_last_pkt_time":1757868189297580,"flow_dst_last_pkt_time":1757868189297612,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1757868189297612,"pkt":"AAAAAAAAAAAAAAAACABFAAA0AABAAHMGCcJ\/AAABfwAAAQU52dIvuus5SzaU\/YAS\/9f+KAAAAgT\/1wEBBAIBAwMH"}
|
|
00526{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":283,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":5,"flow_packet_id":3,"flow_src_last_pkt_time":1757868189297642,"flow_dst_last_pkt_time":1757868189297612,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1757868189297642,"pkt":"AAAAAAAAAAAAAAAACABFAAAoDhZAAHMG+7d\/AAABfwAAAdnSBTlLNpT9L7rrOlAQAgD+HAAA"}
|
|
00534{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":284,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":5,"flow_packet_id":4,"flow_src_last_pkt_time":1757868189297743,"flow_dst_last_pkt_time":1757868189297612,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"thread_ts_usec":1757868189297743,"pkt":"AAAAAAAAAAAAAAAACABFAAAsDhdAAHMG+7J\/AAABfwAAAdnSBTlLNpT9L7rrOlAYAgD+IAAAe30NCg=="}
|
|
00918{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":284,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":5,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1757868189297580,"flow_src_last_pkt_time":1757868189297743,"flow_dst_last_pkt_time":1757868189297612,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":4,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":4,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757868189297743,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":55762,"dst_port":1337,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"JSON","proto_id":"468","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
|
|
00526{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":285,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":5,"flow_packet_id":5,"flow_src_last_pkt_time":1757868189297743,"flow_dst_last_pkt_time":1757868189297767,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1757868189297767,"pkt":"AAAAAAAAAAAAAAAACABFAAAok1lAAHMGdnR\/AAABfwAAAQU52dIvuus6SzaVAVAQAgD+HAAA"}
|
|
00768{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":289,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":6,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1757868280049973,"flow_src_last_pkt_time":1757868280049973,"flow_dst_last_pkt_time":1757868280049973,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757868280049973,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":44484,"dst_port":1337,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
|
|
00544{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":289,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_src_last_pkt_time":1757868280049973,"flow_dst_last_pkt_time":1757868280049973,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1757868280049973,"pkt":"AAAAAAAAAAAAAAAACABFAAA01BRAAIAGKK1\/AAABfwAAAa3EBTlwfHkJAAAAAIAC\/9f+KAAAAgT\/1wEBBAIBAwMH"}
|
|
00545{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":290,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":6,"flow_packet_id":2,"flow_src_last_pkt_time":1757868280049973,"flow_dst_last_pkt_time":1757868280049986,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1757868280049986,"pkt":"AAAAAAAAAAAAAAAACABFAAA0AABAAIAG\/MF\/AAABfwAAAQU5rcT5ZzYacHx5CoAS\/9f+KAAAAgT\/1wEBBAIBAwMH"}
|
|
00526{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":291,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":6,"flow_packet_id":3,"flow_src_last_pkt_time":1757868280049997,"flow_dst_last_pkt_time":1757868280049986,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1757868280049997,"pkt":"AAAAAAAAAAAAAAAACABFAAAo1BVAAIAGKLh\/AAABfwAAAa3EBTlwfHkK+Wc2G1AQAgD+HAAA"}
|
|
00534{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":292,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":6,"flow_packet_id":4,"flow_src_last_pkt_time":1757868280050030,"flow_dst_last_pkt_time":1757868280049986,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"thread_ts_usec":1757868280050030,"pkt":"AAAAAAAAAAAAAAAACABFAAAu1BZAAIAGKLF\/AAABfwAAAa3EBTlwfHkK+Wc2G1AYAgD+IgAAeyIiOjB9"}
|
|
00918{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":292,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":6,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1757868280049973,"flow_src_last_pkt_time":1757868280050030,"flow_dst_last_pkt_time":1757868280049986,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":6,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":6,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757868280050030,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":44484,"dst_port":1337,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"JSON","proto_id":"468","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
|
|
00526{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":293,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":6,"flow_packet_id":5,"flow_src_last_pkt_time":1757868280050030,"flow_dst_last_pkt_time":1757868280050036,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1757868280050036,"pkt":"AAAAAAAAAAAAAAAACABFAAAodOhAAIAGh+V\/AAABfwAAAQU5rcT5ZzYbcHx5EFAQAgD+HAAA"}
|
|
00956{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":297,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":2,"flow_state":"finished","flow_src_packets_processed":5,"flow_dst_packets_processed":3,"flow_first_seen":1757868120476967,"flow_src_last_pkt_time":1757868123204349,"flow_dst_last_pkt_time":1757868123204308,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":2,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":2,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757868284349598,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51216,"dst_port":1337,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"JSON","proto_id":"468","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
|
|
00768{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":297,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":7,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1757868303779241,"flow_src_last_pkt_time":1757868303779241,"flow_dst_last_pkt_time":1757868303779241,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757868303779241,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49446,"dst_port":1337,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
|
|
00544{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":297,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_src_last_pkt_time":1757868303779241,"flow_dst_last_pkt_time":1757868303779241,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1757868303779241,"pkt":"AAAAAAAAAAAAAAAACABFAAA08x5AALgG0aJ\/AAABfwAAAcEmBTl4lliNAAAAAIAC\/9f+KAAAAgT\/1wEBBAIBAwMH"}
|
|
00544{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":298,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":7,"flow_packet_id":2,"flow_src_last_pkt_time":1757868303779241,"flow_dst_last_pkt_time":1757868303779270,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1757868303779270,"pkt":"AAAAAAAAAAAAAAAACABFAAA0AABAALgGxMF\/AAABfwAAAQU5wSa3o6HSeJZYjoAS\/9f+KAAAAgT\/1wEBBAIBAwMH"}
|
|
00526{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":299,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":7,"flow_packet_id":3,"flow_src_last_pkt_time":1757868303779298,"flow_dst_last_pkt_time":1757868303779270,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1757868303779298,"pkt":"AAAAAAAAAAAAAAAACABFAAAo8x9AALgG0a1\/AAABfwAAAcEmBTl4lliOt6Oh01AQAgD+HAAA"}
|
|
00538{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":300,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":7,"flow_packet_id":4,"flow_src_last_pkt_time":1757868303779400,"flow_dst_last_pkt_time":1757868303779270,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":61,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":61,"pkt_l4_len":27,"thread_ts_usec":1757868303779400,"pkt":"AAAAAAAAAAAAAAAACABFAAAv8yBAALgG0aV\/AAABfwAAAcEmBTl4lliOt6Oh01AYAgD+IwAAeyIiOjB9DQ=="}
|
|
00918{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":300,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":7,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1757868303779241,"flow_src_last_pkt_time":1757868303779400,"flow_dst_last_pkt_time":1757868303779270,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":7,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":7,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757868303779400,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49446,"dst_port":1337,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"JSON","proto_id":"468","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
|
|
00526{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":301,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":7,"flow_packet_id":5,"flow_src_last_pkt_time":1757868303779400,"flow_dst_last_pkt_time":1757868303779424,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1757868303779424,"pkt":"AAAAAAAAAAAAAAAACABFAAAo4uNAALgG4el\/AAABfwAAAQU5wSa3o6HTeJZYlVAQAgD+HAAA"}
|
|
00956{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":305,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":3,"flow_state":"finished","flow_src_packets_processed":5,"flow_dst_packets_processed":3,"flow_first_seen":1757868180389787,"flow_src_last_pkt_time":1757868181585746,"flow_dst_last_pkt_time":1757868181585696,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":3,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":3,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757868306068269,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":55742,"dst_port":1337,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"JSON","proto_id":"468","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
|
|
00956{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":305,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":4,"flow_state":"finished","flow_src_packets_processed":5,"flow_dst_packets_processed":3,"flow_first_seen":1757868184569044,"flow_src_last_pkt_time":1757868185372687,"flow_dst_last_pkt_time":1757868185372648,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":3,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":3,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757868306068269,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":55754,"dst_port":1337,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"JSON","proto_id":"468","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
|
|
00768{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":305,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":8,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1757868327369949,"flow_src_last_pkt_time":1757868327369949,"flow_dst_last_pkt_time":1757868327369949,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757868327369949,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":34544,"dst_port":1337,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
|
|
00544{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":305,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_src_last_pkt_time":1757868327369949,"flow_dst_last_pkt_time":1757868327369949,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1757868327369949,"pkt":"AAAAAAAAAAAAAAAACABFAAA0PPtAALgGh8Z\/AAABfwAAAYbwBTn5VMjKAAAAAIAC\/9f+KAAAAgT\/1wEBBAIBAwMH"}
|
|
00544{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":306,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":8,"flow_packet_id":2,"flow_src_last_pkt_time":1757868327369949,"flow_dst_last_pkt_time":1757868327369990,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1757868327369990,"pkt":"AAAAAAAAAAAAAAAACABFAAA0AABAALgGxMF\/AAABfwAAAQU5hvBSCbeG+VTIy4AS\/9f+KAAAAgT\/1wEBBAIBAwMH"}
|
|
00526{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":307,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":8,"flow_packet_id":3,"flow_src_last_pkt_time":1757868327370019,"flow_dst_last_pkt_time":1757868327369990,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1757868327370019,"pkt":"AAAAAAAAAAAAAAAACABFAAAoPPxAALgGh9F\/AAABfwAAAYbwBTn5VMjLUgm3h1AQAgD+HAAA"}
|
|
00538{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":308,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":8,"flow_packet_id":4,"flow_src_last_pkt_time":1757868327370105,"flow_dst_last_pkt_time":1757868327369990,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":61,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":61,"pkt_l4_len":27,"thread_ts_usec":1757868327370105,"pkt":"AAAAAAAAAAAAAAAACABFAAAvPP1AALgGh8l\/AAABfwAAAYbwBTn5VMjLUgm3h1AYAgD+IwAAeyIiOjB9Cg=="}
|
|
00918{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":308,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":8,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1757868327369949,"flow_src_last_pkt_time":1757868327370105,"flow_dst_last_pkt_time":1757868327369990,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":7,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":7,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757868327370105,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":34544,"dst_port":1337,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"JSON","proto_id":"468","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
|
|
00526{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":309,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":8,"flow_packet_id":5,"flow_src_last_pkt_time":1757868327370105,"flow_dst_last_pkt_time":1757868327370123,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1757868327370123,"pkt":"AAAAAAAAAAAAAAAACABFAAAoRYNAALgGf0p\/AAABfwAAAQU5hvBSCbeH+VTI0lAQAgD+HAAA"}
|
|
00768{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":313,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":9,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1757868333098218,"flow_src_last_pkt_time":1757868333098218,"flow_dst_last_pkt_time":1757868333098218,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757868333098218,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":54604,"dst_port":1337,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
|
|
00545{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":313,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_src_last_pkt_time":1757868333098218,"flow_dst_last_pkt_time":1757868333098218,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1757868333098218,"pkt":"AAAAAAAAAAAAAAAACABFAAA0a9JAALgGWO9\/AAABfwAAAdVMBTk\/5JooAAAAAIAC\/9f+KAAAAgT\/1wEBBAIBAwMH"}
|
|
00545{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":314,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":9,"flow_packet_id":2,"flow_src_last_pkt_time":1757868333098218,"flow_dst_last_pkt_time":1757868333098232,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1757868333098232,"pkt":"AAAAAAAAAAAAAAAACABFAAA0AABAALgGxMF\/AAABfwAAAQU51Ux\/ouZ0P+SaKYAS\/9f+KAAAAgT\/1wEBBAIBAwMH"}
|
|
00527{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":315,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":9,"flow_packet_id":3,"flow_src_last_pkt_time":1757868333098245,"flow_dst_last_pkt_time":1757868333098232,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1757868333098245,"pkt":"AAAAAAAAAAAAAAAACABFAAAoa9NAALgGWPp\/AAABfwAAAdVMBTk\/5Jopf6LmdVAQAgD+HAAA"}
|
|
00539{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":316,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":9,"flow_packet_id":4,"flow_src_last_pkt_time":1757868333098281,"flow_dst_last_pkt_time":1757868333098232,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"thread_ts_usec":1757868333098281,"pkt":"AAAAAAAAAAAAAAAACABFAAAwa9RAALgGWPF\/AAABfwAAAdVMBTk\/5Jopf6LmdVAYAgD+JAAAeyIiOjB9DQo="}
|
|
00918{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":316,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":9,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1757868333098218,"flow_src_last_pkt_time":1757868333098281,"flow_dst_last_pkt_time":1757868333098232,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":8,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":8,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757868333098281,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":54604,"dst_port":1337,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"JSON","proto_id":"468","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
|
|
00527{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":317,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":9,"flow_packet_id":5,"flow_src_last_pkt_time":1757868333098281,"flow_dst_last_pkt_time":1757868333098288,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1757868333098288,"pkt":"AAAAAAAAAAAAAAAACABFAAAoSHZAALgGfFd\/AAABfwAAAQU51Ux\/ouZ1P+SaMVAQAgD+HAAA"}
|
|
00956{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":321,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":5,"flow_state":"finished","flow_src_packets_processed":5,"flow_dst_packets_processed":3,"flow_first_seen":1757868189297580,"flow_src_last_pkt_time":1757868192188807,"flow_dst_last_pkt_time":1757868192188794,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":4,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":4,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757868334688500,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":55762,"dst_port":1337,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"JSON","proto_id":"468","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
|
|
00769{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":321,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":10,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1757868398132990,"flow_src_last_pkt_time":1757868398132990,"flow_dst_last_pkt_time":1757868398132990,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757868398132990,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":44692,"dst_port":1337,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
|
|
00545{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":321,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_src_last_pkt_time":1757868398132990,"flow_dst_last_pkt_time":1757868398132990,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1757868398132990,"pkt":"AAAAAAAAAAAAAAAACABFAAA0Pa5AAH4GwRN\/AAABfwAAAa6UBTnEE6svAAAAAIAC\/9f+KAAAAgT\/1wEBBAIBAwMH"}
|
|
00546{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":322,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":10,"flow_packet_id":2,"flow_src_last_pkt_time":1757868398132990,"flow_dst_last_pkt_time":1757868398132999,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1757868398132999,"pkt":"AAAAAAAAAAAAAAAACABFAAA0AABAAH4G\/sF\/AAABfwAAAQU5rpTB6XLFxBOrMIAS\/9f+KAAAAgT\/1wEBBAIBAwMH"}
|
|
00527{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":323,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":10,"flow_packet_id":3,"flow_src_last_pkt_time":1757868398133006,"flow_dst_last_pkt_time":1757868398132999,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1757868398133006,"pkt":"AAAAAAAAAAAAAAAACABFAAAoPa9AAH4GwR5\/AAABfwAAAa6UBTnEE6swwelyxlAQAgD+HAAA"}
|
|
00539{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":324,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":10,"flow_packet_id":4,"flow_src_last_pkt_time":1757868398133026,"flow_dst_last_pkt_time":1757868398132999,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":61,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":61,"pkt_l4_len":27,"thread_ts_usec":1757868398133026,"pkt":"AAAAAAAAAAAAAAAACABFAAAvPbBAAH4GwRZ\/AAABfwAAAa6UBTnEE6swwelyxlAYAgD+IwAAeyIiOiIifQ=="}
|
|
00919{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":324,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":10,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1757868398132990,"flow_src_last_pkt_time":1757868398133026,"flow_dst_last_pkt_time":1757868398132999,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":7,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":7,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757868398133026,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":44692,"dst_port":1337,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"JSON","proto_id":"468","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
|
|
00527{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":325,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":10,"flow_packet_id":5,"flow_src_last_pkt_time":1757868398133026,"flow_dst_last_pkt_time":1757868398133029,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1757868398133029,"pkt":"AAAAAAAAAAAAAAAACABFAAAoZ1pAAH4Gl3N\/AAABfwAAAQU5rpTB6XLGxBOrN1AQAgD+HAAA"}
|
|
00769{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":329,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":11,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1757868409168317,"flow_src_last_pkt_time":1757868409168317,"flow_dst_last_pkt_time":1757868409168317,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757868409168317,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":46952,"dst_port":1337,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
|
|
00545{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":329,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_src_last_pkt_time":1757868409168317,"flow_dst_last_pkt_time":1757868409168317,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1757868409168317,"pkt":"AAAAAAAAAAAAAAAACABFAAA0TelAAH4GsNh\/AAABfwAAAbdoBTmwVqcXAAAAAIAC\/9f+KAAAAgT\/1wEBBAIBAwMH"}
|
|
00546{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":330,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":11,"flow_packet_id":2,"flow_src_last_pkt_time":1757868409168317,"flow_dst_last_pkt_time":1757868409168353,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1757868409168353,"pkt":"AAAAAAAAAAAAAAAACABFAAA0AABAAH4G\/sF\/AAABfwAAAQU5t2gOhPcnsFanGIAS\/9f+KAAAAgT\/1wEBBAIBAwMH"}
|
|
00527{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":331,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":11,"flow_packet_id":3,"flow_src_last_pkt_time":1757868409168383,"flow_dst_last_pkt_time":1757868409168353,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1757868409168383,"pkt":"AAAAAAAAAAAAAAAACABFAAAoTepAAH4GsON\/AAABfwAAAbdoBTmwVqcYDoT3KFAQAgD+HAAA"}
|
|
00539{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":332,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":11,"flow_packet_id":4,"flow_src_last_pkt_time":1757868409168478,"flow_dst_last_pkt_time":1757868409168353,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"thread_ts_usec":1757868409168478,"pkt":"AAAAAAAAAAAAAAAACABFAAAwTetAAH4GsNp\/AAABfwAAAbdoBTmwVqcYDoT3KFAYAgD+JAAAeyIiOiIifQo="}
|
|
00919{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":332,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":11,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1757868409168317,"flow_src_last_pkt_time":1757868409168478,"flow_dst_last_pkt_time":1757868409168353,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":8,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":8,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757868409168478,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":46952,"dst_port":1337,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"JSON","proto_id":"468","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
|
|
00527{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":333,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":11,"flow_packet_id":5,"flow_src_last_pkt_time":1757868409168478,"flow_dst_last_pkt_time":1757868409168498,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1757868409168498,"pkt":"AAAAAAAAAAAAAAAACABFAAAooFNAAH4GXnp\/AAABfwAAAQU5t2gOhPcosFanIFAQAgD+HAAA"}
|
|
00769{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":337,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":12,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1757868413996615,"flow_src_last_pkt_time":1757868413996615,"flow_dst_last_pkt_time":1757868413996615,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757868413996615,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":44098,"dst_port":1337,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
|
|
00545{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":337,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_src_last_pkt_time":1757868413996615,"flow_dst_last_pkt_time":1757868413996615,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1757868413996615,"pkt":"AAAAAAAAAAAAAAAACABFAAA0HDFAAH4G4pB\/AAABfwAAAaxCBTmM8ToaAAAAAIAC\/9f+KAAAAgT\/1wEBBAIBAwMH"}
|
|
00547{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":338,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":12,"flow_packet_id":2,"flow_src_last_pkt_time":1757868413996615,"flow_dst_last_pkt_time":1757868413996622,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1757868413996622,"pkt":"AAAAAAAAAAAAAAAACABFAAA0AABAAH4G\/sF\/AAABfwAAAQU5rEJv8\/jCjPE6G4AS\/9f+KAAAAgT\/1wEBBAIBAwMH"}
|
|
00528{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":339,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":12,"flow_packet_id":3,"flow_src_last_pkt_time":1757868413996629,"flow_dst_last_pkt_time":1757868413996622,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1757868413996629,"pkt":"AAAAAAAAAAAAAAAACABFAAAoHDJAAH4G4pt\/AAABfwAAAaxCBTmM8Tobb\/P4w1AQAgD+HAAA"}
|
|
00540{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":340,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":12,"flow_packet_id":4,"flow_src_last_pkt_time":1757868413996648,"flow_dst_last_pkt_time":1757868413996622,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"thread_ts_usec":1757868413996648,"pkt":"AAAAAAAAAAAAAAAACABFAAAwHDNAAH4G4pJ\/AAABfwAAAaxCBTmM8Tobb\/P4w1AYAgD+JAAAeyIiOiIifQ0="}
|
|
00919{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":340,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":12,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1757868413996615,"flow_src_last_pkt_time":1757868413996648,"flow_dst_last_pkt_time":1757868413996622,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":8,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":8,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757868413996648,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":44098,"dst_port":1337,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"JSON","proto_id":"468","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
|
|
00528{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":341,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":12,"flow_packet_id":5,"flow_src_last_pkt_time":1757868413996648,"flow_dst_last_pkt_time":1757868413996652,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1757868413996652,"pkt":"AAAAAAAAAAAAAAAACABFAAAoyA9AAH4GNr5\/AAABfwAAAQU5rEJv8\/jDjPE6I1AQAgD+HAAA"}
|
|
00956{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":345,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":6,"flow_state":"finished","flow_src_packets_processed":5,"flow_dst_packets_processed":3,"flow_first_seen":1757868280049973,"flow_src_last_pkt_time":1757868284349598,"flow_dst_last_pkt_time":1757868284349558,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":6,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":6,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757868415132118,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":44484,"dst_port":1337,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"JSON","proto_id":"468","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
|
|
00769{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":345,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":13,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1757868419237786,"flow_src_last_pkt_time":1757868419237786,"flow_dst_last_pkt_time":1757868419237786,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757868419237786,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":44106,"dst_port":1337,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
|
|
00545{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":345,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_src_last_pkt_time":1757868419237786,"flow_dst_last_pkt_time":1757868419237786,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1757868419237786,"pkt":"AAAAAAAAAAAAAAAACABFAAA0eztAAH4Gg4Z\/AAABfwAAAaxKBTkWl+fNAAAAAIAC\/9f+KAAAAgT\/1wEBBAIBAwMH"}
|
|
00546{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":346,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":13,"flow_packet_id":2,"flow_src_last_pkt_time":1757868419237786,"flow_dst_last_pkt_time":1757868419237794,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1757868419237794,"pkt":"AAAAAAAAAAAAAAAACABFAAA0AABAAH4G\/sF\/AAABfwAAAQU5rEpnDpftFpfnzoAS\/9f+KAAAAgT\/1wEBBAIBAwMH"}
|
|
00527{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":347,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":13,"flow_packet_id":3,"flow_src_last_pkt_time":1757868419237800,"flow_dst_last_pkt_time":1757868419237794,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1757868419237800,"pkt":"AAAAAAAAAAAAAAAACABFAAAoezxAAH4Gg5F\/AAABfwAAAaxKBTkWl+fOZw6X7lAQAgD+HAAA"}
|
|
00539{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":348,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":13,"flow_packet_id":4,"flow_src_last_pkt_time":1757868419237819,"flow_dst_last_pkt_time":1757868419237794,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":63,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":63,"pkt_l4_len":29,"thread_ts_usec":1757868419237819,"pkt":"AAAAAAAAAAAAAAAACABFAAAxez1AAH4Gg4d\/AAABfwAAAaxKBTkWl+fOZw6X7lAYAgD+JQAAeyIiOiIifQ0K"}
|
|
00919{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":348,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":13,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1757868419237786,"flow_src_last_pkt_time":1757868419237819,"flow_dst_last_pkt_time":1757868419237794,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":9,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":9,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757868419237819,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":44106,"dst_port":1337,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"JSON","proto_id":"468","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
|
|
00527{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":349,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":13,"flow_packet_id":5,"flow_src_last_pkt_time":1757868419237819,"flow_dst_last_pkt_time":1757868419237823,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1757868419237823,"pkt":"AAAAAAAAAAAAAAAACABFAAAoOHtAAH4GxlJ\/AAABfwAAAQU5rEpnDpfuFpfn11AQAgD+HAAA"}
|
|
00769{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":353,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":14,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1757868526055882,"flow_src_last_pkt_time":1757868526055882,"flow_dst_last_pkt_time":1757868526055882,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757868526055882,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50676,"dst_port":1337,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
|
|
00546{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":353,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_src_last_pkt_time":1757868526055882,"flow_dst_last_pkt_time":1757868526055882,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1757868526055882,"pkt":"AAAAAAAAAAAAAAAACABFAAA0V6xAAG4GtxV\/AAABfwAAAcX0BTmL2FT\/AAAAAIAC\/9f+KAAAAgT\/1wEBBAIBAwMH"}
|
|
00545{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":354,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":14,"flow_packet_id":2,"flow_src_last_pkt_time":1757868526055882,"flow_dst_last_pkt_time":1757868526055891,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1757868526055891,"pkt":"AAAAAAAAAAAAAAAACABFAAA0AABAAG4GDsJ\/AAABfwAAAQU5xfS5lU+li9hVAIAS\/9f+KAAAAgT\/1wEBBAIBAwMH"}
|
|
00527{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":355,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":14,"flow_packet_id":3,"flow_src_last_pkt_time":1757868526055898,"flow_dst_last_pkt_time":1757868526055891,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1757868526055898,"pkt":"AAAAAAAAAAAAAAAACABFAAAoV61AAG4GtyB\/AAABfwAAAcX0BTmL2FUAuZVPplAQAgD+HAAA"}
|
|
00601{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":356,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":14,"flow_packet_id":4,"flow_src_last_pkt_time":1757868526055917,"flow_dst_last_pkt_time":1757868526055891,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"thread_ts_usec":1757868526055917,"pkt":"AAAAAAAAAAAAAAAACABFAABcV65AAG4Gtut\/AAABfwAAAcX0BTmL2FUAuZVPplAYAgD+UAAAeyIiOjAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICB9Cg=="}
|
|
00921{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":356,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":14,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1757868526055882,"flow_src_last_pkt_time":1757868526055917,"flow_dst_last_pkt_time":1757868526055891,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":52,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":52,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757868526055917,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50676,"dst_port":1337,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"JSON","proto_id":"468","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
|
|
00527{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":357,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":14,"flow_packet_id":5,"flow_src_last_pkt_time":1757868526055917,"flow_dst_last_pkt_time":1757868526055921,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1757868526055921,"pkt":"AAAAAAAAAAAAAAAACABFAAAoImJAAG4G7Gt\/AAABfwAAAQU5xfS5lU+mi9hVNFAQAgD+HAAA"}
|
|
00769{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":361,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":15,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1757868531294312,"flow_src_last_pkt_time":1757868531294312,"flow_dst_last_pkt_time":1757868531294312,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757868531294312,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":43766,"dst_port":1337,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
|
|
00546{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":361,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_src_last_pkt_time":1757868531294312,"flow_dst_last_pkt_time":1757868531294312,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1757868531294312,"pkt":"AAAAAAAAAAAAAAAACABFAAA0D1tAAG4G\/2Z\/AAABfwAAAar2BTmVYRA1AAAAAIAC\/9f+KAAAAgT\/1wEBBAIBAwMH"}
|
|
00545{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":362,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":15,"flow_packet_id":2,"flow_src_last_pkt_time":1757868531294312,"flow_dst_last_pkt_time":1757868531294342,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1757868531294342,"pkt":"AAAAAAAAAAAAAAAACABFAAA0AABAAG4GDsJ\/AAABfwAAAQU5qvZRjc3GlWEQNoAS\/9f+KAAAAgT\/1wEBBAIBAwMH"}
|
|
00528{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":363,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":15,"flow_packet_id":3,"flow_src_last_pkt_time":1757868531294372,"flow_dst_last_pkt_time":1757868531294342,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1757868531294372,"pkt":"AAAAAAAAAAAAAAAACABFAAAoD1xAAG4G\/3F\/AAABfwAAAar2BTmVYRA2UY3Nx1AQAgD+HAAA"}
|
|
00598{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":364,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":15,"flow_packet_id":4,"flow_src_last_pkt_time":1757868531294462,"flow_dst_last_pkt_time":1757868531294342,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"thread_ts_usec":1757868531294462,"pkt":"AAAAAAAAAAAAAAAACABFAABbD11AAG4G\/z1\/AAABfwAAAar2BTmVYRA2UY3Nx1AYAgD+TwAAeyIiOjAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICB9"}
|
|
00921{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":364,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":15,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1757868531294312,"flow_src_last_pkt_time":1757868531294462,"flow_dst_last_pkt_time":1757868531294342,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":51,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":51,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757868531294462,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":43766,"dst_port":1337,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"JSON","proto_id":"468","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
|
|
00527{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":365,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":15,"flow_packet_id":5,"flow_src_last_pkt_time":1757868531294462,"flow_dst_last_pkt_time":1757868531294481,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1757868531294481,"pkt":"AAAAAAAAAAAAAAAACABFAAAofZtAAG4GkTJ\/AAABfwAAAQU5qvZRjc3HlWEQaVAQAgD+HAAA"}
|
|
00956{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":369,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":8,"flow_state":"finished","flow_src_packets_processed":5,"flow_dst_packets_processed":3,"flow_first_seen":1757868327369949,"flow_src_last_pkt_time":1757868329746562,"flow_dst_last_pkt_time":1757868329746521,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":7,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":7,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757868531650491,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":34544,"dst_port":1337,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"JSON","proto_id":"468","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
|
|
00957{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":369,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":10,"flow_state":"finished","flow_src_packets_processed":5,"flow_dst_packets_processed":3,"flow_first_seen":1757868398132990,"flow_src_last_pkt_time":1757868399915435,"flow_dst_last_pkt_time":1757868399915389,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":7,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":7,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757868531650491,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":44692,"dst_port":1337,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"JSON","proto_id":"468","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
|
|
00957{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":369,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":11,"flow_state":"finished","flow_src_packets_processed":5,"flow_dst_packets_processed":3,"flow_first_seen":1757868409168317,"flow_src_last_pkt_time":1757868411645467,"flow_dst_last_pkt_time":1757868411645456,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":8,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":8,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757868531650491,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":46952,"dst_port":1337,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"JSON","proto_id":"468","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
|
|
00956{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":369,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":7,"flow_state":"finished","flow_src_packets_processed":5,"flow_dst_packets_processed":3,"flow_first_seen":1757868303779241,"flow_src_last_pkt_time":1757868306068269,"flow_dst_last_pkt_time":1757868306068259,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":7,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":7,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757868531650491,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49446,"dst_port":1337,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"JSON","proto_id":"468","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
|
|
00956{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":369,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":9,"flow_state":"finished","flow_src_packets_processed":5,"flow_dst_packets_processed":3,"flow_first_seen":1757868333098218,"flow_src_last_pkt_time":1757868334688500,"flow_dst_last_pkt_time":1757868334688455,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":8,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":8,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757868531650491,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":54604,"dst_port":1337,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"JSON","proto_id":"468","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
|
|
00769{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":369,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":16,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1757868590931063,"flow_src_last_pkt_time":1757868590931063,"flow_dst_last_pkt_time":1757868590931063,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757868590931063,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":52076,"dst_port":1337,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
|
|
00545{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":369,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_src_last_pkt_time":1757868590931063,"flow_dst_last_pkt_time":1757868590931063,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1757868590931063,"pkt":"AAAAAAAAAAAAAAAACABFAAA0RkVAAG4GyHx\/AAABfwAAActsBTm7vpbpAAAAAIAC\/9f+KAAAAgT\/1wEBBAIBAwMH"}
|
|
00545{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":370,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":16,"flow_packet_id":2,"flow_src_last_pkt_time":1757868590931063,"flow_dst_last_pkt_time":1757868590931070,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1757868590931070,"pkt":"AAAAAAAAAAAAAAAACABFAAA0AABAAG4GDsJ\/AAABfwAAAQU5y2zXvnStu76W6oAS\/9f+KAAAAgT\/1wEBBAIBAwMH"}
|
|
00527{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":371,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":16,"flow_packet_id":3,"flow_src_last_pkt_time":1757868590931077,"flow_dst_last_pkt_time":1757868590931070,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1757868590931077,"pkt":"AAAAAAAAAAAAAAAACABFAAAoRkZAAG4GyId\/AAABfwAAActsBTm7vpbq1750rlAQAgD+HAAA"}
|
|
00539{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":372,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":16,"flow_packet_id":4,"flow_src_last_pkt_time":1757868590931100,"flow_dst_last_pkt_time":1757868590931070,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":63,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":63,"pkt_l4_len":29,"thread_ts_usec":1757868590931100,"pkt":"AAAAAAAAAAAAAAAACABFAAAxRkdAAG4GyH1\/AAABfwAAActsBTm7vpbq1750rlAYAgD+JQAAeyJhIjoiYiJ9"}
|
|
00919{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":372,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":16,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1757868590931063,"flow_src_last_pkt_time":1757868590931100,"flow_dst_last_pkt_time":1757868590931070,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":9,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":9,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757868590931100,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":52076,"dst_port":1337,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"JSON","proto_id":"468","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
|
|
00527{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":373,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":16,"flow_packet_id":5,"flow_src_last_pkt_time":1757868590931100,"flow_dst_last_pkt_time":1757868590931105,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1757868590931105,"pkt":"AAAAAAAAAAAAAAAACABFAAAoBddAAG4GCPd\/AAABfwAAAQU5y2zXvnSuu76W81AQAgD+HAAA"}
|
|
00769{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":377,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":17,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1757868595728426,"flow_src_last_pkt_time":1757868595728426,"flow_dst_last_pkt_time":1757868595728426,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757868595728426,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":52088,"dst_port":1337,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
|
|
00545{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":377,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_src_last_pkt_time":1757868595728426,"flow_dst_last_pkt_time":1757868595728426,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1757868595728426,"pkt":"AAAAAAAAAAAAAAAACABFAAA0YIpAAG4Grjd\/AAABfwAAAct4BTmq8xDVAAAAAIAC\/9f+KAAAAgT\/1wEBBAIBAwMH"}
|
|
00545{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":378,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":17,"flow_packet_id":2,"flow_src_last_pkt_time":1757868595728426,"flow_dst_last_pkt_time":1757868595728456,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1757868595728456,"pkt":"AAAAAAAAAAAAAAAACABFAAA0AABAAG4GDsJ\/AAABfwAAAQU5y3gJ3mB0qvMQ1oAS\/9f+KAAAAgT\/1wEBBAIBAwMH"}
|
|
00527{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":379,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":17,"flow_packet_id":3,"flow_src_last_pkt_time":1757868595728485,"flow_dst_last_pkt_time":1757868595728456,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1757868595728485,"pkt":"AAAAAAAAAAAAAAAACABFAAAoYItAAG4GrkJ\/AAABfwAAAct4BTmq8xDWCd5gdVAQAgD+HAAA"}
|
|
00543{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":380,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":17,"flow_packet_id":4,"flow_src_last_pkt_time":1757868595728570,"flow_dst_last_pkt_time":1757868595728456,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":65,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":65,"pkt_l4_len":31,"thread_ts_usec":1757868595728570,"pkt":"AAAAAAAAAAAAAAAACABFAAAzYIxAAG4GrjZ\/AAABfwAAAct4BTmq8xDWCd5gdVAYAgD+JwAAeyJhIjoiYiJ9DQo="}
|
|
00921{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":380,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":17,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1757868595728426,"flow_src_last_pkt_time":1757868595728570,"flow_dst_last_pkt_time":1757868595728456,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":11,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":11,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757868595728570,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":52088,"dst_port":1337,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"JSON","proto_id":"468","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
|
|
00527{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":381,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":17,"flow_packet_id":5,"flow_src_last_pkt_time":1757868595728570,"flow_dst_last_pkt_time":1757868595728611,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1757868595728611,"pkt":"AAAAAAAAAAAAAAAACABFAAAos55AAG4GWy9\/AAABfwAAAQU5y3gJ3mB1qvMQ4VAQAgD+HAAA"}
|
|
00957{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":385,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":12,"flow_state":"finished","flow_src_packets_processed":5,"flow_dst_packets_processed":3,"flow_first_seen":1757868413996615,"flow_src_last_pkt_time":1757868415132118,"flow_dst_last_pkt_time":1757868415132065,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":8,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":8,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757868597644709,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":44098,"dst_port":1337,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"JSON","proto_id":"468","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
|
|
00957{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":385,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":13,"flow_state":"finished","flow_src_packets_processed":5,"flow_dst_packets_processed":3,"flow_first_seen":1757868419237786,"flow_src_last_pkt_time":1757868420180076,"flow_dst_last_pkt_time":1757868420180034,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":9,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":9,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757868597644709,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":44106,"dst_port":1337,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"JSON","proto_id":"468","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
|
|
00820{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":385,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","version":"","ndpi_version":"","ndpi_api_version":0,"size_per_flow":1512,"packets-captured":385,"packets-processed":384,"pfring_active":false,"pfring_recv":0,"pfring_drop":0,"pfring_shunt":0,"total-skipped-flows":0,"total-l4-payload-len":51395,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":17,"total-detection-updates":0,"total-updates":10,"current-active-flows":4,"total-active-flows":17,"total-idle-flows":13,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"global-alloc-count":0,"global-free-count":0,"global-alloc-bytes":0,"global-free-bytes":0,"total-events-serialized":147,"global_ts_usec":1757872117536529}
|
|
00769{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":385,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":18,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1757872117536529,"flow_src_last_pkt_time":1757872117536529,"flow_dst_last_pkt_time":1757872117536529,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757872117536529,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":42162,"dst_port":1337,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
|
|
00545{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":385,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_src_last_pkt_time":1757872117536529,"flow_dst_last_pkt_time":1757872117536529,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1757872117536529,"pkt":"AAAAAAAAAAAAAAAACABFAAA0iWdAAHYGfVp\/AAABfwAAAaSyBTmcJttjAAAAAIAC\/9f+KAAAAgT\/1wEBBAIBAwMH"}
|
|
00546{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":386,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":18,"flow_packet_id":2,"flow_src_last_pkt_time":1757872117536529,"flow_dst_last_pkt_time":1757872117536537,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1757872117536537,"pkt":"AAAAAAAAAAAAAAAACABFAAA0AABAAHYGBsJ\/AAABfwAAAQU5pLI\/sUmwnCbbZIAS\/9f+KAAAAgT\/1wEBBAIBAwMH"}
|
|
00527{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":387,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":18,"flow_packet_id":3,"flow_src_last_pkt_time":1757872117536544,"flow_dst_last_pkt_time":1757872117536537,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1757872117536544,"pkt":"AAAAAAAAAAAAAAAACABFAAAoiWhAAHYGfWV\/AAABfwAAAaSyBTmcJttkP7FJsVAQAgD+HAAA"}
|
|
00551{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":388,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":18,"flow_packet_id":4,"flow_src_last_pkt_time":1757872117536564,"flow_dst_last_pkt_time":1757872117536537,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"thread_ts_usec":1757872117536564,"pkt":"AAAAAAAAAAAAAAAACABFAAA5iWlAAHYGfVN\/AAABfwAAAaSyBTmcJttkP7FJsVAYAgD+LQAAeyJhIiA6ICJiYmJiYmJiIn0="}
|
|
00921{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":388,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":18,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1757872117536529,"flow_src_last_pkt_time":1757872117536564,"flow_dst_last_pkt_time":1757872117536537,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":17,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":17,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757872117536564,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":42162,"dst_port":1337,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"JSON","proto_id":"468","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
|
|
00528{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":389,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":18,"flow_packet_id":5,"flow_src_last_pkt_time":1757872117536564,"flow_dst_last_pkt_time":1757872117536568,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1757872117536568,"pkt":"AAAAAAAAAAAAAAAACABFAAAoSLxAAHYGvhF\/AAABfwAAAQU5pLI\/sUmxnCbbdVAQAgD+HAAA"}
|
|
00769{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":393,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":19,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1757872125293792,"flow_src_last_pkt_time":1757872125293792,"flow_dst_last_pkt_time":1757872125293792,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757872125293792,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":54738,"dst_port":1337,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
|
|
00545{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":393,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_src_last_pkt_time":1757872125293792,"flow_dst_last_pkt_time":1757872125293792,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1757872125293792,"pkt":"AAAAAAAAAAAAAAAACABFAAA04JFAAHYGJjB\/AAABfwAAAdXSBTk8S6RcAAAAAIAC\/9f+KAAAAgT\/1wEBBAIBAwMH"}
|
|
00545{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":394,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":19,"flow_packet_id":2,"flow_src_last_pkt_time":1757872125293792,"flow_dst_last_pkt_time":1757872125293823,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1757872125293823,"pkt":"AAAAAAAAAAAAAAAACABFAAA0AABAAHYGBsJ\/AAABfwAAAQU51dLhSrUkPEukXYAS\/9f+KAAAAgT\/1wEBBAIBAwMH"}
|
|
00527{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":395,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":19,"flow_packet_id":3,"flow_src_last_pkt_time":1757872125293853,"flow_dst_last_pkt_time":1757872125293823,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1757872125293853,"pkt":"AAAAAAAAAAAAAAAACABFAAAo4JJAAHYGJjt\/AAABfwAAAdXSBTk8S6Rd4Uq1JVAQAgD+HAAA"}
|
|
00555{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":396,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":19,"flow_packet_id":4,"flow_src_last_pkt_time":1757872125293938,"flow_dst_last_pkt_time":1757872125293823,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"thread_ts_usec":1757872125293938,"pkt":"AAAAAAAAAAAAAAAACABFAAA74JNAAHYGJid\/AAABfwAAAdXSBTk8S6Rd4Uq1JVAYAgD+LwAAeyJhIiA6ICJiYmJiYmJiIn0NCg=="}
|
|
00921{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":396,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":19,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1757872125293792,"flow_src_last_pkt_time":1757872125293938,"flow_dst_last_pkt_time":1757872125293823,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":19,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":19,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757872125293938,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":54738,"dst_port":1337,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"JSON","proto_id":"468","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
|
|
00527{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":397,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":19,"flow_packet_id":5,"flow_src_last_pkt_time":1757872125293938,"flow_dst_last_pkt_time":1757872125293966,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1757872125293966,"pkt":"AAAAAAAAAAAAAAAACABFAAAoAa9AAHYGBR9\/AAABfwAAAQU51dLhSrUlPEukcFAQAgD+HAAA"}
|
|
00959{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":401,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":15,"flow_state":"finished","flow_src_packets_processed":5,"flow_dst_packets_processed":3,"flow_first_seen":1757868531294312,"flow_src_last_pkt_time":1757868531650491,"flow_dst_last_pkt_time":1757868531650451,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":51,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":51,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757872125822510,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":43766,"dst_port":1337,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"JSON","proto_id":"468","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
|
|
00959{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":401,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":14,"flow_state":"finished","flow_src_packets_processed":5,"flow_dst_packets_processed":3,"flow_first_seen":1757868526055882,"flow_src_last_pkt_time":1757868528401467,"flow_dst_last_pkt_time":1757868528401426,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":52,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":52,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757872125822510,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50676,"dst_port":1337,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"JSON","proto_id":"468","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
|
|
00957{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":401,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":16,"flow_state":"finished","flow_src_packets_processed":5,"flow_dst_packets_processed":3,"flow_first_seen":1757868590931063,"flow_src_last_pkt_time":1757868591796949,"flow_dst_last_pkt_time":1757868591796939,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":9,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":9,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757872125822510,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":52076,"dst_port":1337,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"JSON","proto_id":"468","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
|
|
00959{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":401,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":17,"flow_state":"finished","flow_src_packets_processed":5,"flow_dst_packets_processed":3,"flow_first_seen":1757868595728426,"flow_src_last_pkt_time":1757868597644709,"flow_dst_last_pkt_time":1757868597644666,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":11,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":11,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757872125822510,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":52088,"dst_port":1337,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"JSON","proto_id":"468","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
|
|
00769{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":401,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":20,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1757872196590832,"flow_src_last_pkt_time":1757872196590832,"flow_dst_last_pkt_time":1757872196590832,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757872196590832,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":57752,"dst_port":1337,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
|
|
00545{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":401,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_src_last_pkt_time":1757872196590832,"flow_dst_last_pkt_time":1757872196590832,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1757872196590832,"pkt":"AAAAAAAAAAAAAAAACABFAAA0fxhAALAGTal\/AAABfwAAAeGYBTkqiIT8AAAAAIAC\/9f+KAAAAgT\/1wEBBAIBAwMH"}
|
|
00546{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":402,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":20,"flow_packet_id":2,"flow_src_last_pkt_time":1757872196590832,"flow_dst_last_pkt_time":1757872196590840,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1757872196590840,"pkt":"AAAAAAAAAAAAAAAACABFAAA0AABAALAGzMF\/AAABfwAAAQU54ZivydTgKoiE\/YAS\/9f+KAAAAgT\/1wEBBAIBAwMH"}
|
|
00527{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":403,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":20,"flow_packet_id":3,"flow_src_last_pkt_time":1757872196590848,"flow_dst_last_pkt_time":1757872196590840,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1757872196590848,"pkt":"AAAAAAAAAAAAAAAACABFAAAofxlAALAGTbR\/AAABfwAAAeGYBTkqiIT9r8nU4VAQAgD+HAAA"}
|
|
00543{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":404,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":20,"flow_packet_id":4,"flow_src_last_pkt_time":1757872196590874,"flow_dst_last_pkt_time":1757872196590840,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":64,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":64,"pkt_l4_len":30,"thread_ts_usec":1757872196590874,"pkt":"AAAAAAAAAAAAAAAACABFAAAyfxpAALAGTal\/AAABfwAAAeGYBTkqiIT9r8nU4VAYAgD+JgAAeyIiOmZhbHNlfQ=="}
|
|
00921{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":404,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":20,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1757872196590832,"flow_src_last_pkt_time":1757872196590874,"flow_dst_last_pkt_time":1757872196590840,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":10,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":10,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757872196590874,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":57752,"dst_port":1337,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"JSON","proto_id":"468","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
|
|
00527{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":405,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":20,"flow_packet_id":5,"flow_src_last_pkt_time":1757872196590874,"flow_dst_last_pkt_time":1757872196590878,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1757872196590878,"pkt":"AAAAAAAAAAAAAAAACABFAAAo3z9AALAG7Y1\/AAABfwAAAQU54ZivydThKoiFB1AQAgD+HAAA"}
|
|
00769{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":409,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":21,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1757872234246501,"flow_src_last_pkt_time":1757872234246501,"flow_dst_last_pkt_time":1757872234246501,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757872234246501,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50648,"dst_port":1337,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
|
|
00545{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":409,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":21,"flow_packet_id":1,"flow_src_last_pkt_time":1757872234246501,"flow_dst_last_pkt_time":1757872234246501,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1757872234246501,"pkt":"AAAAAAAAAAAAAAAACABFAAA05kNAAIMGE35\/AAABfwAAAcXYBTk6bmpxAAAAAIAC\/9f+KAAAAgT\/1wEBBAIBAwMH"}
|
|
00545{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":410,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":21,"flow_packet_id":2,"flow_src_last_pkt_time":1757872234246501,"flow_dst_last_pkt_time":1757872234246509,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1757872234246509,"pkt":"AAAAAAAAAAAAAAAACABFAAA0AABAAIMG+cF\/AAABfwAAAQU5xdhA0363Om5qcoAS\/9f+KAAAAgT\/1wEBBAIBAwMH"}
|
|
00527{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":411,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":21,"flow_packet_id":3,"flow_src_last_pkt_time":1757872234246516,"flow_dst_last_pkt_time":1757872234246509,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1757872234246516,"pkt":"AAAAAAAAAAAAAAAACABFAAAo5kRAAIMGE4l\/AAABfwAAAcXYBTk6bmpyQNN+uFAQAgD+HAAA"}
|
|
00551{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":412,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":21,"flow_packet_id":4,"flow_src_last_pkt_time":1757872234246539,"flow_dst_last_pkt_time":1757872234246509,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"thread_ts_usec":1757872234246539,"pkt":"AAAAAAAAAAAAAAAACABFAAA55kVAAIMGE3d\/AAABfwAAAcXYBTk6bmpyQNN+uFAYAgD+LQAAeyIiOnRydWUgICAgfSAgICA="}
|
|
00921{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":412,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":21,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1757872234246501,"flow_src_last_pkt_time":1757872234246539,"flow_dst_last_pkt_time":1757872234246509,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":17,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":17,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757872234246539,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50648,"dst_port":1337,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"JSON","proto_id":"468","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
|
|
00529{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":413,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":21,"flow_packet_id":5,"flow_src_last_pkt_time":1757872234246539,"flow_dst_last_pkt_time":1757872234246544,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1757872234246544,"pkt":"AAAAAAAAAAAAAAAACABFAAAo\/QRAAIMG\/Mh\/AAABfwAAAQU5xdhA0364Om5qg1AQAgD+HAAA"}
|
|
00769{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":417,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":22,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1757872303815230,"flow_src_last_pkt_time":1757872303815230,"flow_dst_last_pkt_time":1757872303815230,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757872303815230,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":40734,"dst_port":1337,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
|
|
00545{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":417,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":22,"flow_packet_id":1,"flow_src_last_pkt_time":1757872303815230,"flow_dst_last_pkt_time":1757872303815230,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1757872303815230,"pkt":"AAAAAAAAAAAAAAAACABFAAA07qFAAMQGyh9\/AAABfwAAAZ8eBTn5Pb03AAAAAIAC\/9f+KAAAAgT\/1wEBBAIBAwMH"}
|
|
00545{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":418,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":22,"flow_packet_id":2,"flow_src_last_pkt_time":1757872303815230,"flow_dst_last_pkt_time":1757872303815261,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1757872303815261,"pkt":"AAAAAAAAAAAAAAAACABFAAA0AABAAMQGuMF\/AAABfwAAAQU5nx7soIX9+T29OIAS\/9f+KAAAAgT\/1wEBBAIBAwMH"}
|
|
00528{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":419,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":22,"flow_packet_id":3,"flow_src_last_pkt_time":1757872303815291,"flow_dst_last_pkt_time":1757872303815261,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1757872303815291,"pkt":"AAAAAAAAAAAAAAAACABFAAAo7qJAAMQGyip\/AAABfwAAAZ8eBTn5Pb047KCF\/lAQAgD+HAAA"}
|
|
00540{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":420,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":22,"flow_packet_id":4,"flow_src_last_pkt_time":1757872303815377,"flow_dst_last_pkt_time":1757872303815261,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":61,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":61,"pkt_l4_len":27,"thread_ts_usec":1757872303815377,"pkt":"AAAAAAAAAAAAAAAACABFAAAv7qNAAMQGyiJ\/AAABfwAAAZ8eBTn5Pb047KCF\/lAYAgD+IwAAeyIiOltdfQ=="}
|
|
00919{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":420,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":22,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1757872303815230,"flow_src_last_pkt_time":1757872303815377,"flow_dst_last_pkt_time":1757872303815261,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":7,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":7,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757872303815377,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":40734,"dst_port":1337,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"JSON","proto_id":"468","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
|
|
00527{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":421,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":22,"flow_packet_id":5,"flow_src_last_pkt_time":1757872303815377,"flow_dst_last_pkt_time":1757872303815396,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1757872303815396,"pkt":"AAAAAAAAAAAAAAAACABFAAAolcBAAMQGIw1\/AAABfwAAAQU5nx7soIX++T29P1AQAgD+HAAA"}
|
|
00769{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":425,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":23,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1757872311627395,"flow_src_last_pkt_time":1757872311627395,"flow_dst_last_pkt_time":1757872311627395,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757872311627395,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":33370,"dst_port":1337,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
|
|
00545{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":425,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_src_last_pkt_time":1757872311627395,"flow_dst_last_pkt_time":1757872311627395,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1757872311627395,"pkt":"AAAAAAAAAAAAAAAACABFAAA0c8FAAMQGRQB\/AAABfwAAAYJaBTlgqDgzAAAAAIAC\/9f+KAAAAgT\/1wEBBAIBAwMH"}
|
|
00545{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":426,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":23,"flow_packet_id":2,"flow_src_last_pkt_time":1757872311627395,"flow_dst_last_pkt_time":1757872311627424,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1757872311627424,"pkt":"AAAAAAAAAAAAAAAACABFAAA0AABAAMQGuMF\/AAABfwAAAQU5glrMmO7qYKg4NIAS\/9f+KAAAAgT\/1wEBBAIBAwMH"}
|
|
00527{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":427,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":23,"flow_packet_id":3,"flow_src_last_pkt_time":1757872311627454,"flow_dst_last_pkt_time":1757872311627424,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1757872311627454,"pkt":"AAAAAAAAAAAAAAAACABFAAAoc8JAAMQGRQt\/AAABfwAAAYJaBTlgqDg0zJju61AQAgD+HAAA"}
|
|
00539{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":428,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":23,"flow_packet_id":4,"flow_src_last_pkt_time":1757872311627540,"flow_dst_last_pkt_time":1757872311627424,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":63,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":63,"pkt_l4_len":29,"thread_ts_usec":1757872311627540,"pkt":"AAAAAAAAAAAAAAAACABFAAAxc8NAAMQGRQF\/AAABfwAAAYJaBTlgqDg0zJju61AYAgD+JQAAeyIiOlt7fV19"}
|
|
00919{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":428,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":23,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1757872311627395,"flow_src_last_pkt_time":1757872311627540,"flow_dst_last_pkt_time":1757872311627424,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":9,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":9,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757872311627540,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":33370,"dst_port":1337,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"JSON","proto_id":"468","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
|
|
00527{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":429,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":23,"flow_packet_id":5,"flow_src_last_pkt_time":1757872311627540,"flow_dst_last_pkt_time":1757872311627557,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1757872311627557,"pkt":"AAAAAAAAAAAAAAAACABFAAAoVb9AAMQGYw5\/AAABfwAAAQU5glrMmO7rYKg4PVAQAgD+HAAA"}
|
|
00959{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":433,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":18,"flow_state":"finished","flow_src_packets_processed":5,"flow_dst_packets_processed":3,"flow_first_seen":1757872117536529,"flow_src_last_pkt_time":1757872119411103,"flow_dst_last_pkt_time":1757872119411064,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":17,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":17,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757872313411626,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":42162,"dst_port":1337,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"JSON","proto_id":"468","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
|
|
00959{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":433,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":19,"flow_state":"finished","flow_src_packets_processed":5,"flow_dst_packets_processed":3,"flow_first_seen":1757872125293792,"flow_src_last_pkt_time":1757872125822510,"flow_dst_last_pkt_time":1757872125822488,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":19,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":19,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757872313411626,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":54738,"dst_port":1337,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"JSON","proto_id":"468","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
|
|
00769{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":433,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":24,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1757872354619589,"flow_src_last_pkt_time":1757872354619589,"flow_dst_last_pkt_time":1757872354619589,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757872354619589,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":35748,"dst_port":1337,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
|
|
00545{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":433,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_src_last_pkt_time":1757872354619589,"flow_dst_last_pkt_time":1757872354619589,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1757872354619589,"pkt":"AAAAAAAAAAAAAAAACABFAAA04EhAAIQGGHl\/AAABfwAAAYukBTkG5JTDAAAAAIAC\/9f+KAAAAgT\/1wEBBAIBAwMH"}
|
|
00545{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":434,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":24,"flow_packet_id":2,"flow_src_last_pkt_time":1757872354619589,"flow_dst_last_pkt_time":1757872354619597,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1757872354619597,"pkt":"AAAAAAAAAAAAAAAACABFAAA0AABAAIQG+MF\/AAABfwAAAQU5i6Tk2X+fBuSUxIAS\/9f+KAAAAgT\/1wEBBAIBAwMH"}
|
|
00528{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":435,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":24,"flow_packet_id":3,"flow_src_last_pkt_time":1757872354619604,"flow_dst_last_pkt_time":1757872354619597,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1757872354619604,"pkt":"AAAAAAAAAAAAAAAACABFAAAo4ElAAIQGGIR\/AAABfwAAAYukBTkG5JTE5Nl\/oFAQAgD+HAAA"}
|
|
00560{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":436,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":24,"flow_packet_id":4,"flow_src_last_pkt_time":1757872354619623,"flow_dst_last_pkt_time":1757872354619597,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"thread_ts_usec":1757872354619623,"pkt":"AAAAAAAAAAAAAAAACABFAAA+4EpAAIQGGG1\/AAABfwAAAYukBTkG5JTE5Nl\/oFAYAgD+MgAAeyIiOlt7IiI6WyIiLCIiLCIiXX1dfQ=="}
|
|
00921{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":436,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":24,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1757872354619589,"flow_src_last_pkt_time":1757872354619623,"flow_dst_last_pkt_time":1757872354619597,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":22,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":22,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757872354619623,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":35748,"dst_port":1337,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"JSON","proto_id":"468","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
|
|
00527{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":437,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":24,"flow_packet_id":5,"flow_src_last_pkt_time":1757872354619623,"flow_dst_last_pkt_time":1757872354619627,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1757872354619627,"pkt":"AAAAAAAAAAAAAAAACABFAAAoU5tAAIQGpTJ\/AAABfwAAAQU5i6Tk2X+gBuSU2lAQAgD+HAAA"}
|
|
00959{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":441,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":20,"flow_state":"finished","flow_src_packets_processed":5,"flow_dst_packets_processed":3,"flow_first_seen":1757872196590832,"flow_src_last_pkt_time":1757872197222920,"flow_dst_last_pkt_time":1757872197222894,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":10,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":10,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757872355287248,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":57752,"dst_port":1337,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"JSON","proto_id":"468","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
|
|
00769{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":441,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":25,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1757872522301621,"flow_src_last_pkt_time":1757872522301621,"flow_dst_last_pkt_time":1757872522301621,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757872522301621,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":32924,"dst_port":1337,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
|
|
00546{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":441,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":25,"flow_packet_id":1,"flow_src_last_pkt_time":1757872522301621,"flow_dst_last_pkt_time":1757872522301621,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1757872522301621,"pkt":"AAAAAAAAAAAAAAAACABFAAA0\/zNAAKIG241\/AAABfwAAAYCcBTlmzJcCAAAAAIAC\/9f+KAAAAgT\/1wEBBAIBAwMH"}
|
|
00545{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":442,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":25,"flow_packet_id":2,"flow_src_last_pkt_time":1757872522301621,"flow_dst_last_pkt_time":1757872522301629,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1757872522301629,"pkt":"AAAAAAAAAAAAAAAACABFAAA0AABAAKIG2sF\/AAABfwAAAQU5gJy5R2TrZsyXA4AS\/9f+KAAAAgT\/1wEBBAIBAwMH"}
|
|
00528{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":443,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":25,"flow_packet_id":3,"flow_src_last_pkt_time":1757872522301636,"flow_dst_last_pkt_time":1757872522301629,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1757872522301636,"pkt":"AAAAAAAAAAAAAAAACABFAAAo\/zRAAKIG25h\/AAABfwAAAYCcBTlmzJcDuUdk7FAQAgD+HAAA"}
|
|
00560{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":444,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":25,"flow_packet_id":4,"flow_src_last_pkt_time":1757872522301655,"flow_dst_last_pkt_time":1757872522301629,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"thread_ts_usec":1757872522301655,"pkt":"AAAAAAAAAAAAAAAACABFAABA\/zVAAKIG239\/AAABfwAAAYCcBTlmzJcDuUdk7FAYAgD+NAAAeyIiOlt7IiI6WyIiLCIiLG51bGxdfV19"}
|
|
00921{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":444,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":25,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1757872522301621,"flow_src_last_pkt_time":1757872522301655,"flow_dst_last_pkt_time":1757872522301629,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":24,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":24,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757872522301655,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":32924,"dst_port":1337,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"JSON","proto_id":"468","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
|
|
00527{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":445,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":25,"flow_packet_id":5,"flow_src_last_pkt_time":1757872522301655,"flow_dst_last_pkt_time":1757872522301659,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1757872522301659,"pkt":"AAAAAAAAAAAAAAAACABFAAAofgdAAKIGXMZ\/AAABfwAAAQU5gJy5R2TsZsyXG1AQAgD+HAAA"}
|
|
00957{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":449,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":23,"flow_state":"finished","flow_src_packets_processed":5,"flow_dst_packets_processed":3,"flow_first_seen":1757872311627395,"flow_src_last_pkt_time":1757872313411626,"flow_dst_last_pkt_time":1757872313411585,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":9,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":9,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757872525818968,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":33370,"dst_port":1337,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"JSON","proto_id":"468","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
|
|
00959{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":449,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":24,"flow_state":"finished","flow_src_packets_processed":5,"flow_dst_packets_processed":3,"flow_first_seen":1757872354619589,"flow_src_last_pkt_time":1757872355287248,"flow_dst_last_pkt_time":1757872355287198,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":22,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":22,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757872525818968,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":35748,"dst_port":1337,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"JSON","proto_id":"468","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
|
|
00957{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":449,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":22,"flow_state":"finished","flow_src_packets_processed":5,"flow_dst_packets_processed":3,"flow_first_seen":1757872303815230,"flow_src_last_pkt_time":1757872304853608,"flow_dst_last_pkt_time":1757872304853568,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":7,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":7,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757872525818968,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":40734,"dst_port":1337,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"JSON","proto_id":"468","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
|
|
00959{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":449,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":21,"flow_state":"finished","flow_src_packets_processed":5,"flow_dst_packets_processed":3,"flow_first_seen":1757872234246501,"flow_src_last_pkt_time":1757872237187287,"flow_dst_last_pkt_time":1757872237187275,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":17,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":17,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757872525818968,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50648,"dst_port":1337,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"JSON","proto_id":"468","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
|
|
00820{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":449,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","version":"","ndpi_version":"","ndpi_api_version":0,"size_per_flow":1512,"packets-captured":449,"packets-processed":448,"pfring_active":false,"pfring_recv":0,"pfring_drop":0,"pfring_shunt":0,"total-skipped-flows":0,"total-l4-payload-len":51520,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":25,"total-detection-updates":0,"total-updates":10,"current-active-flows":1,"total-active-flows":25,"total-idle-flows":24,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"global-alloc-count":0,"global-free-count":0,"global-alloc-bytes":0,"global-free-bytes":0,"total-events-serialized":215,"global_ts_usec":1757872749299486}
|
|
00769{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":449,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":26,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1757872749299486,"flow_src_last_pkt_time":1757872749299486,"flow_dst_last_pkt_time":1757872749299486,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757872749299486,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49814,"dst_port":1337,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
|
|
00545{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":449,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":26,"flow_packet_id":1,"flow_src_last_pkt_time":1757872749299486,"flow_dst_last_pkt_time":1757872749299486,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1757872749299486,"pkt":"AAAAAAAAAAAAAAAACABFAAA0cN1AAKEGauR\/AAABfwAAAcKWBTlskbMRAAAAAIAC\/9f+KAAAAgT\/1wEBBAIBAwMH"}
|
|
00545{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":450,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":26,"flow_packet_id":2,"flow_src_last_pkt_time":1757872749299486,"flow_dst_last_pkt_time":1757872749299494,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1757872749299494,"pkt":"AAAAAAAAAAAAAAAACABFAAA0AABAAKEG28F\/AAABfwAAAQU5wpbj3BIJbJGzEoAS\/9f+KAAAAgT\/1wEBBAIBAwMH"}
|
|
00527{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":451,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":26,"flow_packet_id":3,"flow_src_last_pkt_time":1757872749299501,"flow_dst_last_pkt_time":1757872749299494,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1757872749299501,"pkt":"AAAAAAAAAAAAAAAACABFAAAocN5AAKEGau9\/AAABfwAAAcKWBTlskbMS49wSClAQAgD+HAAA"}
|
|
00575{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":452,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":26,"flow_packet_id":4,"flow_src_last_pkt_time":1757872749299520,"flow_dst_last_pkt_time":1757872749299494,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":88,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":88,"pkt_l4_len":54,"thread_ts_usec":1757872749299520,"pkt":"AAAAAAAAAAAAAAAACABFAABKcN9AAKEGasx\/AAABfwAAAcKWBTlskbMS49wSClAYAgD+PgAAeyIiOlt7IiI6WyIiLCIiLC0xLC0wLjEyNSxudWxsXX1dfQ=="}
|
|
00921{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":452,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":26,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1757872749299486,"flow_src_last_pkt_time":1757872749299520,"flow_dst_last_pkt_time":1757872749299494,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":34,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":34,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757872749299520,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49814,"dst_port":1337,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"JSON","proto_id":"468","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
|
|
00527{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":453,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":26,"flow_packet_id":5,"flow_src_last_pkt_time":1757872749299520,"flow_dst_last_pkt_time":1757872749299524,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1757872749299524,"pkt":"AAAAAAAAAAAAAAAACABFAAAou1JAAKEGIHt\/AAABfwAAAQU5wpbj3BIKbJGzNFAQAgD+HAAA"}
|
|
00959{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":457,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":25,"flow_state":"finished","flow_src_packets_processed":5,"flow_dst_packets_processed":3,"flow_first_seen":1757872522301621,"flow_src_last_pkt_time":1757872525818968,"flow_dst_last_pkt_time":1757872525818927,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":24,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":24,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757872751357440,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":32924,"dst_port":1337,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"JSON","proto_id":"468","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
|
|
00769{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":457,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":27,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1757872765577476,"flow_src_last_pkt_time":1757872765577476,"flow_dst_last_pkt_time":1757872765577476,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757872765577476,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":58322,"dst_port":1337,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
|
|
00545{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":457,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":27,"flow_packet_id":1,"flow_src_last_pkt_time":1757872765577476,"flow_dst_last_pkt_time":1757872765577476,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1757872765577476,"pkt":"AAAAAAAAAAAAAAAACABFAAA0f5tAAKEGXCZ\/AAABfwAAAePSBTl5Vw0sAAAAAIAC\/9f+KAAAAgT\/1wEBBAIBAwMH"}
|
|
00545{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":458,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":27,"flow_packet_id":2,"flow_src_last_pkt_time":1757872765577476,"flow_dst_last_pkt_time":1757872765577484,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1757872765577484,"pkt":"AAAAAAAAAAAAAAAACABFAAA0AABAAKEG28F\/AAABfwAAAQU549Lgi4aYeVcNLYAS\/9f+KAAAAgT\/1wEBBAIBAwMH"}
|
|
00527{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":459,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":27,"flow_packet_id":3,"flow_src_last_pkt_time":1757872765577490,"flow_dst_last_pkt_time":1757872765577484,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1757872765577490,"pkt":"AAAAAAAAAAAAAAAACABFAAAof5xAAKEGXDF\/AAABfwAAAePSBTl5Vw0t4IuGmVAQAgD+HAAA"}
|
|
00563{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":460,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":27,"flow_packet_id":4,"flow_src_last_pkt_time":1757872765577509,"flow_dst_last_pkt_time":1757872765577484,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":81,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":81,"pkt_l4_len":47,"thread_ts_usec":1757872765577509,"pkt":"AAAAAAAAAAAAAAAACABFAABDf51AAKEGXBV\/AAABfwAAAePSBTl5Vw0t4IuGmVAYAgD+NwAAeyIiOlt7IiI6WyIiLCIiLC0xLC0wLjVdfV19"}
|
|
00921{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":460,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":27,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1757872765577476,"flow_src_last_pkt_time":1757872765577509,"flow_dst_last_pkt_time":1757872765577484,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":27,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":27,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757872765577509,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":58322,"dst_port":1337,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"JSON","proto_id":"468","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
|
|
00528{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":461,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":27,"flow_packet_id":5,"flow_src_last_pkt_time":1757872765577509,"flow_dst_last_pkt_time":1757872765577513,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1757872765577513,"pkt":"AAAAAAAAAAAAAAAACABFAAAoa\/hAAKEGb9V\/AAABfwAAAQU549Lgi4aZeVcNSFAQAgD+HAAA"}
|
|
00769{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":465,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":28,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1757872824977921,"flow_src_last_pkt_time":1757872824977921,"flow_dst_last_pkt_time":1757872824977921,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757872824977921,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":44988,"dst_port":1337,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
|
|
00545{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":465,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":28,"flow_packet_id":1,"flow_src_last_pkt_time":1757872824977921,"flow_dst_last_pkt_time":1757872824977921,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1757872824977921,"pkt":"AAAAAAAAAAAAAAAACABFAAA0MShAALcGlJl\/AAABfwAAAa+8BTmTZG63AAAAAIAC\/9f+KAAAAgT\/1wEBBAIBAwMH"}
|
|
00545{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":466,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":28,"flow_packet_id":2,"flow_src_last_pkt_time":1757872824977921,"flow_dst_last_pkt_time":1757872824977929,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1757872824977929,"pkt":"AAAAAAAAAAAAAAAACABFAAA0AABAALcGxcF\/AAABfwAAAQU5r7wSFAqgk2RuuIAS\/9f+KAAAAgT\/1wEBBAIBAwMH"}
|
|
00527{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":467,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":28,"flow_packet_id":3,"flow_src_last_pkt_time":1757872824977935,"flow_dst_last_pkt_time":1757872824977929,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1757872824977935,"pkt":"AAAAAAAAAAAAAAAACABFAAAoMSlAALcGlKR\/AAABfwAAAa+8BTmTZG64EhQKoVAQAgD+HAAA"}
|
|
00547{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":468,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":28,"flow_packet_id":4,"flow_src_last_pkt_time":1757872824977954,"flow_dst_last_pkt_time":1757872824977929,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":68,"pkt_l4_len":34,"thread_ts_usec":1757872824977954,"pkt":"AAAAAAAAAAAAAAAACABFAAA2MSpAALcGlJV\/AAABfwAAAa+8BTmTZG64EhQKoVAYAgD+KgAAWyIiLG51bGwsLTAuMV0="}
|
|
00921{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":468,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":28,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1757872824977921,"flow_src_last_pkt_time":1757872824977954,"flow_dst_last_pkt_time":1757872824977929,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":14,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":14,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757872824977954,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":44988,"dst_port":1337,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"JSON","proto_id":"468","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
|
|
00527{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":469,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":28,"flow_packet_id":5,"flow_src_last_pkt_time":1757872824977954,"flow_dst_last_pkt_time":1757872824977958,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1757872824977958,"pkt":"AAAAAAAAAAAAAAAACABFAAAoIlFAALcGo3x\/AAABfwAAAQU5r7wSFAqhk2RuxlAQAgD+HAAA"}
|
|
00771{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":473,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":29,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1757873101973789,"flow_src_last_pkt_time":1757873101973789,"flow_dst_last_pkt_time":1757873101973789,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":14,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":14,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":14,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757873101973789,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50879,"dst_port":1337,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5}
|
|
00531{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":473,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":29,"flow_packet_id":1,"flow_src_last_pkt_time":1757873101973789,"flow_dst_last_pkt_time":1757873101973789,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":56,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":56,"pkt_l4_len":22,"thread_ts_usec":1757873101973789,"pkt":"AAAAAAAAAAAAAAAACABFAAAq55tAALIR4yR\/AAABfwAAAca\/BTkAFv4peyJuIjotMS41RSsxfQo="}
|
|
00921{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":473,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":29,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1757873101973789,"flow_src_last_pkt_time":1757873101973789,"flow_dst_last_pkt_time":1757873101973789,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":14,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":14,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":14,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757873101973789,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50879,"dst_port":1337,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"JSON","proto_id":"468","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
|
|
00959{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":474,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":28,"flow_state":"finished","flow_src_packets_processed":5,"flow_dst_packets_processed":3,"flow_first_seen":1757872824977921,"flow_src_last_pkt_time":1757872825690392,"flow_dst_last_pkt_time":1757872825690374,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":14,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":14,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757873101973789,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":44988,"dst_port":1337,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"JSON","proto_id":"468","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
|
|
00959{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":474,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":26,"flow_state":"finished","flow_src_packets_processed":5,"flow_dst_packets_processed":3,"flow_first_seen":1757872749299486,"flow_src_last_pkt_time":1757872751357440,"flow_dst_last_pkt_time":1757872751357388,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":34,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":34,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757873101973789,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49814,"dst_port":1337,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"JSON","proto_id":"468","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
|
|
00959{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":474,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":27,"flow_state":"finished","flow_src_packets_processed":5,"flow_dst_packets_processed":3,"flow_first_seen":1757872765577476,"flow_src_last_pkt_time":1757872766544357,"flow_dst_last_pkt_time":1757872766544309,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":27,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":27,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757873101973789,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":58322,"dst_port":1337,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"JSON","proto_id":"468","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
|
|
00820{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":474,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","version":"","ndpi_version":"","ndpi_api_version":0,"size_per_flow":1512,"packets-captured":474,"packets-processed":473,"pfring_active":false,"pfring_recv":0,"pfring_drop":0,"pfring_shunt":0,"total-skipped-flows":0,"total-l4-payload-len":51609,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":29,"total-detection-updates":0,"total-updates":10,"current-active-flows":1,"total-active-flows":29,"total-idle-flows":28,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"global-alloc-count":0,"global-free-count":0,"global-alloc-bytes":0,"global-free-bytes":0,"total-events-serialized":244,"global_ts_usec":1757873589008949}
|
|
00771{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":474,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":30,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1757873589008949,"flow_src_last_pkt_time":1757873589008949,"flow_dst_last_pkt_time":1757873589008949,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":11,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":11,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":11,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757873589008949,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":48459,"dst_port":1337,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5}
|
|
00527{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":474,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":30,"flow_packet_id":1,"flow_src_last_pkt_time":1757873589008949,"flow_dst_last_pkt_time":1757873589008949,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":53,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":53,"pkt_l4_len":19,"thread_ts_usec":1757873589008949,"pkt":"AAAAAAAAAAAAAAAACABFAAAnf1NAAHkRhHB\/AAABfwAAAb1LBTkAE\/4meyJhIjoxRTQwMH0="}
|
|
00921{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":474,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":30,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1757873589008949,"flow_src_last_pkt_time":1757873589008949,"flow_dst_last_pkt_time":1757873589008949,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":11,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":11,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":11,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757873589008949,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":48459,"dst_port":1337,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"JSON","proto_id":"468","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
|
|
00960{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":475,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":29,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1757873101973789,"flow_src_last_pkt_time":1757873101973789,"flow_dst_last_pkt_time":1757873101973789,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":14,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":14,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":14,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757873589008949,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50879,"dst_port":1337,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"JSON","proto_id":"468","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
|
|
00771{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":475,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":31,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1757873621102005,"flow_src_last_pkt_time":1757873621102005,"flow_dst_last_pkt_time":1757873621102005,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":38,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":38,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":38,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757873621102005,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":59588,"dst_port":1337,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5}
|
|
00562{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":475,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":31,"flow_packet_id":1,"flow_src_last_pkt_time":1757873621102005,"flow_dst_last_pkt_time":1757873621102005,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":80,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":80,"pkt_l4_len":46,"thread_ts_usec":1757873621102005,"pkt":"AAAAAAAAAAAAAAAACABFAABCts9AAHkRTNl\/AAABfwAAAejEBTkALv5BeyJhIjozLjE0MTU5MjY1MzU4OTc5MzIzODQ2MjY0MzM4MzI3OX0="}
|
|
00921{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":475,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":31,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1757873621102005,"flow_src_last_pkt_time":1757873621102005,"flow_dst_last_pkt_time":1757873621102005,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":38,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":38,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":38,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1757873621102005,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":59588,"dst_port":1337,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"JSON","proto_id":"468","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
|
|
00820{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":476,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","version":"","ndpi_version":"","ndpi_api_version":0,"size_per_flow":1512,"packets-captured":476,"packets-processed":475,"pfring_active":false,"pfring_recv":0,"pfring_drop":0,"pfring_shunt":0,"total-skipped-flows":0,"total-l4-payload-len":51658,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":31,"total-detection-updates":0,"total-updates":10,"current-active-flows":2,"total-active-flows":31,"total-idle-flows":29,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"global-alloc-count":0,"global-free-count":0,"global-alloc-bytes":0,"global-free-bytes":0,"total-events-serialized":252,"global_ts_usec":1765030208978503}
|
|
00769{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":476,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":32,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1765030208978503,"flow_src_last_pkt_time":1765030208978503,"flow_dst_last_pkt_time":1765030208978503,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1765030208978503,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":58930,"dst_port":1337,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
|
|
00558{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":476,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":32,"flow_packet_id":1,"flow_src_last_pkt_time":1765030208978503,"flow_dst_last_pkt_time":1765030208978503,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1765030208978503,"pkt":"AAAAAAAAAAAAAAAACABFAAA8PMdAAKAGn\/J\/AAABfwAAAeYyBTlPipPRAAAAAKAC\/9f+MAAAAgT\/1wQCCAq9EY3BAAAAAAEDAwc="}
|
|
00557{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":477,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":32,"flow_packet_id":2,"flow_src_last_pkt_time":1765030208978503,"flow_dst_last_pkt_time":1765030208978515,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1765030208978515,"pkt":"AAAAAAAAAAAAAAAACABFAAA8AABAAKAG3Ll\/AAABfwAAAQU55jJgJTz7T4qT0qAS\/8v+MAAAAgT\/1wQCCAq9EY3BvRGNwQEDAwc="}
|
|
00545{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":478,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":32,"flow_packet_id":3,"flow_src_last_pkt_time":1765030208978526,"flow_dst_last_pkt_time":1765030208978515,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1765030208978526,"pkt":"AAAAAAAAAAAAAAAACABFAAA0PMhAAKAGn\/l\/AAABfwAAAeYyBTlPipPSYCU8\/IAQAgD+KAAAAQEICr0RjcG9EY3B"}
|
|
00811{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":479,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":32,"flow_packet_id":4,"flow_src_last_pkt_time":1765030208978552,"flow_dst_last_pkt_time":1765030208978515,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":264,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":264,"pkt_l4_len":230,"thread_ts_usec":1765030208978552,"pkt":"AAAAAAAAAAAAAAAACABFAAD6PMlAAKAGnzJ\/AAABfwAAAeYyBTlPipPSYCU8\/IAYAgD+7gAAAQEICr0RjcG9EY3BR0VUIC8gSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMToxMzM3DQpVc2VyLUFnZW50OiBXZ2V0LzEuMjUuMA0KQWNjZXB0OiAqLyoNCkFjY2VwdC1FbmNvZGluZzogaWRlbnRpdHkNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkNvbnRlbnQtVHlwZTogYXBwbGljYXRpb24veC13d3ctZm9ybS11cmxlbmNvZGVkDQpDb250ZW50LUxlbmd0aDogMzkNCg0K"}
|
|
01370{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":479,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":32,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1765030208978503,"flow_src_last_pkt_time":1765030208978552,"flow_dst_last_pkt_time":1765030208978515,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":198,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":198,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1765030208978552,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":58930,"dst_port":1337,"l4_proto":"tcp","ndpi": {"flow_risk": {"5": {"risk":"Known Proto on Non Std Port","severity":"Medium","risk_score": {"total":160,"client":140,"server":20}},"12": {"risk":"HTTP\/TLS\/QUIC Numeric Hostname\/SNI","severity":"Low","risk_score": {"total":300,"client":270,"server":30}}},"confidence": {"6":"DPI"},"proto":"HTTP","proto_id":"7","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":5,"category":"Web","hostname":"127.0.0.1","domainame":"127.0.0.1","http": {"url":"127.0.0.1:1337\/","code":0,"content_type":"","user_agent":"Wget\/1.25.0","request_content_type":"application\/x-www-form-urlencoded"}}}
|
|
00544{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":480,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":32,"flow_packet_id":5,"flow_src_last_pkt_time":1765030208978552,"flow_dst_last_pkt_time":1765030208978558,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1765030208978558,"pkt":"AAAAAAAAAAAAAAAACABFAAA0IwtAAKAGubZ\/AAABfwAAAQU55jJgJTz8T4qUmIAQAf\/+KAAAAQEICr0RjcG9EY3B"}
|
|
00769{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":486,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":33,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1765030215219540,"flow_src_last_pkt_time":1765030215219540,"flow_dst_last_pkt_time":1765030215219540,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1765030215219540,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":58938,"dst_port":1337,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
|
|
00557{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":486,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":33,"flow_packet_id":1,"flow_src_last_pkt_time":1765030215219540,"flow_dst_last_pkt_time":1765030215219540,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1765030215219540,"pkt":"AAAAAAAAAAAAAAAACABFAAA8WlFAAKAGgmh\/AAABfwAAAeY6BTneSFnCAAAAAKAC\/9f+MAAAAgT\/1wQCCAq9EaYiAAAAAAEDAwc="}
|
|
00557{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":487,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":33,"flow_packet_id":2,"flow_src_last_pkt_time":1765030215219540,"flow_dst_last_pkt_time":1765030215219551,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1765030215219551,"pkt":"AAAAAAAAAAAAAAAACABFAAA8AABAAKAG3Ll\/AAABfwAAAQU55jqP09xI3khZw6AS\/8v+MAAAAgT\/1wQCCAq9EaYivRGmIgEDAwc="}
|
|
00543{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":488,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":33,"flow_packet_id":3,"flow_src_last_pkt_time":1765030215219562,"flow_dst_last_pkt_time":1765030215219551,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1765030215219562,"pkt":"AAAAAAAAAAAAAAAACABFAAA0WlJAAKAGgm9\/AAABfwAAAeY6BTneSFnDj9PcSYAQAgD+KAAAAQEICr0RpiK9EaYi"}
|
|
00814{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":489,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":33,"flow_packet_id":4,"flow_src_last_pkt_time":1765030215219595,"flow_dst_last_pkt_time":1765030215219551,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":265,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":265,"pkt_l4_len":231,"thread_ts_usec":1765030215219595,"pkt":"AAAAAAAAAAAAAAAACABFAAD7WlNAAKAGgad\/AAABfwAAAeY6BTneSFnDj9PcSYAYAgD+7wAAAQEICr0RpiK9EaYiUE9TVCAvIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjE6MTMzNw0KVXNlci1BZ2VudDogV2dldC8xLjI1LjANCkFjY2VwdDogKi8qDQpBY2NlcHQtRW5jb2Rpbmc6IGlkZW50aXR5DQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpDb250ZW50LVR5cGU6IGFwcGxpY2F0aW9uL3gtd3d3LWZvcm0tdXJsZW5jb2RlZA0KQ29udGVudC1MZW5ndGg6IDM5DQoNCg=="}
|
|
01370{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":489,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":33,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1765030215219540,"flow_src_last_pkt_time":1765030215219595,"flow_dst_last_pkt_time":1765030215219551,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":199,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":199,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1765030215219595,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":58938,"dst_port":1337,"l4_proto":"tcp","ndpi": {"flow_risk": {"5": {"risk":"Known Proto on Non Std Port","severity":"Medium","risk_score": {"total":160,"client":140,"server":20}},"12": {"risk":"HTTP\/TLS\/QUIC Numeric Hostname\/SNI","severity":"Low","risk_score": {"total":300,"client":270,"server":30}}},"confidence": {"6":"DPI"},"proto":"HTTP","proto_id":"7","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":5,"category":"Web","hostname":"127.0.0.1","domainame":"127.0.0.1","http": {"url":"127.0.0.1:1337\/","code":0,"content_type":"","user_agent":"Wget\/1.25.0","request_content_type":"application\/x-www-form-urlencoded"}}}
|
|
00544{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":490,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":33,"flow_packet_id":5,"flow_src_last_pkt_time":1765030215219595,"flow_dst_last_pkt_time":1765030215219603,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1765030215219603,"pkt":"AAAAAAAAAAAAAAAACABFAAA0el5AAKAGYmN\/AAABfwAAAQU55jqP09xJ3khaioAQAf\/+KAAAAQEICr0RpiK9EaYi"}
|
|
00960{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":493,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":30,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1757873589008949,"flow_src_last_pkt_time":1757873589008949,"flow_dst_last_pkt_time":1757873589008949,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":11,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":11,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":11,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1765030215219625,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":48459,"dst_port":1337,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"JSON","proto_id":"468","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
|
|
00960{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":493,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":31,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1757873621102005,"flow_src_last_pkt_time":1757873621102005,"flow_dst_last_pkt_time":1757873621102005,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":38,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":38,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":38,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1765030215219625,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":59588,"dst_port":1337,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"JSON","proto_id":"468","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
|
|
00769{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":496,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":34,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1765030247933393,"flow_src_last_pkt_time":1765030247933393,"flow_dst_last_pkt_time":1765030247933393,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1765030247933393,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51188,"dst_port":1337,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5}
|
|
00558{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":496,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":34,"flow_packet_id":1,"flow_src_last_pkt_time":1765030247933393,"flow_dst_last_pkt_time":1765030247933393,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1765030247933393,"pkt":"AAAAAAAAAAAAAAAACABFAAA8AUlAAKAG23B\/AAABfwAAAcf0BTm\/8I7kAAAAAKAC\/9f+MAAAAgT\/1wQCCAq9EiXsAAAAAAEDAwc="}
|
|
00559{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":497,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":34,"flow_packet_id":2,"flow_src_last_pkt_time":1765030247933393,"flow_dst_last_pkt_time":1765030247933410,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1765030247933410,"pkt":"AAAAAAAAAAAAAAAACABFAAA8AABAAKAG3Ll\/AAABfwAAAQU5x\/QHE2xKv\/CO5aAS\/8v+MAAAAgT\/1wQCCAq9EiXsvRIl7AEDAwc="}
|
|
00544{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":498,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":34,"flow_packet_id":3,"flow_src_last_pkt_time":1765030247933423,"flow_dst_last_pkt_time":1765030247933410,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1765030247933423,"pkt":"AAAAAAAAAAAAAAAACABFAAA0AUpAAKAG23d\/AAABfwAAAcf0BTm\/8I7lBxNsS4AQAgD+KAAAAQEICr0SJey9EiXs"}
|
|
00602{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":499,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":34,"flow_packet_id":4,"flow_src_last_pkt_time":1765030247961093,"flow_dst_last_pkt_time":1765030247933410,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"thread_ts_usec":1765030247961093,"pkt":"AAAAAAAAAAAAAAAACABFAABcAUtAAKAG205\/AAABfwAAAcf0BTm\/8I7lBxNsS4AYAgD+UAAAAQEICr0SJge9EiXsWyJmb28iLCB7ImJhciI6IFsiYmF6IiwgbnVsbCwgMS4wLCAyXX1dCg=="}
|
|
00921{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":499,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":34,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1765030247933393,"flow_src_last_pkt_time":1765030247961093,"flow_dst_last_pkt_time":1765030247933410,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":40,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":40,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1765030247961093,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51188,"dst_port":1337,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"JSON","proto_id":"468","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
|
|
00545{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":500,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":34,"flow_packet_id":5,"flow_src_last_pkt_time":1765030247961093,"flow_dst_last_pkt_time":1765030247961104,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1765030247961104,"pkt":"AAAAAAAAAAAAAAAACABFAAA0t3NAAKAGJU5\/AAABfwAAAQU5x\/QHE2xLv\/CPDYAQAgD+KAAAAQEICr0SJge9EiYH"}
|
|
00959{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":503,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":34,"flow_state":"finished","flow_src_packets_processed":5,"flow_dst_packets_processed":3,"flow_first_seen":1765030247933393,"flow_src_last_pkt_time":1765030254403708,"flow_dst_last_pkt_time":1765030254403683,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":40,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":40,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1765030254403708,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51188,"dst_port":1337,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"JSON","proto_id":"468","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}}
|
|
01216{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":503,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":32,"flow_state":"info","flow_src_packets_processed":6,"flow_dst_packets_processed":4,"flow_first_seen":1765030208978503,"flow_src_last_pkt_time":1765030212259133,"flow_dst_last_pkt_time":1765030212259053,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":198,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":237,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1765030254403708,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":58930,"dst_port":1337,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"flow_risk": {"5": {"risk":"Known Proto on Non Std Port","severity":"Medium","risk_score": {"total":160,"client":140,"server":20}},"12": {"risk":"HTTP\/TLS\/QUIC Numeric Hostname\/SNI","severity":"Low","risk_score": {"total":300,"client":270,"server":30}}},"confidence": {"6":"DPI"},"proto":"HTTP.JSON","proto_id":"7.468","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":5,"category":"Web"}}
|
|
01216{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":503,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","flow_id":33,"flow_state":"info","flow_src_packets_processed":6,"flow_dst_packets_processed":4,"flow_first_seen":1765030215219540,"flow_src_last_pkt_time":1765030225659168,"flow_dst_last_pkt_time":1765030225659115,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":199,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":238,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1765030254403708,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":58938,"dst_port":1337,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"flow_risk": {"5": {"risk":"Known Proto on Non Std Port","severity":"Medium","risk_score": {"total":160,"client":140,"server":20}},"12": {"risk":"HTTP\/TLS\/QUIC Numeric Hostname\/SNI","severity":"Low","risk_score": {"total":300,"client":270,"server":30}}},"confidence": {"6":"DPI"},"proto":"HTTP.JSON","proto_id":"7.468","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":5,"category":"Web"}}
|
|
00822{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":503,"source":"cfgs\/default\/pcap\/json.pcapng","alias":"nDPId-test","version":"","ndpi_version":"","ndpi_api_version":0,"size_per_flow":1512,"packets-captured":503,"packets-processed":503,"pfring_active":false,"pfring_recv":0,"pfring_drop":0,"pfring_shunt":0,"total-skipped-flows":0,"total-l4-payload-len":52173,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":34,"total-detection-updates":0,"total-updates":10,"current-active-flows":0,"total-active-flows":34,"total-idle-flows":34,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"global-alloc-count":0,"global-free-count":0,"global-alloc-bytes":0,"global-free-bytes":0,"total-events-serialized":279,"global_ts_usec":1765030254403708}
|
|
~~~~~~~~~~~~~~~~~~~~ SUMMARY ~~~~~~~~~~~~~~~~~~~~
|
|
~~ packets captured/processed: 503/503
|
|
~~ skipped flows.............: 0
|
|
~~ total layer4 data length..: 52173 bytes
|
|
~~ total detected protocols..: 34
|
|
~~ total active/idle flows...: 34/34
|
|
~~ total timeout flows.......: 0
|
|
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
~~ total memory allocated....: 9650449 bytes
|
|
~~ total memory freed........: 9650449 bytes
|
|
~~ total allocations/frees...: 157222/157222
|
|
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
~~ json message min len.......: 531 chars
|
|
~~ json message max len.......: 2265 chars
|
|
~~ json message avg len.......: 1398 chars
|