Suricata

{ "timestamp": "10\/16\/2015-00:22:02.857390", "pcap_pkt_num": 607, "ipver": 4, "srcip": "192.168.2.4", "dstip": "117.18.237.29", "protocol": 6, "sp": 53309, "dp": 80, "http_uri": "\/", "http_host": "ocsp.digicert.com", "http_referer": "<unknown>", "http_user_agent": "Mozilla\/5.0 (X11; Ubuntu; Linux x86_64; rv:41.0) Gecko\/20100101 Firefox\/41.0", "filename": "\/", "magic": "data", "state": "CLOSED", "md5": "b99a062803cb1502e572279e0295bcaf", "stored": false, "size": 83 }

{ "id": 1, "timestamp": "10\/16\/2015-00:22:02.542682", "pcap_pkt_num": 310, "ipver": 4, "srcip": "219.154.70.21", "dstip": "192.168.2.4", "protocol": 6, "sp": 80, "dp": 35994, "http_uri": "\/files\/analog\/doc\/data_sheet\/MC145018.pdf", "http_host": "www.freescale.com", "http_referer": "<unknown>", "http_user_agent": "Mozilla\/5.0 (X11; Ubuntu; Linux x86_64; rv:41.0) Gecko\/20100101 Firefox\/41.0", "filename": "\/files\/analog\/doc\/data_sheet\/MC145018.pdf", "magic": "PDF document, version 1.4", "state": "CLOSED", "md5": "0a7dec81641dec8692b91b9d0f2d4a11", "stored": false, "size": 65536 }

{ "timestamp": "10\/16\/2015-00:22:15.144712", "pcap_pkt_num": 1708, "ipver": 4, "srcip": "219.154.70.21", "dstip": "192.168.2.4", "protocol": 6, "sp": 80, "dp": 35995, "http_uri": "\/files\/analog\/doc\/data_sheet\/MC145018.pdf", "http_host": "www.freescale.com", "http_referer": "<unknown>", "http_user_agent": "Mozilla\/5.0 (X11; Ubuntu; Linux x86_64; rv:41.0) Gecko\/20100101 Firefox\/41.0", "filename": "\/files\/analog\/doc\/data_sheet\/MC145018.pdf", "magic": "ASCII text, with very long lines, with no line terminators", "state": "CLOSED", "md5": "636503684228c41d873c04b0ee4dccb5", "stored": false, "size": 65536 }

{ "timestamp": "10\/16\/2015-00:22:15.144826", "pcap_pkt_num": 1709, "ipver": 4, "srcip": "219.154.70.21", "dstip": "192.168.2.4", "protocol": 6, "sp": 80, "dp": 35994, "http_uri": "\/files\/analog\/doc\/data_sheet\/MC145018.pdf", "http_host": "www.freescale.com", "http_referer": "<unknown>", "http_user_agent": "Mozilla\/5.0 (X11; Ubuntu; Linux x86_64; rv:41.0) Gecko\/20100101 Firefox\/41.0", "filename": "\/files\/analog\/doc\/data_sheet\/MC145018.pdf", "magic": "ASCII text, with CRLF, LF line terminators", "state": "CLOSED", "md5": "cf4da8d3b6ddb267e2347002351eddc1", "stored": false, "size": 6849 }

{ "timestamp": "10\/16\/2015-00:22:12.937343", "pcap_pkt_num": 1696, "ipver": 4, "srcip": "117.18.237.29", "dstip": "192.168.2.4", "protocol": 6, "sp": 80, "dp": 53309, "http_uri": "\/", "http_host": "ocsp.digicert.com", "http_referer": "<unknown>", "http_user_agent": "Mozilla\/5.0 (X11; Ubuntu; Linux x86_64; rv:41.0) Gecko\/20100101 Firefox\/41.0", "filename": "\/", "magic": "data", "state": "CLOSED", "md5": "53a0706aafc39d176ccfa452d4ec3465", "stored": false, "size": 471 }

{ "id": 2, "timestamp": "10\/16\/2015-00:22:04.179869", "pcap_pkt_num": 1647, "ipver": 4, "srcip": "219.154.70.21", "dstip": "192.168.2.4", "protocol": 6, "sp": 80, "dp": 35993, "http_uri": "\/files\/analog\/doc\/data_sheet\/MC145018.pdf", "http_host": "www.freescale.com", "http_referer": "<unknown>", "http_user_agent": "Mozilla\/5.0 (X11; Ubuntu; Linux x86_64; rv:41.0) Gecko\/20100101 Firefox\/41.0", "filename": "\/files\/analog\/doc\/data_sheet\/MC145018.pdf", "magic": "PDF document, version 1.4", "state": "CLOSED", "md5": "069e4cfea127d9969ab8e419b2be3e41", "stored": false, "size": 793281 }

{ "timestamp": "10\/16\/2015-00:22:14.245677", "pcap_pkt_num": 1701, "ipver": 4, "srcip": "219.154.70.21", "dstip": "192.168.2.4", "protocol": 6, "sp": 80, "dp": 35993, "http_uri": "\/favicon.ico", "http_host": "www.freescale.com", "http_referer": "<unknown>", "http_user_agent": "Mozilla\/5.0 (X11; Ubuntu; Linux x86_64; rv:41.0) Gecko\/20100101 Firefox\/41.0", "filename": "\/favicon.ico", "magic": "MS Windows icon resource - 1 icon, 16x16", "state": "CLOSED", "md5": "c40812b90df8880b944ba11fd365d623", "stored": false, "size": 1150 }