⚲
Project
General
Profile
Sign in
Register
Home
Projects
Help
Search
:
Suricata
All Projects
Suricata
Overview
Activity
Roadmap
Issues
Wiki
Files
Download (292 KB)
Feature #2343
ยป eve_test2.json
Chris Knott
, 02/06/2018 04:45 AM
{
"timestamp"
:
"2018-02-06T11:00:54.765600+0100"
,
"flow_id"
:
1447738933143132
,
"in_iface"
:
"dummy"
,
"event_type"
:
"http"
,
"src_ip"
:
"172.27.27.9"
,
"src_port"
:
55701
,
"dest_ip"
:
"213.90.74.22"
,
"dest_port"
:
80
,
"proto"
:
"TCP"
,
"tx_id"
:
0
,
"http"
:{
"hostname"
:
"ad.adworx.at"
,
"url"
:
"
\/
RealMedia
\/
ads
\/
adstream_jx.ads
\/
front.orf.at
\/
front
\/
1277959636@Position3?bw=1920&bh=949&sw=1920&sh=1080"
,
"http_user_agent"
:
"Mozilla
\/
5.0 (Windows NT 10.0; Win64; x64) AppleWebKit
\/
537.36 (KHTML, like Gecko) Chrome
\/
63.0.3239.132 Safari
\/
537.36"
,
"http_content_type"
:
"application
\/
x-javascript"
,
"http_refer"
:
"http:
\/\/
orf.at
\/
"
,
"http_method"
:
"GET"
,
"protocol"
:
"HTTP
\/
1.1"
,
"status"
:
200
,
"length"
:
5518
}}
{
"timestamp"
:
"2018-02-06T11:00:57.000680+0100"
,
"event_type"
:
"stats"
,
"stats"
:{
"uptime"
:
9
,
"capture"
:{
"kernel_packets"
:
1
,
"kernel_drops"
:
0
},
"decoder"
:{
"pkts"
:
10
,
"bytes"
:
6852
,
"invalid"
:
0
,
"ipv4"
:
10
,
"ipv6"
:
0
,
"ethernet"
:
10
,
"raw"
:
0
,
"null"
:
0
,
"sll"
:
0
,
"tcp"
:
10
,
"udp"
:
0
,
"sctp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"ppp"
:
0
,
"pppoe"
:
0
,
"gre"
:
0
,
"vlan"
:
0
,
"vlan_qinq"
:
0
,
"ieee8021ah"
:
0
,
"teredo"
:
0
,
"ipv4_in_ipv6"
:
0
,
"ipv6_in_ipv6"
:
0
,
"mpls"
:
0
,
"avg_pkt_size"
:
685
,
"max_pkt_size"
:
1506
,
"erspan"
:
0
,
"ipraw"
:{
"invalid_ip_version"
:
0
},
"ltnull"
:{
"pkt_too_small"
:
0
,
"unsupported_type"
:
0
},
"dce"
:{
"pkt_too_small"
:
0
}},
"flow"
:{
"memcap"
:
0
,
"tcp"
:
1
,
"udp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"spare"
:
10000
,
"emerg_mode_entered"
:
0
,
"emerg_mode_over"
:
0
,
"tcp_reuse"
:
0
,
"memuse"
:
7074592
},
"defrag"
:{
"ipv4"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"ipv6"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"max_frag_hits"
:
0
},
"tcp"
:{
"sessions"
:
1
,
"ssn_memcap_drop"
:
0
,
"pseudo"
:
0
,
"pseudo_failed"
:
0
,
"invalid_checksum"
:
0
,
"no_flow"
:
0
,
"syn"
:
1
,
"synack"
:
1
,
"rst"
:
0
,
"segment_memcap_drop"
:
0
,
"stream_depth_reached"
:
0
,
"reassembly_gap"
:
0
,
"overlap"
:
0
,
"overlap_diff_data"
:
0
,
"insert_data_normal_fail"
:
0
,
"insert_data_overlap_fail"
:
0
,
"insert_list_fail"
:
0
,
"memuse"
:
6881280
,
"reassembly_memuse"
:
991232
},
"detect"
:{
"alert"
:
0
},
"app_layer"
:{
"flow"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"imap"
:
0
,
"msn"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"failed_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
,
"failed_udp"
:
0
},
"tx"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
}},
"flow_mgr"
:{
"closed_pruned"
:
0
,
"new_pruned"
:
0
,
"est_pruned"
:
0
,
"bypassed_pruned"
:
0
,
"flows_checked"
:
0
,
"flows_notimeout"
:
0
,
"flows_timeout"
:
0
,
"flows_timeout_inuse"
:
0
,
"flows_removed"
:
0
,
"rows_checked"
:
65536
,
"rows_skipped"
:
65536
,
"rows_empty"
:
0
,
"rows_busy"
:
0
,
"rows_maxlen"
:
0
},
"file_store"
:{
"open_files"
:
0
},
"dns"
:{
"memuse"
:
0
,
"memcap_state"
:
0
,
"memcap_global"
:
0
},
"http"
:{
"memuse"
:
35131
,
"memcap"
:
0
}}}
{
"timestamp"
:
"2018-02-06T11:01:04.000388+0100"
,
"event_type"
:
"stats"
,
"stats"
:{
"uptime"
:
16
,
"capture"
:{
"kernel_packets"
:
1
,
"kernel_drops"
:
0
},
"decoder"
:{
"pkts"
:
10
,
"bytes"
:
6852
,
"invalid"
:
0
,
"ipv4"
:
10
,
"ipv6"
:
0
,
"ethernet"
:
10
,
"raw"
:
0
,
"null"
:
0
,
"sll"
:
0
,
"tcp"
:
10
,
"udp"
:
0
,
"sctp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"ppp"
:
0
,
"pppoe"
:
0
,
"gre"
:
0
,
"vlan"
:
0
,
"vlan_qinq"
:
0
,
"ieee8021ah"
:
0
,
"teredo"
:
0
,
"ipv4_in_ipv6"
:
0
,
"ipv6_in_ipv6"
:
0
,
"mpls"
:
0
,
"avg_pkt_size"
:
685
,
"max_pkt_size"
:
1506
,
"erspan"
:
0
,
"ipraw"
:{
"invalid_ip_version"
:
0
},
"ltnull"
:{
"pkt_too_small"
:
0
,
"unsupported_type"
:
0
},
"dce"
:{
"pkt_too_small"
:
0
}},
"flow"
:{
"memcap"
:
0
,
"tcp"
:
1
,
"udp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"spare"
:
10000
,
"emerg_mode_entered"
:
0
,
"emerg_mode_over"
:
0
,
"tcp_reuse"
:
0
,
"memuse"
:
7074592
},
"defrag"
:{
"ipv4"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"ipv6"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"max_frag_hits"
:
0
},
"tcp"
:{
"sessions"
:
1
,
"ssn_memcap_drop"
:
0
,
"pseudo"
:
0
,
"pseudo_failed"
:
0
,
"invalid_checksum"
:
0
,
"no_flow"
:
0
,
"syn"
:
1
,
"synack"
:
1
,
"rst"
:
0
,
"segment_memcap_drop"
:
0
,
"stream_depth_reached"
:
0
,
"reassembly_gap"
:
0
,
"overlap"
:
0
,
"overlap_diff_data"
:
0
,
"insert_data_normal_fail"
:
0
,
"insert_data_overlap_fail"
:
0
,
"insert_list_fail"
:
0
,
"memuse"
:
6881280
,
"reassembly_memuse"
:
991232
},
"detect"
:{
"alert"
:
0
},
"app_layer"
:{
"flow"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"imap"
:
0
,
"msn"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"failed_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
,
"failed_udp"
:
0
},
"tx"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
}},
"flow_mgr"
:{
"closed_pruned"
:
0
,
"new_pruned"
:
0
,
"est_pruned"
:
0
,
"bypassed_pruned"
:
0
,
"flows_checked"
:
0
,
"flows_notimeout"
:
0
,
"flows_timeout"
:
0
,
"flows_timeout_inuse"
:
0
,
"flows_removed"
:
0
,
"rows_checked"
:
65536
,
"rows_skipped"
:
65536
,
"rows_empty"
:
0
,
"rows_busy"
:
0
,
"rows_maxlen"
:
0
},
"file_store"
:{
"open_files"
:
0
},
"dns"
:{
"memuse"
:
0
,
"memcap_state"
:
0
,
"memcap_global"
:
0
},
"http"
:{
"memuse"
:
35131
,
"memcap"
:
0
}}}
{
"timestamp"
:
"2018-02-06T11:01:11.000474+0100"
,
"event_type"
:
"stats"
,
"stats"
:{
"uptime"
:
23
,
"capture"
:{
"kernel_packets"
:
1
,
"kernel_drops"
:
0
},
"decoder"
:{
"pkts"
:
10
,
"bytes"
:
6852
,
"invalid"
:
0
,
"ipv4"
:
10
,
"ipv6"
:
0
,
"ethernet"
:
10
,
"raw"
:
0
,
"null"
:
0
,
"sll"
:
0
,
"tcp"
:
10
,
"udp"
:
0
,
"sctp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"ppp"
:
0
,
"pppoe"
:
0
,
"gre"
:
0
,
"vlan"
:
0
,
"vlan_qinq"
:
0
,
"ieee8021ah"
:
0
,
"teredo"
:
0
,
"ipv4_in_ipv6"
:
0
,
"ipv6_in_ipv6"
:
0
,
"mpls"
:
0
,
"avg_pkt_size"
:
685
,
"max_pkt_size"
:
1506
,
"erspan"
:
0
,
"ipraw"
:{
"invalid_ip_version"
:
0
},
"ltnull"
:{
"pkt_too_small"
:
0
,
"unsupported_type"
:
0
},
"dce"
:{
"pkt_too_small"
:
0
}},
"flow"
:{
"memcap"
:
0
,
"tcp"
:
1
,
"udp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"spare"
:
10000
,
"emerg_mode_entered"
:
0
,
"emerg_mode_over"
:
0
,
"tcp_reuse"
:
0
,
"memuse"
:
7074592
},
"defrag"
:{
"ipv4"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"ipv6"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"max_frag_hits"
:
0
},
"tcp"
:{
"sessions"
:
1
,
"ssn_memcap_drop"
:
0
,
"pseudo"
:
0
,
"pseudo_failed"
:
0
,
"invalid_checksum"
:
0
,
"no_flow"
:
0
,
"syn"
:
1
,
"synack"
:
1
,
"rst"
:
0
,
"segment_memcap_drop"
:
0
,
"stream_depth_reached"
:
0
,
"reassembly_gap"
:
0
,
"overlap"
:
0
,
"overlap_diff_data"
:
0
,
"insert_data_normal_fail"
:
0
,
"insert_data_overlap_fail"
:
0
,
"insert_list_fail"
:
0
,
"memuse"
:
6881280
,
"reassembly_memuse"
:
991232
},
"detect"
:{
"alert"
:
0
},
"app_layer"
:{
"flow"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"imap"
:
0
,
"msn"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"failed_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
,
"failed_udp"
:
0
},
"tx"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
}},
"flow_mgr"
:{
"closed_pruned"
:
0
,
"new_pruned"
:
0
,
"est_pruned"
:
0
,
"bypassed_pruned"
:
0
,
"flows_checked"
:
0
,
"flows_notimeout"
:
0
,
"flows_timeout"
:
0
,
"flows_timeout_inuse"
:
0
,
"flows_removed"
:
0
,
"rows_checked"
:
65536
,
"rows_skipped"
:
65536
,
"rows_empty"
:
0
,
"rows_busy"
:
0
,
"rows_maxlen"
:
0
},
"file_store"
:{
"open_files"
:
0
},
"dns"
:{
"memuse"
:
0
,
"memcap_state"
:
0
,
"memcap_global"
:
0
},
"http"
:{
"memuse"
:
35131
,
"memcap"
:
0
}}}
{
"timestamp"
:
"2018-02-06T11:01:18.000433+0100"
,
"event_type"
:
"stats"
,
"stats"
:{
"uptime"
:
30
,
"capture"
:{
"kernel_packets"
:
1
,
"kernel_drops"
:
0
},
"decoder"
:{
"pkts"
:
10
,
"bytes"
:
6852
,
"invalid"
:
0
,
"ipv4"
:
10
,
"ipv6"
:
0
,
"ethernet"
:
10
,
"raw"
:
0
,
"null"
:
0
,
"sll"
:
0
,
"tcp"
:
10
,
"udp"
:
0
,
"sctp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"ppp"
:
0
,
"pppoe"
:
0
,
"gre"
:
0
,
"vlan"
:
0
,
"vlan_qinq"
:
0
,
"ieee8021ah"
:
0
,
"teredo"
:
0
,
"ipv4_in_ipv6"
:
0
,
"ipv6_in_ipv6"
:
0
,
"mpls"
:
0
,
"avg_pkt_size"
:
685
,
"max_pkt_size"
:
1506
,
"erspan"
:
0
,
"ipraw"
:{
"invalid_ip_version"
:
0
},
"ltnull"
:{
"pkt_too_small"
:
0
,
"unsupported_type"
:
0
},
"dce"
:{
"pkt_too_small"
:
0
}},
"flow"
:{
"memcap"
:
0
,
"tcp"
:
1
,
"udp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"spare"
:
10000
,
"emerg_mode_entered"
:
0
,
"emerg_mode_over"
:
0
,
"tcp_reuse"
:
0
,
"memuse"
:
7074592
},
"defrag"
:{
"ipv4"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"ipv6"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"max_frag_hits"
:
0
},
"tcp"
:{
"sessions"
:
1
,
"ssn_memcap_drop"
:
0
,
"pseudo"
:
0
,
"pseudo_failed"
:
0
,
"invalid_checksum"
:
0
,
"no_flow"
:
0
,
"syn"
:
1
,
"synack"
:
1
,
"rst"
:
0
,
"segment_memcap_drop"
:
0
,
"stream_depth_reached"
:
0
,
"reassembly_gap"
:
0
,
"overlap"
:
0
,
"overlap_diff_data"
:
0
,
"insert_data_normal_fail"
:
0
,
"insert_data_overlap_fail"
:
0
,
"insert_list_fail"
:
0
,
"memuse"
:
6881280
,
"reassembly_memuse"
:
991232
},
"detect"
:{
"alert"
:
0
},
"app_layer"
:{
"flow"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"imap"
:
0
,
"msn"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"failed_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
,
"failed_udp"
:
0
},
"tx"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
}},
"flow_mgr"
:{
"closed_pruned"
:
0
,
"new_pruned"
:
0
,
"est_pruned"
:
0
,
"bypassed_pruned"
:
0
,
"flows_checked"
:
0
,
"flows_notimeout"
:
0
,
"flows_timeout"
:
0
,
"flows_timeout_inuse"
:
0
,
"flows_removed"
:
0
,
"rows_checked"
:
65536
,
"rows_skipped"
:
65536
,
"rows_empty"
:
0
,
"rows_busy"
:
0
,
"rows_maxlen"
:
0
},
"file_store"
:{
"open_files"
:
0
},
"dns"
:{
"memuse"
:
0
,
"memcap_state"
:
0
,
"memcap_global"
:
0
},
"http"
:{
"memuse"
:
35131
,
"memcap"
:
0
}}}
{
"timestamp"
:
"2018-02-06T11:01:25.000479+0100"
,
"event_type"
:
"stats"
,
"stats"
:{
"uptime"
:
37
,
"capture"
:{
"kernel_packets"
:
1
,
"kernel_drops"
:
0
},
"decoder"
:{
"pkts"
:
10
,
"bytes"
:
6852
,
"invalid"
:
0
,
"ipv4"
:
10
,
"ipv6"
:
0
,
"ethernet"
:
10
,
"raw"
:
0
,
"null"
:
0
,
"sll"
:
0
,
"tcp"
:
10
,
"udp"
:
0
,
"sctp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"ppp"
:
0
,
"pppoe"
:
0
,
"gre"
:
0
,
"vlan"
:
0
,
"vlan_qinq"
:
0
,
"ieee8021ah"
:
0
,
"teredo"
:
0
,
"ipv4_in_ipv6"
:
0
,
"ipv6_in_ipv6"
:
0
,
"mpls"
:
0
,
"avg_pkt_size"
:
685
,
"max_pkt_size"
:
1506
,
"erspan"
:
0
,
"ipraw"
:{
"invalid_ip_version"
:
0
},
"ltnull"
:{
"pkt_too_small"
:
0
,
"unsupported_type"
:
0
},
"dce"
:{
"pkt_too_small"
:
0
}},
"flow"
:{
"memcap"
:
0
,
"tcp"
:
1
,
"udp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"spare"
:
10000
,
"emerg_mode_entered"
:
0
,
"emerg_mode_over"
:
0
,
"tcp_reuse"
:
0
,
"memuse"
:
7074592
},
"defrag"
:{
"ipv4"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"ipv6"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"max_frag_hits"
:
0
},
"tcp"
:{
"sessions"
:
1
,
"ssn_memcap_drop"
:
0
,
"pseudo"
:
0
,
"pseudo_failed"
:
0
,
"invalid_checksum"
:
0
,
"no_flow"
:
0
,
"syn"
:
1
,
"synack"
:
1
,
"rst"
:
0
,
"segment_memcap_drop"
:
0
,
"stream_depth_reached"
:
0
,
"reassembly_gap"
:
0
,
"overlap"
:
0
,
"overlap_diff_data"
:
0
,
"insert_data_normal_fail"
:
0
,
"insert_data_overlap_fail"
:
0
,
"insert_list_fail"
:
0
,
"memuse"
:
6881280
,
"reassembly_memuse"
:
991232
},
"detect"
:{
"alert"
:
0
},
"app_layer"
:{
"flow"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"imap"
:
0
,
"msn"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"failed_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
,
"failed_udp"
:
0
},
"tx"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
}},
"flow_mgr"
:{
"closed_pruned"
:
0
,
"new_pruned"
:
0
,
"est_pruned"
:
0
,
"bypassed_pruned"
:
0
,
"flows_checked"
:
0
,
"flows_notimeout"
:
0
,
"flows_timeout"
:
0
,
"flows_timeout_inuse"
:
0
,
"flows_removed"
:
0
,
"rows_checked"
:
65536
,
"rows_skipped"
:
65536
,
"rows_empty"
:
0
,
"rows_busy"
:
0
,
"rows_maxlen"
:
0
},
"file_store"
:{
"open_files"
:
0
},
"dns"
:{
"memuse"
:
0
,
"memcap_state"
:
0
,
"memcap_global"
:
0
},
"http"
:{
"memuse"
:
35131
,
"memcap"
:
0
}}}
{
"timestamp"
:
"2018-02-06T11:01:32.000300+0100"
,
"event_type"
:
"stats"
,
"stats"
:{
"uptime"
:
44
,
"capture"
:{
"kernel_packets"
:
1
,
"kernel_drops"
:
0
},
"decoder"
:{
"pkts"
:
10
,
"bytes"
:
6852
,
"invalid"
:
0
,
"ipv4"
:
10
,
"ipv6"
:
0
,
"ethernet"
:
10
,
"raw"
:
0
,
"null"
:
0
,
"sll"
:
0
,
"tcp"
:
10
,
"udp"
:
0
,
"sctp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"ppp"
:
0
,
"pppoe"
:
0
,
"gre"
:
0
,
"vlan"
:
0
,
"vlan_qinq"
:
0
,
"ieee8021ah"
:
0
,
"teredo"
:
0
,
"ipv4_in_ipv6"
:
0
,
"ipv6_in_ipv6"
:
0
,
"mpls"
:
0
,
"avg_pkt_size"
:
685
,
"max_pkt_size"
:
1506
,
"erspan"
:
0
,
"ipraw"
:{
"invalid_ip_version"
:
0
},
"ltnull"
:{
"pkt_too_small"
:
0
,
"unsupported_type"
:
0
},
"dce"
:{
"pkt_too_small"
:
0
}},
"flow"
:{
"memcap"
:
0
,
"tcp"
:
1
,
"udp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"spare"
:
10000
,
"emerg_mode_entered"
:
0
,
"emerg_mode_over"
:
0
,
"tcp_reuse"
:
0
,
"memuse"
:
7074592
},
"defrag"
:{
"ipv4"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"ipv6"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"max_frag_hits"
:
0
},
"tcp"
:{
"sessions"
:
1
,
"ssn_memcap_drop"
:
0
,
"pseudo"
:
0
,
"pseudo_failed"
:
0
,
"invalid_checksum"
:
0
,
"no_flow"
:
0
,
"syn"
:
1
,
"synack"
:
1
,
"rst"
:
0
,
"segment_memcap_drop"
:
0
,
"stream_depth_reached"
:
0
,
"reassembly_gap"
:
0
,
"overlap"
:
0
,
"overlap_diff_data"
:
0
,
"insert_data_normal_fail"
:
0
,
"insert_data_overlap_fail"
:
0
,
"insert_list_fail"
:
0
,
"memuse"
:
6881280
,
"reassembly_memuse"
:
991232
},
"detect"
:{
"alert"
:
0
},
"app_layer"
:{
"flow"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"imap"
:
0
,
"msn"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"failed_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
,
"failed_udp"
:
0
},
"tx"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
}},
"flow_mgr"
:{
"closed_pruned"
:
0
,
"new_pruned"
:
0
,
"est_pruned"
:
0
,
"bypassed_pruned"
:
0
,
"flows_checked"
:
0
,
"flows_notimeout"
:
0
,
"flows_timeout"
:
0
,
"flows_timeout_inuse"
:
0
,
"flows_removed"
:
0
,
"rows_checked"
:
65536
,
"rows_skipped"
:
65536
,
"rows_empty"
:
0
,
"rows_busy"
:
0
,
"rows_maxlen"
:
0
},
"file_store"
:{
"open_files"
:
0
},
"dns"
:{
"memuse"
:
0
,
"memcap_state"
:
0
,
"memcap_global"
:
0
},
"http"
:{
"memuse"
:
35131
,
"memcap"
:
0
}}}
{
"timestamp"
:
"2018-02-06T11:01:39.000470+0100"
,
"event_type"
:
"stats"
,
"stats"
:{
"uptime"
:
51
,
"capture"
:{
"kernel_packets"
:
1
,
"kernel_drops"
:
0
},
"decoder"
:{
"pkts"
:
10
,
"bytes"
:
6852
,
"invalid"
:
0
,
"ipv4"
:
10
,
"ipv6"
:
0
,
"ethernet"
:
10
,
"raw"
:
0
,
"null"
:
0
,
"sll"
:
0
,
"tcp"
:
10
,
"udp"
:
0
,
"sctp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"ppp"
:
0
,
"pppoe"
:
0
,
"gre"
:
0
,
"vlan"
:
0
,
"vlan_qinq"
:
0
,
"ieee8021ah"
:
0
,
"teredo"
:
0
,
"ipv4_in_ipv6"
:
0
,
"ipv6_in_ipv6"
:
0
,
"mpls"
:
0
,
"avg_pkt_size"
:
685
,
"max_pkt_size"
:
1506
,
"erspan"
:
0
,
"ipraw"
:{
"invalid_ip_version"
:
0
},
"ltnull"
:{
"pkt_too_small"
:
0
,
"unsupported_type"
:
0
},
"dce"
:{
"pkt_too_small"
:
0
}},
"flow"
:{
"memcap"
:
0
,
"tcp"
:
1
,
"udp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"spare"
:
10000
,
"emerg_mode_entered"
:
0
,
"emerg_mode_over"
:
0
,
"tcp_reuse"
:
0
,
"memuse"
:
7074592
},
"defrag"
:{
"ipv4"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"ipv6"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"max_frag_hits"
:
0
},
"tcp"
:{
"sessions"
:
1
,
"ssn_memcap_drop"
:
0
,
"pseudo"
:
0
,
"pseudo_failed"
:
0
,
"invalid_checksum"
:
0
,
"no_flow"
:
0
,
"syn"
:
1
,
"synack"
:
1
,
"rst"
:
0
,
"segment_memcap_drop"
:
0
,
"stream_depth_reached"
:
0
,
"reassembly_gap"
:
0
,
"overlap"
:
0
,
"overlap_diff_data"
:
0
,
"insert_data_normal_fail"
:
0
,
"insert_data_overlap_fail"
:
0
,
"insert_list_fail"
:
0
,
"memuse"
:
6881280
,
"reassembly_memuse"
:
991232
},
"detect"
:{
"alert"
:
0
},
"app_layer"
:{
"flow"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"imap"
:
0
,
"msn"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"failed_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
,
"failed_udp"
:
0
},
"tx"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
}},
"flow_mgr"
:{
"closed_pruned"
:
0
,
"new_pruned"
:
0
,
"est_pruned"
:
0
,
"bypassed_pruned"
:
0
,
"flows_checked"
:
0
,
"flows_notimeout"
:
0
,
"flows_timeout"
:
0
,
"flows_timeout_inuse"
:
0
,
"flows_removed"
:
0
,
"rows_checked"
:
65536
,
"rows_skipped"
:
65536
,
"rows_empty"
:
0
,
"rows_busy"
:
0
,
"rows_maxlen"
:
0
},
"file_store"
:{
"open_files"
:
0
},
"dns"
:{
"memuse"
:
0
,
"memcap_state"
:
0
,
"memcap_global"
:
0
},
"http"
:{
"memuse"
:
35131
,
"memcap"
:
0
}}}
{
"timestamp"
:
"2018-02-06T11:01:46.000459+0100"
,
"event_type"
:
"stats"
,
"stats"
:{
"uptime"
:
58
,
"capture"
:{
"kernel_packets"
:
1
,
"kernel_drops"
:
0
},
"decoder"
:{
"pkts"
:
10
,
"bytes"
:
6852
,
"invalid"
:
0
,
"ipv4"
:
10
,
"ipv6"
:
0
,
"ethernet"
:
10
,
"raw"
:
0
,
"null"
:
0
,
"sll"
:
0
,
"tcp"
:
10
,
"udp"
:
0
,
"sctp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"ppp"
:
0
,
"pppoe"
:
0
,
"gre"
:
0
,
"vlan"
:
0
,
"vlan_qinq"
:
0
,
"ieee8021ah"
:
0
,
"teredo"
:
0
,
"ipv4_in_ipv6"
:
0
,
"ipv6_in_ipv6"
:
0
,
"mpls"
:
0
,
"avg_pkt_size"
:
685
,
"max_pkt_size"
:
1506
,
"erspan"
:
0
,
"ipraw"
:{
"invalid_ip_version"
:
0
},
"ltnull"
:{
"pkt_too_small"
:
0
,
"unsupported_type"
:
0
},
"dce"
:{
"pkt_too_small"
:
0
}},
"flow"
:{
"memcap"
:
0
,
"tcp"
:
1
,
"udp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"spare"
:
10000
,
"emerg_mode_entered"
:
0
,
"emerg_mode_over"
:
0
,
"tcp_reuse"
:
0
,
"memuse"
:
7074592
},
"defrag"
:{
"ipv4"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"ipv6"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"max_frag_hits"
:
0
},
"tcp"
:{
"sessions"
:
1
,
"ssn_memcap_drop"
:
0
,
"pseudo"
:
0
,
"pseudo_failed"
:
0
,
"invalid_checksum"
:
0
,
"no_flow"
:
0
,
"syn"
:
1
,
"synack"
:
1
,
"rst"
:
0
,
"segment_memcap_drop"
:
0
,
"stream_depth_reached"
:
0
,
"reassembly_gap"
:
0
,
"overlap"
:
0
,
"overlap_diff_data"
:
0
,
"insert_data_normal_fail"
:
0
,
"insert_data_overlap_fail"
:
0
,
"insert_list_fail"
:
0
,
"memuse"
:
6881280
,
"reassembly_memuse"
:
991232
},
"detect"
:{
"alert"
:
0
},
"app_layer"
:{
"flow"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"imap"
:
0
,
"msn"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"failed_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
,
"failed_udp"
:
0
},
"tx"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
}},
"flow_mgr"
:{
"closed_pruned"
:
0
,
"new_pruned"
:
0
,
"est_pruned"
:
0
,
"bypassed_pruned"
:
0
,
"flows_checked"
:
0
,
"flows_notimeout"
:
0
,
"flows_timeout"
:
0
,
"flows_timeout_inuse"
:
0
,
"flows_removed"
:
0
,
"rows_checked"
:
65536
,
"rows_skipped"
:
65536
,
"rows_empty"
:
0
,
"rows_busy"
:
0
,
"rows_maxlen"
:
0
},
"file_store"
:{
"open_files"
:
0
},
"dns"
:{
"memuse"
:
0
,
"memcap_state"
:
0
,
"memcap_global"
:
0
},
"http"
:{
"memuse"
:
35131
,
"memcap"
:
0
}}}
{
"timestamp"
:
"2018-02-06T11:01:53.000464+0100"
,
"event_type"
:
"stats"
,
"stats"
:{
"uptime"
:
65
,
"capture"
:{
"kernel_packets"
:
1
,
"kernel_drops"
:
0
},
"decoder"
:{
"pkts"
:
10
,
"bytes"
:
6852
,
"invalid"
:
0
,
"ipv4"
:
10
,
"ipv6"
:
0
,
"ethernet"
:
10
,
"raw"
:
0
,
"null"
:
0
,
"sll"
:
0
,
"tcp"
:
10
,
"udp"
:
0
,
"sctp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"ppp"
:
0
,
"pppoe"
:
0
,
"gre"
:
0
,
"vlan"
:
0
,
"vlan_qinq"
:
0
,
"ieee8021ah"
:
0
,
"teredo"
:
0
,
"ipv4_in_ipv6"
:
0
,
"ipv6_in_ipv6"
:
0
,
"mpls"
:
0
,
"avg_pkt_size"
:
685
,
"max_pkt_size"
:
1506
,
"erspan"
:
0
,
"ipraw"
:{
"invalid_ip_version"
:
0
},
"ltnull"
:{
"pkt_too_small"
:
0
,
"unsupported_type"
:
0
},
"dce"
:{
"pkt_too_small"
:
0
}},
"flow"
:{
"memcap"
:
0
,
"tcp"
:
1
,
"udp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"spare"
:
10000
,
"emerg_mode_entered"
:
0
,
"emerg_mode_over"
:
0
,
"tcp_reuse"
:
0
,
"memuse"
:
7074592
},
"defrag"
:{
"ipv4"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"ipv6"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"max_frag_hits"
:
0
},
"tcp"
:{
"sessions"
:
1
,
"ssn_memcap_drop"
:
0
,
"pseudo"
:
0
,
"pseudo_failed"
:
0
,
"invalid_checksum"
:
0
,
"no_flow"
:
0
,
"syn"
:
1
,
"synack"
:
1
,
"rst"
:
0
,
"segment_memcap_drop"
:
0
,
"stream_depth_reached"
:
0
,
"reassembly_gap"
:
0
,
"overlap"
:
0
,
"overlap_diff_data"
:
0
,
"insert_data_normal_fail"
:
0
,
"insert_data_overlap_fail"
:
0
,
"insert_list_fail"
:
0
,
"memuse"
:
6881280
,
"reassembly_memuse"
:
991232
},
"detect"
:{
"alert"
:
0
},
"app_layer"
:{
"flow"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"imap"
:
0
,
"msn"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"failed_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
,
"failed_udp"
:
0
},
"tx"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
}},
"flow_mgr"
:{
"closed_pruned"
:
0
,
"new_pruned"
:
0
,
"est_pruned"
:
0
,
"bypassed_pruned"
:
0
,
"flows_checked"
:
0
,
"flows_notimeout"
:
0
,
"flows_timeout"
:
0
,
"flows_timeout_inuse"
:
0
,
"flows_removed"
:
0
,
"rows_checked"
:
65536
,
"rows_skipped"
:
65536
,
"rows_empty"
:
0
,
"rows_busy"
:
0
,
"rows_maxlen"
:
0
},
"file_store"
:{
"open_files"
:
0
},
"dns"
:{
"memuse"
:
0
,
"memcap_state"
:
0
,
"memcap_global"
:
0
},
"http"
:{
"memuse"
:
35131
,
"memcap"
:
0
}}}
{
"timestamp"
:
"2018-02-06T11:02:00.000411+0100"
,
"event_type"
:
"stats"
,
"stats"
:{
"uptime"
:
72
,
"capture"
:{
"kernel_packets"
:
1
,
"kernel_drops"
:
0
},
"decoder"
:{
"pkts"
:
10
,
"bytes"
:
6852
,
"invalid"
:
0
,
"ipv4"
:
10
,
"ipv6"
:
0
,
"ethernet"
:
10
,
"raw"
:
0
,
"null"
:
0
,
"sll"
:
0
,
"tcp"
:
10
,
"udp"
:
0
,
"sctp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"ppp"
:
0
,
"pppoe"
:
0
,
"gre"
:
0
,
"vlan"
:
0
,
"vlan_qinq"
:
0
,
"ieee8021ah"
:
0
,
"teredo"
:
0
,
"ipv4_in_ipv6"
:
0
,
"ipv6_in_ipv6"
:
0
,
"mpls"
:
0
,
"avg_pkt_size"
:
685
,
"max_pkt_size"
:
1506
,
"erspan"
:
0
,
"ipraw"
:{
"invalid_ip_version"
:
0
},
"ltnull"
:{
"pkt_too_small"
:
0
,
"unsupported_type"
:
0
},
"dce"
:{
"pkt_too_small"
:
0
}},
"flow"
:{
"memcap"
:
0
,
"tcp"
:
1
,
"udp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"spare"
:
10000
,
"emerg_mode_entered"
:
0
,
"emerg_mode_over"
:
0
,
"tcp_reuse"
:
0
,
"memuse"
:
7074592
},
"defrag"
:{
"ipv4"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"ipv6"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"max_frag_hits"
:
0
},
"tcp"
:{
"sessions"
:
1
,
"ssn_memcap_drop"
:
0
,
"pseudo"
:
0
,
"pseudo_failed"
:
0
,
"invalid_checksum"
:
0
,
"no_flow"
:
0
,
"syn"
:
1
,
"synack"
:
1
,
"rst"
:
0
,
"segment_memcap_drop"
:
0
,
"stream_depth_reached"
:
0
,
"reassembly_gap"
:
0
,
"overlap"
:
0
,
"overlap_diff_data"
:
0
,
"insert_data_normal_fail"
:
0
,
"insert_data_overlap_fail"
:
0
,
"insert_list_fail"
:
0
,
"memuse"
:
6881280
,
"reassembly_memuse"
:
991232
},
"detect"
:{
"alert"
:
0
},
"app_layer"
:{
"flow"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"imap"
:
0
,
"msn"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"failed_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
,
"failed_udp"
:
0
},
"tx"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
}},
"flow_mgr"
:{
"closed_pruned"
:
0
,
"new_pruned"
:
0
,
"est_pruned"
:
0
,
"bypassed_pruned"
:
0
,
"flows_checked"
:
0
,
"flows_notimeout"
:
0
,
"flows_timeout"
:
0
,
"flows_timeout_inuse"
:
0
,
"flows_removed"
:
0
,
"rows_checked"
:
65536
,
"rows_skipped"
:
65536
,
"rows_empty"
:
0
,
"rows_busy"
:
0
,
"rows_maxlen"
:
0
},
"file_store"
:{
"open_files"
:
0
},
"dns"
:{
"memuse"
:
0
,
"memcap_state"
:
0
,
"memcap_global"
:
0
},
"http"
:{
"memuse"
:
35131
,
"memcap"
:
0
}}}
{
"timestamp"
:
"2018-02-06T11:02:07.000465+0100"
,
"event_type"
:
"stats"
,
"stats"
:{
"uptime"
:
79
,
"capture"
:{
"kernel_packets"
:
1
,
"kernel_drops"
:
0
},
"decoder"
:{
"pkts"
:
10
,
"bytes"
:
6852
,
"invalid"
:
0
,
"ipv4"
:
10
,
"ipv6"
:
0
,
"ethernet"
:
10
,
"raw"
:
0
,
"null"
:
0
,
"sll"
:
0
,
"tcp"
:
10
,
"udp"
:
0
,
"sctp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"ppp"
:
0
,
"pppoe"
:
0
,
"gre"
:
0
,
"vlan"
:
0
,
"vlan_qinq"
:
0
,
"ieee8021ah"
:
0
,
"teredo"
:
0
,
"ipv4_in_ipv6"
:
0
,
"ipv6_in_ipv6"
:
0
,
"mpls"
:
0
,
"avg_pkt_size"
:
685
,
"max_pkt_size"
:
1506
,
"erspan"
:
0
,
"ipraw"
:{
"invalid_ip_version"
:
0
},
"ltnull"
:{
"pkt_too_small"
:
0
,
"unsupported_type"
:
0
},
"dce"
:{
"pkt_too_small"
:
0
}},
"flow"
:{
"memcap"
:
0
,
"tcp"
:
1
,
"udp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"spare"
:
10000
,
"emerg_mode_entered"
:
0
,
"emerg_mode_over"
:
0
,
"tcp_reuse"
:
0
,
"memuse"
:
7074592
},
"defrag"
:{
"ipv4"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"ipv6"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"max_frag_hits"
:
0
},
"tcp"
:{
"sessions"
:
1
,
"ssn_memcap_drop"
:
0
,
"pseudo"
:
0
,
"pseudo_failed"
:
0
,
"invalid_checksum"
:
0
,
"no_flow"
:
0
,
"syn"
:
1
,
"synack"
:
1
,
"rst"
:
0
,
"segment_memcap_drop"
:
0
,
"stream_depth_reached"
:
0
,
"reassembly_gap"
:
0
,
"overlap"
:
0
,
"overlap_diff_data"
:
0
,
"insert_data_normal_fail"
:
0
,
"insert_data_overlap_fail"
:
0
,
"insert_list_fail"
:
0
,
"memuse"
:
6881280
,
"reassembly_memuse"
:
991232
},
"detect"
:{
"alert"
:
0
},
"app_layer"
:{
"flow"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"imap"
:
0
,
"msn"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"failed_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
,
"failed_udp"
:
0
},
"tx"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
}},
"flow_mgr"
:{
"closed_pruned"
:
0
,
"new_pruned"
:
0
,
"est_pruned"
:
0
,
"bypassed_pruned"
:
0
,
"flows_checked"
:
0
,
"flows_notimeout"
:
0
,
"flows_timeout"
:
0
,
"flows_timeout_inuse"
:
0
,
"flows_removed"
:
0
,
"rows_checked"
:
65536
,
"rows_skipped"
:
65536
,
"rows_empty"
:
0
,
"rows_busy"
:
0
,
"rows_maxlen"
:
0
},
"file_store"
:{
"open_files"
:
0
},
"dns"
:{
"memuse"
:
0
,
"memcap_state"
:
0
,
"memcap_global"
:
0
},
"http"
:{
"memuse"
:
35131
,
"memcap"
:
0
}}}
{
"timestamp"
:
"2018-02-06T11:02:14.000471+0100"
,
"event_type"
:
"stats"
,
"stats"
:{
"uptime"
:
86
,
"capture"
:{
"kernel_packets"
:
1
,
"kernel_drops"
:
0
},
"decoder"
:{
"pkts"
:
10
,
"bytes"
:
6852
,
"invalid"
:
0
,
"ipv4"
:
10
,
"ipv6"
:
0
,
"ethernet"
:
10
,
"raw"
:
0
,
"null"
:
0
,
"sll"
:
0
,
"tcp"
:
10
,
"udp"
:
0
,
"sctp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"ppp"
:
0
,
"pppoe"
:
0
,
"gre"
:
0
,
"vlan"
:
0
,
"vlan_qinq"
:
0
,
"ieee8021ah"
:
0
,
"teredo"
:
0
,
"ipv4_in_ipv6"
:
0
,
"ipv6_in_ipv6"
:
0
,
"mpls"
:
0
,
"avg_pkt_size"
:
685
,
"max_pkt_size"
:
1506
,
"erspan"
:
0
,
"ipraw"
:{
"invalid_ip_version"
:
0
},
"ltnull"
:{
"pkt_too_small"
:
0
,
"unsupported_type"
:
0
},
"dce"
:{
"pkt_too_small"
:
0
}},
"flow"
:{
"memcap"
:
0
,
"tcp"
:
1
,
"udp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"spare"
:
10000
,
"emerg_mode_entered"
:
0
,
"emerg_mode_over"
:
0
,
"tcp_reuse"
:
0
,
"memuse"
:
7074592
},
"defrag"
:{
"ipv4"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"ipv6"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"max_frag_hits"
:
0
},
"tcp"
:{
"sessions"
:
1
,
"ssn_memcap_drop"
:
0
,
"pseudo"
:
0
,
"pseudo_failed"
:
0
,
"invalid_checksum"
:
0
,
"no_flow"
:
0
,
"syn"
:
1
,
"synack"
:
1
,
"rst"
:
0
,
"segment_memcap_drop"
:
0
,
"stream_depth_reached"
:
0
,
"reassembly_gap"
:
0
,
"overlap"
:
0
,
"overlap_diff_data"
:
0
,
"insert_data_normal_fail"
:
0
,
"insert_data_overlap_fail"
:
0
,
"insert_list_fail"
:
0
,
"memuse"
:
6881280
,
"reassembly_memuse"
:
991232
},
"detect"
:{
"alert"
:
0
},
"app_layer"
:{
"flow"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"imap"
:
0
,
"msn"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"failed_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
,
"failed_udp"
:
0
},
"tx"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
}},
"flow_mgr"
:{
"closed_pruned"
:
0
,
"new_pruned"
:
0
,
"est_pruned"
:
0
,
"bypassed_pruned"
:
0
,
"flows_checked"
:
0
,
"flows_notimeout"
:
0
,
"flows_timeout"
:
0
,
"flows_timeout_inuse"
:
0
,
"flows_removed"
:
0
,
"rows_checked"
:
65536
,
"rows_skipped"
:
65536
,
"rows_empty"
:
0
,
"rows_busy"
:
0
,
"rows_maxlen"
:
0
},
"file_store"
:{
"open_files"
:
0
},
"dns"
:{
"memuse"
:
0
,
"memcap_state"
:
0
,
"memcap_global"
:
0
},
"http"
:{
"memuse"
:
35131
,
"memcap"
:
0
}}}
{
"timestamp"
:
"2018-02-06T11:02:21.000458+0100"
,
"event_type"
:
"stats"
,
"stats"
:{
"uptime"
:
93
,
"capture"
:{
"kernel_packets"
:
1
,
"kernel_drops"
:
0
},
"decoder"
:{
"pkts"
:
10
,
"bytes"
:
6852
,
"invalid"
:
0
,
"ipv4"
:
10
,
"ipv6"
:
0
,
"ethernet"
:
10
,
"raw"
:
0
,
"null"
:
0
,
"sll"
:
0
,
"tcp"
:
10
,
"udp"
:
0
,
"sctp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"ppp"
:
0
,
"pppoe"
:
0
,
"gre"
:
0
,
"vlan"
:
0
,
"vlan_qinq"
:
0
,
"ieee8021ah"
:
0
,
"teredo"
:
0
,
"ipv4_in_ipv6"
:
0
,
"ipv6_in_ipv6"
:
0
,
"mpls"
:
0
,
"avg_pkt_size"
:
685
,
"max_pkt_size"
:
1506
,
"erspan"
:
0
,
"ipraw"
:{
"invalid_ip_version"
:
0
},
"ltnull"
:{
"pkt_too_small"
:
0
,
"unsupported_type"
:
0
},
"dce"
:{
"pkt_too_small"
:
0
}},
"flow"
:{
"memcap"
:
0
,
"tcp"
:
1
,
"udp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"spare"
:
10000
,
"emerg_mode_entered"
:
0
,
"emerg_mode_over"
:
0
,
"tcp_reuse"
:
0
,
"memuse"
:
7074592
},
"defrag"
:{
"ipv4"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"ipv6"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"max_frag_hits"
:
0
},
"tcp"
:{
"sessions"
:
1
,
"ssn_memcap_drop"
:
0
,
"pseudo"
:
0
,
"pseudo_failed"
:
0
,
"invalid_checksum"
:
0
,
"no_flow"
:
0
,
"syn"
:
1
,
"synack"
:
1
,
"rst"
:
0
,
"segment_memcap_drop"
:
0
,
"stream_depth_reached"
:
0
,
"reassembly_gap"
:
0
,
"overlap"
:
0
,
"overlap_diff_data"
:
0
,
"insert_data_normal_fail"
:
0
,
"insert_data_overlap_fail"
:
0
,
"insert_list_fail"
:
0
,
"memuse"
:
6881280
,
"reassembly_memuse"
:
991232
},
"detect"
:{
"alert"
:
0
},
"app_layer"
:{
"flow"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"imap"
:
0
,
"msn"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"failed_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
,
"failed_udp"
:
0
},
"tx"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
}},
"flow_mgr"
:{
"closed_pruned"
:
0
,
"new_pruned"
:
0
,
"est_pruned"
:
0
,
"bypassed_pruned"
:
0
,
"flows_checked"
:
0
,
"flows_notimeout"
:
0
,
"flows_timeout"
:
0
,
"flows_timeout_inuse"
:
0
,
"flows_removed"
:
0
,
"rows_checked"
:
65536
,
"rows_skipped"
:
65536
,
"rows_empty"
:
0
,
"rows_busy"
:
0
,
"rows_maxlen"
:
0
},
"file_store"
:{
"open_files"
:
0
},
"dns"
:{
"memuse"
:
0
,
"memcap_state"
:
0
,
"memcap_global"
:
0
},
"http"
:{
"memuse"
:
35131
,
"memcap"
:
0
}}}
{
"timestamp"
:
"2018-02-06T11:02:28.000450+0100"
,
"event_type"
:
"stats"
,
"stats"
:{
"uptime"
:
100
,
"capture"
:{
"kernel_packets"
:
1
,
"kernel_drops"
:
0
},
"decoder"
:{
"pkts"
:
10
,
"bytes"
:
6852
,
"invalid"
:
0
,
"ipv4"
:
10
,
"ipv6"
:
0
,
"ethernet"
:
10
,
"raw"
:
0
,
"null"
:
0
,
"sll"
:
0
,
"tcp"
:
10
,
"udp"
:
0
,
"sctp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"ppp"
:
0
,
"pppoe"
:
0
,
"gre"
:
0
,
"vlan"
:
0
,
"vlan_qinq"
:
0
,
"ieee8021ah"
:
0
,
"teredo"
:
0
,
"ipv4_in_ipv6"
:
0
,
"ipv6_in_ipv6"
:
0
,
"mpls"
:
0
,
"avg_pkt_size"
:
685
,
"max_pkt_size"
:
1506
,
"erspan"
:
0
,
"ipraw"
:{
"invalid_ip_version"
:
0
},
"ltnull"
:{
"pkt_too_small"
:
0
,
"unsupported_type"
:
0
},
"dce"
:{
"pkt_too_small"
:
0
}},
"flow"
:{
"memcap"
:
0
,
"tcp"
:
1
,
"udp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"spare"
:
10000
,
"emerg_mode_entered"
:
0
,
"emerg_mode_over"
:
0
,
"tcp_reuse"
:
0
,
"memuse"
:
7074592
},
"defrag"
:{
"ipv4"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"ipv6"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"max_frag_hits"
:
0
},
"tcp"
:{
"sessions"
:
1
,
"ssn_memcap_drop"
:
0
,
"pseudo"
:
0
,
"pseudo_failed"
:
0
,
"invalid_checksum"
:
0
,
"no_flow"
:
0
,
"syn"
:
1
,
"synack"
:
1
,
"rst"
:
0
,
"segment_memcap_drop"
:
0
,
"stream_depth_reached"
:
0
,
"reassembly_gap"
:
0
,
"overlap"
:
0
,
"overlap_diff_data"
:
0
,
"insert_data_normal_fail"
:
0
,
"insert_data_overlap_fail"
:
0
,
"insert_list_fail"
:
0
,
"memuse"
:
6881280
,
"reassembly_memuse"
:
991232
},
"detect"
:{
"alert"
:
0
},
"app_layer"
:{
"flow"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"imap"
:
0
,
"msn"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"failed_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
,
"failed_udp"
:
0
},
"tx"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
}},
"flow_mgr"
:{
"closed_pruned"
:
0
,
"new_pruned"
:
0
,
"est_pruned"
:
0
,
"bypassed_pruned"
:
0
,
"flows_checked"
:
0
,
"flows_notimeout"
:
0
,
"flows_timeout"
:
0
,
"flows_timeout_inuse"
:
0
,
"flows_removed"
:
0
,
"rows_checked"
:
65536
,
"rows_skipped"
:
65536
,
"rows_empty"
:
0
,
"rows_busy"
:
0
,
"rows_maxlen"
:
0
},
"file_store"
:{
"open_files"
:
0
},
"dns"
:{
"memuse"
:
0
,
"memcap_state"
:
0
,
"memcap_global"
:
0
},
"http"
:{
"memuse"
:
35131
,
"memcap"
:
0
}}}
{
"timestamp"
:
"2018-02-06T11:02:35.000380+0100"
,
"event_type"
:
"stats"
,
"stats"
:{
"uptime"
:
107
,
"capture"
:{
"kernel_packets"
:
1
,
"kernel_drops"
:
0
},
"decoder"
:{
"pkts"
:
10
,
"bytes"
:
6852
,
"invalid"
:
0
,
"ipv4"
:
10
,
"ipv6"
:
0
,
"ethernet"
:
10
,
"raw"
:
0
,
"null"
:
0
,
"sll"
:
0
,
"tcp"
:
10
,
"udp"
:
0
,
"sctp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"ppp"
:
0
,
"pppoe"
:
0
,
"gre"
:
0
,
"vlan"
:
0
,
"vlan_qinq"
:
0
,
"ieee8021ah"
:
0
,
"teredo"
:
0
,
"ipv4_in_ipv6"
:
0
,
"ipv6_in_ipv6"
:
0
,
"mpls"
:
0
,
"avg_pkt_size"
:
685
,
"max_pkt_size"
:
1506
,
"erspan"
:
0
,
"ipraw"
:{
"invalid_ip_version"
:
0
},
"ltnull"
:{
"pkt_too_small"
:
0
,
"unsupported_type"
:
0
},
"dce"
:{
"pkt_too_small"
:
0
}},
"flow"
:{
"memcap"
:
0
,
"tcp"
:
1
,
"udp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"spare"
:
10000
,
"emerg_mode_entered"
:
0
,
"emerg_mode_over"
:
0
,
"tcp_reuse"
:
0
,
"memuse"
:
7074592
},
"defrag"
:{
"ipv4"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"ipv6"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"max_frag_hits"
:
0
},
"tcp"
:{
"sessions"
:
1
,
"ssn_memcap_drop"
:
0
,
"pseudo"
:
0
,
"pseudo_failed"
:
0
,
"invalid_checksum"
:
0
,
"no_flow"
:
0
,
"syn"
:
1
,
"synack"
:
1
,
"rst"
:
0
,
"segment_memcap_drop"
:
0
,
"stream_depth_reached"
:
0
,
"reassembly_gap"
:
0
,
"overlap"
:
0
,
"overlap_diff_data"
:
0
,
"insert_data_normal_fail"
:
0
,
"insert_data_overlap_fail"
:
0
,
"insert_list_fail"
:
0
,
"memuse"
:
6881280
,
"reassembly_memuse"
:
991232
},
"detect"
:{
"alert"
:
0
},
"app_layer"
:{
"flow"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"imap"
:
0
,
"msn"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"failed_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
,
"failed_udp"
:
0
},
"tx"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
}},
"flow_mgr"
:{
"closed_pruned"
:
0
,
"new_pruned"
:
0
,
"est_pruned"
:
0
,
"bypassed_pruned"
:
0
,
"flows_checked"
:
0
,
"flows_notimeout"
:
0
,
"flows_timeout"
:
0
,
"flows_timeout_inuse"
:
0
,
"flows_removed"
:
0
,
"rows_checked"
:
65536
,
"rows_skipped"
:
65536
,
"rows_empty"
:
0
,
"rows_busy"
:
0
,
"rows_maxlen"
:
0
},
"file_store"
:{
"open_files"
:
0
},
"dns"
:{
"memuse"
:
0
,
"memcap_state"
:
0
,
"memcap_global"
:
0
},
"http"
:{
"memuse"
:
35131
,
"memcap"
:
0
}}}
{
"timestamp"
:
"2018-02-06T11:02:42.000465+0100"
,
"event_type"
:
"stats"
,
"stats"
:{
"uptime"
:
114
,
"capture"
:{
"kernel_packets"
:
1
,
"kernel_drops"
:
0
},
"decoder"
:{
"pkts"
:
10
,
"bytes"
:
6852
,
"invalid"
:
0
,
"ipv4"
:
10
,
"ipv6"
:
0
,
"ethernet"
:
10
,
"raw"
:
0
,
"null"
:
0
,
"sll"
:
0
,
"tcp"
:
10
,
"udp"
:
0
,
"sctp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"ppp"
:
0
,
"pppoe"
:
0
,
"gre"
:
0
,
"vlan"
:
0
,
"vlan_qinq"
:
0
,
"ieee8021ah"
:
0
,
"teredo"
:
0
,
"ipv4_in_ipv6"
:
0
,
"ipv6_in_ipv6"
:
0
,
"mpls"
:
0
,
"avg_pkt_size"
:
685
,
"max_pkt_size"
:
1506
,
"erspan"
:
0
,
"ipraw"
:{
"invalid_ip_version"
:
0
},
"ltnull"
:{
"pkt_too_small"
:
0
,
"unsupported_type"
:
0
},
"dce"
:{
"pkt_too_small"
:
0
}},
"flow"
:{
"memcap"
:
0
,
"tcp"
:
1
,
"udp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"spare"
:
10000
,
"emerg_mode_entered"
:
0
,
"emerg_mode_over"
:
0
,
"tcp_reuse"
:
0
,
"memuse"
:
7074592
},
"defrag"
:{
"ipv4"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"ipv6"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"max_frag_hits"
:
0
},
"tcp"
:{
"sessions"
:
1
,
"ssn_memcap_drop"
:
0
,
"pseudo"
:
0
,
"pseudo_failed"
:
0
,
"invalid_checksum"
:
0
,
"no_flow"
:
0
,
"syn"
:
1
,
"synack"
:
1
,
"rst"
:
0
,
"segment_memcap_drop"
:
0
,
"stream_depth_reached"
:
0
,
"reassembly_gap"
:
0
,
"overlap"
:
0
,
"overlap_diff_data"
:
0
,
"insert_data_normal_fail"
:
0
,
"insert_data_overlap_fail"
:
0
,
"insert_list_fail"
:
0
,
"memuse"
:
6881280
,
"reassembly_memuse"
:
991232
},
"detect"
:{
"alert"
:
0
},
"app_layer"
:{
"flow"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"imap"
:
0
,
"msn"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"failed_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
,
"failed_udp"
:
0
},
"tx"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
}},
"flow_mgr"
:{
"closed_pruned"
:
0
,
"new_pruned"
:
0
,
"est_pruned"
:
0
,
"bypassed_pruned"
:
0
,
"flows_checked"
:
0
,
"flows_notimeout"
:
0
,
"flows_timeout"
:
0
,
"flows_timeout_inuse"
:
0
,
"flows_removed"
:
0
,
"rows_checked"
:
65536
,
"rows_skipped"
:
65536
,
"rows_empty"
:
0
,
"rows_busy"
:
0
,
"rows_maxlen"
:
0
},
"file_store"
:{
"open_files"
:
0
},
"dns"
:{
"memuse"
:
0
,
"memcap_state"
:
0
,
"memcap_global"
:
0
},
"http"
:{
"memuse"
:
35131
,
"memcap"
:
0
}}}
{
"timestamp"
:
"2018-02-06T11:02:49.000457+0100"
,
"event_type"
:
"stats"
,
"stats"
:{
"uptime"
:
121
,
"capture"
:{
"kernel_packets"
:
1
,
"kernel_drops"
:
0
},
"decoder"
:{
"pkts"
:
10
,
"bytes"
:
6852
,
"invalid"
:
0
,
"ipv4"
:
10
,
"ipv6"
:
0
,
"ethernet"
:
10
,
"raw"
:
0
,
"null"
:
0
,
"sll"
:
0
,
"tcp"
:
10
,
"udp"
:
0
,
"sctp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"ppp"
:
0
,
"pppoe"
:
0
,
"gre"
:
0
,
"vlan"
:
0
,
"vlan_qinq"
:
0
,
"ieee8021ah"
:
0
,
"teredo"
:
0
,
"ipv4_in_ipv6"
:
0
,
"ipv6_in_ipv6"
:
0
,
"mpls"
:
0
,
"avg_pkt_size"
:
685
,
"max_pkt_size"
:
1506
,
"erspan"
:
0
,
"ipraw"
:{
"invalid_ip_version"
:
0
},
"ltnull"
:{
"pkt_too_small"
:
0
,
"unsupported_type"
:
0
},
"dce"
:{
"pkt_too_small"
:
0
}},
"flow"
:{
"memcap"
:
0
,
"tcp"
:
1
,
"udp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"spare"
:
10000
,
"emerg_mode_entered"
:
0
,
"emerg_mode_over"
:
0
,
"tcp_reuse"
:
0
,
"memuse"
:
7074592
},
"defrag"
:{
"ipv4"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"ipv6"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"max_frag_hits"
:
0
},
"tcp"
:{
"sessions"
:
1
,
"ssn_memcap_drop"
:
0
,
"pseudo"
:
0
,
"pseudo_failed"
:
0
,
"invalid_checksum"
:
0
,
"no_flow"
:
0
,
"syn"
:
1
,
"synack"
:
1
,
"rst"
:
0
,
"segment_memcap_drop"
:
0
,
"stream_depth_reached"
:
0
,
"reassembly_gap"
:
0
,
"overlap"
:
0
,
"overlap_diff_data"
:
0
,
"insert_data_normal_fail"
:
0
,
"insert_data_overlap_fail"
:
0
,
"insert_list_fail"
:
0
,
"memuse"
:
6881280
,
"reassembly_memuse"
:
991232
},
"detect"
:{
"alert"
:
0
},
"app_layer"
:{
"flow"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"imap"
:
0
,
"msn"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"failed_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
,
"failed_udp"
:
0
},
"tx"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
}},
"flow_mgr"
:{
"closed_pruned"
:
0
,
"new_pruned"
:
0
,
"est_pruned"
:
0
,
"bypassed_pruned"
:
0
,
"flows_checked"
:
0
,
"flows_notimeout"
:
0
,
"flows_timeout"
:
0
,
"flows_timeout_inuse"
:
0
,
"flows_removed"
:
0
,
"rows_checked"
:
65536
,
"rows_skipped"
:
65536
,
"rows_empty"
:
0
,
"rows_busy"
:
0
,
"rows_maxlen"
:
0
},
"file_store"
:{
"open_files"
:
0
},
"dns"
:{
"memuse"
:
0
,
"memcap_state"
:
0
,
"memcap_global"
:
0
},
"http"
:{
"memuse"
:
35131
,
"memcap"
:
0
}}}
{
"timestamp"
:
"2018-02-06T11:02:56.000459+0100"
,
"event_type"
:
"stats"
,
"stats"
:{
"uptime"
:
128
,
"capture"
:{
"kernel_packets"
:
1
,
"kernel_drops"
:
0
},
"decoder"
:{
"pkts"
:
10
,
"bytes"
:
6852
,
"invalid"
:
0
,
"ipv4"
:
10
,
"ipv6"
:
0
,
"ethernet"
:
10
,
"raw"
:
0
,
"null"
:
0
,
"sll"
:
0
,
"tcp"
:
10
,
"udp"
:
0
,
"sctp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"ppp"
:
0
,
"pppoe"
:
0
,
"gre"
:
0
,
"vlan"
:
0
,
"vlan_qinq"
:
0
,
"ieee8021ah"
:
0
,
"teredo"
:
0
,
"ipv4_in_ipv6"
:
0
,
"ipv6_in_ipv6"
:
0
,
"mpls"
:
0
,
"avg_pkt_size"
:
685
,
"max_pkt_size"
:
1506
,
"erspan"
:
0
,
"ipraw"
:{
"invalid_ip_version"
:
0
},
"ltnull"
:{
"pkt_too_small"
:
0
,
"unsupported_type"
:
0
},
"dce"
:{
"pkt_too_small"
:
0
}},
"flow"
:{
"memcap"
:
0
,
"tcp"
:
1
,
"udp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"spare"
:
10000
,
"emerg_mode_entered"
:
0
,
"emerg_mode_over"
:
0
,
"tcp_reuse"
:
0
,
"memuse"
:
7074592
},
"defrag"
:{
"ipv4"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"ipv6"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"max_frag_hits"
:
0
},
"tcp"
:{
"sessions"
:
1
,
"ssn_memcap_drop"
:
0
,
"pseudo"
:
0
,
"pseudo_failed"
:
0
,
"invalid_checksum"
:
0
,
"no_flow"
:
0
,
"syn"
:
1
,
"synack"
:
1
,
"rst"
:
0
,
"segment_memcap_drop"
:
0
,
"stream_depth_reached"
:
0
,
"reassembly_gap"
:
0
,
"overlap"
:
0
,
"overlap_diff_data"
:
0
,
"insert_data_normal_fail"
:
0
,
"insert_data_overlap_fail"
:
0
,
"insert_list_fail"
:
0
,
"memuse"
:
6881280
,
"reassembly_memuse"
:
991232
},
"detect"
:{
"alert"
:
0
},
"app_layer"
:{
"flow"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"imap"
:
0
,
"msn"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"failed_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
,
"failed_udp"
:
0
},
"tx"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
}},
"flow_mgr"
:{
"closed_pruned"
:
0
,
"new_pruned"
:
0
,
"est_pruned"
:
0
,
"bypassed_pruned"
:
0
,
"flows_checked"
:
0
,
"flows_notimeout"
:
0
,
"flows_timeout"
:
0
,
"flows_timeout_inuse"
:
0
,
"flows_removed"
:
0
,
"rows_checked"
:
65536
,
"rows_skipped"
:
65536
,
"rows_empty"
:
0
,
"rows_busy"
:
0
,
"rows_maxlen"
:
0
},
"file_store"
:{
"open_files"
:
0
},
"dns"
:{
"memuse"
:
0
,
"memcap_state"
:
0
,
"memcap_global"
:
0
},
"http"
:{
"memuse"
:
35131
,
"memcap"
:
0
}}}
{
"timestamp"
:
"2018-02-06T11:03:03.000448+0100"
,
"event_type"
:
"stats"
,
"stats"
:{
"uptime"
:
135
,
"capture"
:{
"kernel_packets"
:
1
,
"kernel_drops"
:
0
},
"decoder"
:{
"pkts"
:
10
,
"bytes"
:
6852
,
"invalid"
:
0
,
"ipv4"
:
10
,
"ipv6"
:
0
,
"ethernet"
:
10
,
"raw"
:
0
,
"null"
:
0
,
"sll"
:
0
,
"tcp"
:
10
,
"udp"
:
0
,
"sctp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"ppp"
:
0
,
"pppoe"
:
0
,
"gre"
:
0
,
"vlan"
:
0
,
"vlan_qinq"
:
0
,
"ieee8021ah"
:
0
,
"teredo"
:
0
,
"ipv4_in_ipv6"
:
0
,
"ipv6_in_ipv6"
:
0
,
"mpls"
:
0
,
"avg_pkt_size"
:
685
,
"max_pkt_size"
:
1506
,
"erspan"
:
0
,
"ipraw"
:{
"invalid_ip_version"
:
0
},
"ltnull"
:{
"pkt_too_small"
:
0
,
"unsupported_type"
:
0
},
"dce"
:{
"pkt_too_small"
:
0
}},
"flow"
:{
"memcap"
:
0
,
"tcp"
:
1
,
"udp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"spare"
:
10000
,
"emerg_mode_entered"
:
0
,
"emerg_mode_over"
:
0
,
"tcp_reuse"
:
0
,
"memuse"
:
7074592
},
"defrag"
:{
"ipv4"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"ipv6"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"max_frag_hits"
:
0
},
"tcp"
:{
"sessions"
:
1
,
"ssn_memcap_drop"
:
0
,
"pseudo"
:
0
,
"pseudo_failed"
:
0
,
"invalid_checksum"
:
0
,
"no_flow"
:
0
,
"syn"
:
1
,
"synack"
:
1
,
"rst"
:
0
,
"segment_memcap_drop"
:
0
,
"stream_depth_reached"
:
0
,
"reassembly_gap"
:
0
,
"overlap"
:
0
,
"overlap_diff_data"
:
0
,
"insert_data_normal_fail"
:
0
,
"insert_data_overlap_fail"
:
0
,
"insert_list_fail"
:
0
,
"memuse"
:
6881280
,
"reassembly_memuse"
:
991232
},
"detect"
:{
"alert"
:
0
},
"app_layer"
:{
"flow"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"imap"
:
0
,
"msn"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"failed_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
,
"failed_udp"
:
0
},
"tx"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
}},
"flow_mgr"
:{
"closed_pruned"
:
0
,
"new_pruned"
:
0
,
"est_pruned"
:
0
,
"bypassed_pruned"
:
0
,
"flows_checked"
:
0
,
"flows_notimeout"
:
0
,
"flows_timeout"
:
0
,
"flows_timeout_inuse"
:
0
,
"flows_removed"
:
0
,
"rows_checked"
:
65536
,
"rows_skipped"
:
65536
,
"rows_empty"
:
0
,
"rows_busy"
:
0
,
"rows_maxlen"
:
0
},
"file_store"
:{
"open_files"
:
0
},
"dns"
:{
"memuse"
:
0
,
"memcap_state"
:
0
,
"memcap_global"
:
0
},
"http"
:{
"memuse"
:
35131
,
"memcap"
:
0
}}}
{
"timestamp"
:
"2018-02-06T11:03:10.000394+0100"
,
"event_type"
:
"stats"
,
"stats"
:{
"uptime"
:
142
,
"capture"
:{
"kernel_packets"
:
1
,
"kernel_drops"
:
0
},
"decoder"
:{
"pkts"
:
10
,
"bytes"
:
6852
,
"invalid"
:
0
,
"ipv4"
:
10
,
"ipv6"
:
0
,
"ethernet"
:
10
,
"raw"
:
0
,
"null"
:
0
,
"sll"
:
0
,
"tcp"
:
10
,
"udp"
:
0
,
"sctp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"ppp"
:
0
,
"pppoe"
:
0
,
"gre"
:
0
,
"vlan"
:
0
,
"vlan_qinq"
:
0
,
"ieee8021ah"
:
0
,
"teredo"
:
0
,
"ipv4_in_ipv6"
:
0
,
"ipv6_in_ipv6"
:
0
,
"mpls"
:
0
,
"avg_pkt_size"
:
685
,
"max_pkt_size"
:
1506
,
"erspan"
:
0
,
"ipraw"
:{
"invalid_ip_version"
:
0
},
"ltnull"
:{
"pkt_too_small"
:
0
,
"unsupported_type"
:
0
},
"dce"
:{
"pkt_too_small"
:
0
}},
"flow"
:{
"memcap"
:
0
,
"tcp"
:
1
,
"udp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"spare"
:
10000
,
"emerg_mode_entered"
:
0
,
"emerg_mode_over"
:
0
,
"tcp_reuse"
:
0
,
"memuse"
:
7074592
},
"defrag"
:{
"ipv4"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"ipv6"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"max_frag_hits"
:
0
},
"tcp"
:{
"sessions"
:
1
,
"ssn_memcap_drop"
:
0
,
"pseudo"
:
0
,
"pseudo_failed"
:
0
,
"invalid_checksum"
:
0
,
"no_flow"
:
0
,
"syn"
:
1
,
"synack"
:
1
,
"rst"
:
0
,
"segment_memcap_drop"
:
0
,
"stream_depth_reached"
:
0
,
"reassembly_gap"
:
0
,
"overlap"
:
0
,
"overlap_diff_data"
:
0
,
"insert_data_normal_fail"
:
0
,
"insert_data_overlap_fail"
:
0
,
"insert_list_fail"
:
0
,
"memuse"
:
6881280
,
"reassembly_memuse"
:
991232
},
"detect"
:{
"alert"
:
0
},
"app_layer"
:{
"flow"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"imap"
:
0
,
"msn"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"failed_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
,
"failed_udp"
:
0
},
"tx"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
}},
"flow_mgr"
:{
"closed_pruned"
:
0
,
"new_pruned"
:
0
,
"est_pruned"
:
0
,
"bypassed_pruned"
:
0
,
"flows_checked"
:
0
,
"flows_notimeout"
:
0
,
"flows_timeout"
:
0
,
"flows_timeout_inuse"
:
0
,
"flows_removed"
:
0
,
"rows_checked"
:
65536
,
"rows_skipped"
:
65536
,
"rows_empty"
:
0
,
"rows_busy"
:
0
,
"rows_maxlen"
:
0
},
"file_store"
:{
"open_files"
:
0
},
"dns"
:{
"memuse"
:
0
,
"memcap_state"
:
0
,
"memcap_global"
:
0
},
"http"
:{
"memuse"
:
35131
,
"memcap"
:
0
}}}
{
"timestamp"
:
"2018-02-06T11:03:17.000446+0100"
,
"event_type"
:
"stats"
,
"stats"
:{
"uptime"
:
149
,
"capture"
:{
"kernel_packets"
:
1
,
"kernel_drops"
:
0
},
"decoder"
:{
"pkts"
:
10
,
"bytes"
:
6852
,
"invalid"
:
0
,
"ipv4"
:
10
,
"ipv6"
:
0
,
"ethernet"
:
10
,
"raw"
:
0
,
"null"
:
0
,
"sll"
:
0
,
"tcp"
:
10
,
"udp"
:
0
,
"sctp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"ppp"
:
0
,
"pppoe"
:
0
,
"gre"
:
0
,
"vlan"
:
0
,
"vlan_qinq"
:
0
,
"ieee8021ah"
:
0
,
"teredo"
:
0
,
"ipv4_in_ipv6"
:
0
,
"ipv6_in_ipv6"
:
0
,
"mpls"
:
0
,
"avg_pkt_size"
:
685
,
"max_pkt_size"
:
1506
,
"erspan"
:
0
,
"ipraw"
:{
"invalid_ip_version"
:
0
},
"ltnull"
:{
"pkt_too_small"
:
0
,
"unsupported_type"
:
0
},
"dce"
:{
"pkt_too_small"
:
0
}},
"flow"
:{
"memcap"
:
0
,
"tcp"
:
1
,
"udp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"spare"
:
10000
,
"emerg_mode_entered"
:
0
,
"emerg_mode_over"
:
0
,
"tcp_reuse"
:
0
,
"memuse"
:
7074592
},
"defrag"
:{
"ipv4"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"ipv6"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"max_frag_hits"
:
0
},
"tcp"
:{
"sessions"
:
1
,
"ssn_memcap_drop"
:
0
,
"pseudo"
:
0
,
"pseudo_failed"
:
0
,
"invalid_checksum"
:
0
,
"no_flow"
:
0
,
"syn"
:
1
,
"synack"
:
1
,
"rst"
:
0
,
"segment_memcap_drop"
:
0
,
"stream_depth_reached"
:
0
,
"reassembly_gap"
:
0
,
"overlap"
:
0
,
"overlap_diff_data"
:
0
,
"insert_data_normal_fail"
:
0
,
"insert_data_overlap_fail"
:
0
,
"insert_list_fail"
:
0
,
"memuse"
:
6881280
,
"reassembly_memuse"
:
991232
},
"detect"
:{
"alert"
:
0
},
"app_layer"
:{
"flow"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"imap"
:
0
,
"msn"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"failed_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
,
"failed_udp"
:
0
},
"tx"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
}},
"flow_mgr"
:{
"closed_pruned"
:
0
,
"new_pruned"
:
0
,
"est_pruned"
:
0
,
"bypassed_pruned"
:
0
,
"flows_checked"
:
0
,
"flows_notimeout"
:
0
,
"flows_timeout"
:
0
,
"flows_timeout_inuse"
:
0
,
"flows_removed"
:
0
,
"rows_checked"
:
65536
,
"rows_skipped"
:
65536
,
"rows_empty"
:
0
,
"rows_busy"
:
0
,
"rows_maxlen"
:
0
},
"file_store"
:{
"open_files"
:
0
},
"dns"
:{
"memuse"
:
0
,
"memcap_state"
:
0
,
"memcap_global"
:
0
},
"http"
:{
"memuse"
:
35131
,
"memcap"
:
0
}}}
{
"timestamp"
:
"2018-02-06T11:03:24.000463+0100"
,
"event_type"
:
"stats"
,
"stats"
:{
"uptime"
:
156
,
"capture"
:{
"kernel_packets"
:
1
,
"kernel_drops"
:
0
},
"decoder"
:{
"pkts"
:
10
,
"bytes"
:
6852
,
"invalid"
:
0
,
"ipv4"
:
10
,
"ipv6"
:
0
,
"ethernet"
:
10
,
"raw"
:
0
,
"null"
:
0
,
"sll"
:
0
,
"tcp"
:
10
,
"udp"
:
0
,
"sctp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"ppp"
:
0
,
"pppoe"
:
0
,
"gre"
:
0
,
"vlan"
:
0
,
"vlan_qinq"
:
0
,
"ieee8021ah"
:
0
,
"teredo"
:
0
,
"ipv4_in_ipv6"
:
0
,
"ipv6_in_ipv6"
:
0
,
"mpls"
:
0
,
"avg_pkt_size"
:
685
,
"max_pkt_size"
:
1506
,
"erspan"
:
0
,
"ipraw"
:{
"invalid_ip_version"
:
0
},
"ltnull"
:{
"pkt_too_small"
:
0
,
"unsupported_type"
:
0
},
"dce"
:{
"pkt_too_small"
:
0
}},
"flow"
:{
"memcap"
:
0
,
"tcp"
:
1
,
"udp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"spare"
:
10000
,
"emerg_mode_entered"
:
0
,
"emerg_mode_over"
:
0
,
"tcp_reuse"
:
0
,
"memuse"
:
7074592
},
"defrag"
:{
"ipv4"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"ipv6"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"max_frag_hits"
:
0
},
"tcp"
:{
"sessions"
:
1
,
"ssn_memcap_drop"
:
0
,
"pseudo"
:
0
,
"pseudo_failed"
:
0
,
"invalid_checksum"
:
0
,
"no_flow"
:
0
,
"syn"
:
1
,
"synack"
:
1
,
"rst"
:
0
,
"segment_memcap_drop"
:
0
,
"stream_depth_reached"
:
0
,
"reassembly_gap"
:
0
,
"overlap"
:
0
,
"overlap_diff_data"
:
0
,
"insert_data_normal_fail"
:
0
,
"insert_data_overlap_fail"
:
0
,
"insert_list_fail"
:
0
,
"memuse"
:
6881280
,
"reassembly_memuse"
:
991232
},
"detect"
:{
"alert"
:
0
},
"app_layer"
:{
"flow"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"imap"
:
0
,
"msn"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"failed_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
,
"failed_udp"
:
0
},
"tx"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
}},
"flow_mgr"
:{
"closed_pruned"
:
0
,
"new_pruned"
:
0
,
"est_pruned"
:
0
,
"bypassed_pruned"
:
0
,
"flows_checked"
:
0
,
"flows_notimeout"
:
0
,
"flows_timeout"
:
0
,
"flows_timeout_inuse"
:
0
,
"flows_removed"
:
0
,
"rows_checked"
:
65536
,
"rows_skipped"
:
65536
,
"rows_empty"
:
0
,
"rows_busy"
:
0
,
"rows_maxlen"
:
0
},
"file_store"
:{
"open_files"
:
0
},
"dns"
:{
"memuse"
:
0
,
"memcap_state"
:
0
,
"memcap_global"
:
0
},
"http"
:{
"memuse"
:
35131
,
"memcap"
:
0
}}}
{
"timestamp"
:
"2018-02-06T11:03:31.000446+0100"
,
"event_type"
:
"stats"
,
"stats"
:{
"uptime"
:
163
,
"capture"
:{
"kernel_packets"
:
1
,
"kernel_drops"
:
0
},
"decoder"
:{
"pkts"
:
10
,
"bytes"
:
6852
,
"invalid"
:
0
,
"ipv4"
:
10
,
"ipv6"
:
0
,
"ethernet"
:
10
,
"raw"
:
0
,
"null"
:
0
,
"sll"
:
0
,
"tcp"
:
10
,
"udp"
:
0
,
"sctp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"ppp"
:
0
,
"pppoe"
:
0
,
"gre"
:
0
,
"vlan"
:
0
,
"vlan_qinq"
:
0
,
"ieee8021ah"
:
0
,
"teredo"
:
0
,
"ipv4_in_ipv6"
:
0
,
"ipv6_in_ipv6"
:
0
,
"mpls"
:
0
,
"avg_pkt_size"
:
685
,
"max_pkt_size"
:
1506
,
"erspan"
:
0
,
"ipraw"
:{
"invalid_ip_version"
:
0
},
"ltnull"
:{
"pkt_too_small"
:
0
,
"unsupported_type"
:
0
},
"dce"
:{
"pkt_too_small"
:
0
}},
"flow"
:{
"memcap"
:
0
,
"tcp"
:
1
,
"udp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"spare"
:
10000
,
"emerg_mode_entered"
:
0
,
"emerg_mode_over"
:
0
,
"tcp_reuse"
:
0
,
"memuse"
:
7074592
},
"defrag"
:{
"ipv4"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"ipv6"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"max_frag_hits"
:
0
},
"tcp"
:{
"sessions"
:
1
,
"ssn_memcap_drop"
:
0
,
"pseudo"
:
0
,
"pseudo_failed"
:
0
,
"invalid_checksum"
:
0
,
"no_flow"
:
0
,
"syn"
:
1
,
"synack"
:
1
,
"rst"
:
0
,
"segment_memcap_drop"
:
0
,
"stream_depth_reached"
:
0
,
"reassembly_gap"
:
0
,
"overlap"
:
0
,
"overlap_diff_data"
:
0
,
"insert_data_normal_fail"
:
0
,
"insert_data_overlap_fail"
:
0
,
"insert_list_fail"
:
0
,
"memuse"
:
6881280
,
"reassembly_memuse"
:
991232
},
"detect"
:{
"alert"
:
0
},
"app_layer"
:{
"flow"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"imap"
:
0
,
"msn"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"failed_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
,
"failed_udp"
:
0
},
"tx"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
}},
"flow_mgr"
:{
"closed_pruned"
:
0
,
"new_pruned"
:
0
,
"est_pruned"
:
0
,
"bypassed_pruned"
:
0
,
"flows_checked"
:
0
,
"flows_notimeout"
:
0
,
"flows_timeout"
:
0
,
"flows_timeout_inuse"
:
0
,
"flows_removed"
:
0
,
"rows_checked"
:
65536
,
"rows_skipped"
:
65536
,
"rows_empty"
:
0
,
"rows_busy"
:
0
,
"rows_maxlen"
:
0
},
"file_store"
:{
"open_files"
:
0
},
"dns"
:{
"memuse"
:
0
,
"memcap_state"
:
0
,
"memcap_global"
:
0
},
"http"
:{
"memuse"
:
35131
,
"memcap"
:
0
}}}
{
"timestamp"
:
"2018-02-06T11:03:38.000460+0100"
,
"event_type"
:
"stats"
,
"stats"
:{
"uptime"
:
170
,
"capture"
:{
"kernel_packets"
:
1
,
"kernel_drops"
:
0
},
"decoder"
:{
"pkts"
:
10
,
"bytes"
:
6852
,
"invalid"
:
0
,
"ipv4"
:
10
,
"ipv6"
:
0
,
"ethernet"
:
10
,
"raw"
:
0
,
"null"
:
0
,
"sll"
:
0
,
"tcp"
:
10
,
"udp"
:
0
,
"sctp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"ppp"
:
0
,
"pppoe"
:
0
,
"gre"
:
0
,
"vlan"
:
0
,
"vlan_qinq"
:
0
,
"ieee8021ah"
:
0
,
"teredo"
:
0
,
"ipv4_in_ipv6"
:
0
,
"ipv6_in_ipv6"
:
0
,
"mpls"
:
0
,
"avg_pkt_size"
:
685
,
"max_pkt_size"
:
1506
,
"erspan"
:
0
,
"ipraw"
:{
"invalid_ip_version"
:
0
},
"ltnull"
:{
"pkt_too_small"
:
0
,
"unsupported_type"
:
0
},
"dce"
:{
"pkt_too_small"
:
0
}},
"flow"
:{
"memcap"
:
0
,
"tcp"
:
1
,
"udp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"spare"
:
10000
,
"emerg_mode_entered"
:
0
,
"emerg_mode_over"
:
0
,
"tcp_reuse"
:
0
,
"memuse"
:
7074592
},
"defrag"
:{
"ipv4"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"ipv6"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"max_frag_hits"
:
0
},
"tcp"
:{
"sessions"
:
1
,
"ssn_memcap_drop"
:
0
,
"pseudo"
:
0
,
"pseudo_failed"
:
0
,
"invalid_checksum"
:
0
,
"no_flow"
:
0
,
"syn"
:
1
,
"synack"
:
1
,
"rst"
:
0
,
"segment_memcap_drop"
:
0
,
"stream_depth_reached"
:
0
,
"reassembly_gap"
:
0
,
"overlap"
:
0
,
"overlap_diff_data"
:
0
,
"insert_data_normal_fail"
:
0
,
"insert_data_overlap_fail"
:
0
,
"insert_list_fail"
:
0
,
"memuse"
:
6881280
,
"reassembly_memuse"
:
991232
},
"detect"
:{
"alert"
:
0
},
"app_layer"
:{
"flow"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"imap"
:
0
,
"msn"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"failed_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
,
"failed_udp"
:
0
},
"tx"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
}},
"flow_mgr"
:{
"closed_pruned"
:
0
,
"new_pruned"
:
0
,
"est_pruned"
:
0
,
"bypassed_pruned"
:
0
,
"flows_checked"
:
0
,
"flows_notimeout"
:
0
,
"flows_timeout"
:
0
,
"flows_timeout_inuse"
:
0
,
"flows_removed"
:
0
,
"rows_checked"
:
65536
,
"rows_skipped"
:
65536
,
"rows_empty"
:
0
,
"rows_busy"
:
0
,
"rows_maxlen"
:
0
},
"file_store"
:{
"open_files"
:
0
},
"dns"
:{
"memuse"
:
0
,
"memcap_state"
:
0
,
"memcap_global"
:
0
},
"http"
:{
"memuse"
:
35131
,
"memcap"
:
0
}}}
{
"timestamp"
:
"2018-02-06T11:03:45.000262+0100"
,
"event_type"
:
"stats"
,
"stats"
:{
"uptime"
:
177
,
"capture"
:{
"kernel_packets"
:
1
,
"kernel_drops"
:
0
},
"decoder"
:{
"pkts"
:
10
,
"bytes"
:
6852
,
"invalid"
:
0
,
"ipv4"
:
10
,
"ipv6"
:
0
,
"ethernet"
:
10
,
"raw"
:
0
,
"null"
:
0
,
"sll"
:
0
,
"tcp"
:
10
,
"udp"
:
0
,
"sctp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"ppp"
:
0
,
"pppoe"
:
0
,
"gre"
:
0
,
"vlan"
:
0
,
"vlan_qinq"
:
0
,
"ieee8021ah"
:
0
,
"teredo"
:
0
,
"ipv4_in_ipv6"
:
0
,
"ipv6_in_ipv6"
:
0
,
"mpls"
:
0
,
"avg_pkt_size"
:
685
,
"max_pkt_size"
:
1506
,
"erspan"
:
0
,
"ipraw"
:{
"invalid_ip_version"
:
0
},
"ltnull"
:{
"pkt_too_small"
:
0
,
"unsupported_type"
:
0
},
"dce"
:{
"pkt_too_small"
:
0
}},
"flow"
:{
"memcap"
:
0
,
"tcp"
:
1
,
"udp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"spare"
:
10000
,
"emerg_mode_entered"
:
0
,
"emerg_mode_over"
:
0
,
"tcp_reuse"
:
0
,
"memuse"
:
7074592
},
"defrag"
:{
"ipv4"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"ipv6"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"max_frag_hits"
:
0
},
"tcp"
:{
"sessions"
:
1
,
"ssn_memcap_drop"
:
0
,
"pseudo"
:
0
,
"pseudo_failed"
:
0
,
"invalid_checksum"
:
0
,
"no_flow"
:
0
,
"syn"
:
1
,
"synack"
:
1
,
"rst"
:
0
,
"segment_memcap_drop"
:
0
,
"stream_depth_reached"
:
0
,
"reassembly_gap"
:
0
,
"overlap"
:
0
,
"overlap_diff_data"
:
0
,
"insert_data_normal_fail"
:
0
,
"insert_data_overlap_fail"
:
0
,
"insert_list_fail"
:
0
,
"memuse"
:
6881280
,
"reassembly_memuse"
:
991232
},
"detect"
:{
"alert"
:
0
},
"app_layer"
:{
"flow"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"imap"
:
0
,
"msn"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"failed_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
,
"failed_udp"
:
0
},
"tx"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
}},
"flow_mgr"
:{
"closed_pruned"
:
0
,
"new_pruned"
:
0
,
"est_pruned"
:
0
,
"bypassed_pruned"
:
0
,
"flows_checked"
:
0
,
"flows_notimeout"
:
0
,
"flows_timeout"
:
0
,
"flows_timeout_inuse"
:
0
,
"flows_removed"
:
0
,
"rows_checked"
:
65536
,
"rows_skipped"
:
65536
,
"rows_empty"
:
0
,
"rows_busy"
:
0
,
"rows_maxlen"
:
0
},
"file_store"
:{
"open_files"
:
0
},
"dns"
:{
"memuse"
:
0
,
"memcap_state"
:
0
,
"memcap_global"
:
0
},
"http"
:{
"memuse"
:
35131
,
"memcap"
:
0
}}}
{
"timestamp"
:
"2018-02-06T11:03:52.000454+0100"
,
"event_type"
:
"stats"
,
"stats"
:{
"uptime"
:
184
,
"capture"
:{
"kernel_packets"
:
1
,
"kernel_drops"
:
0
},
"decoder"
:{
"pkts"
:
10
,
"bytes"
:
6852
,
"invalid"
:
0
,
"ipv4"
:
10
,
"ipv6"
:
0
,
"ethernet"
:
10
,
"raw"
:
0
,
"null"
:
0
,
"sll"
:
0
,
"tcp"
:
10
,
"udp"
:
0
,
"sctp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"ppp"
:
0
,
"pppoe"
:
0
,
"gre"
:
0
,
"vlan"
:
0
,
"vlan_qinq"
:
0
,
"ieee8021ah"
:
0
,
"teredo"
:
0
,
"ipv4_in_ipv6"
:
0
,
"ipv6_in_ipv6"
:
0
,
"mpls"
:
0
,
"avg_pkt_size"
:
685
,
"max_pkt_size"
:
1506
,
"erspan"
:
0
,
"ipraw"
:{
"invalid_ip_version"
:
0
},
"ltnull"
:{
"pkt_too_small"
:
0
,
"unsupported_type"
:
0
},
"dce"
:{
"pkt_too_small"
:
0
}},
"flow"
:{
"memcap"
:
0
,
"tcp"
:
1
,
"udp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"spare"
:
10000
,
"emerg_mode_entered"
:
0
,
"emerg_mode_over"
:
0
,
"tcp_reuse"
:
0
,
"memuse"
:
7074592
},
"defrag"
:{
"ipv4"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"ipv6"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"max_frag_hits"
:
0
},
"tcp"
:{
"sessions"
:
1
,
"ssn_memcap_drop"
:
0
,
"pseudo"
:
0
,
"pseudo_failed"
:
0
,
"invalid_checksum"
:
0
,
"no_flow"
:
0
,
"syn"
:
1
,
"synack"
:
1
,
"rst"
:
0
,
"segment_memcap_drop"
:
0
,
"stream_depth_reached"
:
0
,
"reassembly_gap"
:
0
,
"overlap"
:
0
,
"overlap_diff_data"
:
0
,
"insert_data_normal_fail"
:
0
,
"insert_data_overlap_fail"
:
0
,
"insert_list_fail"
:
0
,
"memuse"
:
6881280
,
"reassembly_memuse"
:
991232
},
"detect"
:{
"alert"
:
0
},
"app_layer"
:{
"flow"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"imap"
:
0
,
"msn"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"failed_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
,
"failed_udp"
:
0
},
"tx"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
}},
"flow_mgr"
:{
"closed_pruned"
:
0
,
"new_pruned"
:
0
,
"est_pruned"
:
0
,
"bypassed_pruned"
:
0
,
"flows_checked"
:
0
,
"flows_notimeout"
:
0
,
"flows_timeout"
:
0
,
"flows_timeout_inuse"
:
0
,
"flows_removed"
:
0
,
"rows_checked"
:
65536
,
"rows_skipped"
:
65536
,
"rows_empty"
:
0
,
"rows_busy"
:
0
,
"rows_maxlen"
:
0
},
"file_store"
:{
"open_files"
:
0
},
"dns"
:{
"memuse"
:
0
,
"memcap_state"
:
0
,
"memcap_global"
:
0
},
"http"
:{
"memuse"
:
35131
,
"memcap"
:
0
}}}
{
"timestamp"
:
"2018-02-06T11:03:59.000446+0100"
,
"event_type"
:
"stats"
,
"stats"
:{
"uptime"
:
191
,
"capture"
:{
"kernel_packets"
:
1
,
"kernel_drops"
:
0
},
"decoder"
:{
"pkts"
:
10
,
"bytes"
:
6852
,
"invalid"
:
0
,
"ipv4"
:
10
,
"ipv6"
:
0
,
"ethernet"
:
10
,
"raw"
:
0
,
"null"
:
0
,
"sll"
:
0
,
"tcp"
:
10
,
"udp"
:
0
,
"sctp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"ppp"
:
0
,
"pppoe"
:
0
,
"gre"
:
0
,
"vlan"
:
0
,
"vlan_qinq"
:
0
,
"ieee8021ah"
:
0
,
"teredo"
:
0
,
"ipv4_in_ipv6"
:
0
,
"ipv6_in_ipv6"
:
0
,
"mpls"
:
0
,
"avg_pkt_size"
:
685
,
"max_pkt_size"
:
1506
,
"erspan"
:
0
,
"ipraw"
:{
"invalid_ip_version"
:
0
},
"ltnull"
:{
"pkt_too_small"
:
0
,
"unsupported_type"
:
0
},
"dce"
:{
"pkt_too_small"
:
0
}},
"flow"
:{
"memcap"
:
0
,
"tcp"
:
1
,
"udp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"spare"
:
10000
,
"emerg_mode_entered"
:
0
,
"emerg_mode_over"
:
0
,
"tcp_reuse"
:
0
,
"memuse"
:
7074592
},
"defrag"
:{
"ipv4"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"ipv6"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"max_frag_hits"
:
0
},
"tcp"
:{
"sessions"
:
1
,
"ssn_memcap_drop"
:
0
,
"pseudo"
:
0
,
"pseudo_failed"
:
0
,
"invalid_checksum"
:
0
,
"no_flow"
:
0
,
"syn"
:
1
,
"synack"
:
1
,
"rst"
:
0
,
"segment_memcap_drop"
:
0
,
"stream_depth_reached"
:
0
,
"reassembly_gap"
:
0
,
"overlap"
:
0
,
"overlap_diff_data"
:
0
,
"insert_data_normal_fail"
:
0
,
"insert_data_overlap_fail"
:
0
,
"insert_list_fail"
:
0
,
"memuse"
:
6881280
,
"reassembly_memuse"
:
991232
},
"detect"
:{
"alert"
:
0
},
"app_layer"
:{
"flow"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"imap"
:
0
,
"msn"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"failed_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
,
"failed_udp"
:
0
},
"tx"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
}},
"flow_mgr"
:{
"closed_pruned"
:
0
,
"new_pruned"
:
0
,
"est_pruned"
:
0
,
"bypassed_pruned"
:
0
,
"flows_checked"
:
0
,
"flows_notimeout"
:
0
,
"flows_timeout"
:
0
,
"flows_timeout_inuse"
:
0
,
"flows_removed"
:
0
,
"rows_checked"
:
65536
,
"rows_skipped"
:
65536
,
"rows_empty"
:
0
,
"rows_busy"
:
0
,
"rows_maxlen"
:
0
},
"file_store"
:{
"open_files"
:
0
},
"dns"
:{
"memuse"
:
0
,
"memcap_state"
:
0
,
"memcap_global"
:
0
},
"http"
:{
"memuse"
:
35131
,
"memcap"
:
0
}}}
{
"timestamp"
:
"2018-02-06T11:04:06.000457+0100"
,
"event_type"
:
"stats"
,
"stats"
:{
"uptime"
:
198
,
"capture"
:{
"kernel_packets"
:
1
,
"kernel_drops"
:
0
},
"decoder"
:{
"pkts"
:
10
,
"bytes"
:
6852
,
"invalid"
:
0
,
"ipv4"
:
10
,
"ipv6"
:
0
,
"ethernet"
:
10
,
"raw"
:
0
,
"null"
:
0
,
"sll"
:
0
,
"tcp"
:
10
,
"udp"
:
0
,
"sctp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"ppp"
:
0
,
"pppoe"
:
0
,
"gre"
:
0
,
"vlan"
:
0
,
"vlan_qinq"
:
0
,
"ieee8021ah"
:
0
,
"teredo"
:
0
,
"ipv4_in_ipv6"
:
0
,
"ipv6_in_ipv6"
:
0
,
"mpls"
:
0
,
"avg_pkt_size"
:
685
,
"max_pkt_size"
:
1506
,
"erspan"
:
0
,
"ipraw"
:{
"invalid_ip_version"
:
0
},
"ltnull"
:{
"pkt_too_small"
:
0
,
"unsupported_type"
:
0
},
"dce"
:{
"pkt_too_small"
:
0
}},
"flow"
:{
"memcap"
:
0
,
"tcp"
:
1
,
"udp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"spare"
:
10000
,
"emerg_mode_entered"
:
0
,
"emerg_mode_over"
:
0
,
"tcp_reuse"
:
0
,
"memuse"
:
7074592
},
"defrag"
:{
"ipv4"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"ipv6"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"max_frag_hits"
:
0
},
"tcp"
:{
"sessions"
:
1
,
"ssn_memcap_drop"
:
0
,
"pseudo"
:
0
,
"pseudo_failed"
:
0
,
"invalid_checksum"
:
0
,
"no_flow"
:
0
,
"syn"
:
1
,
"synack"
:
1
,
"rst"
:
0
,
"segment_memcap_drop"
:
0
,
"stream_depth_reached"
:
0
,
"reassembly_gap"
:
0
,
"overlap"
:
0
,
"overlap_diff_data"
:
0
,
"insert_data_normal_fail"
:
0
,
"insert_data_overlap_fail"
:
0
,
"insert_list_fail"
:
0
,
"memuse"
:
6881280
,
"reassembly_memuse"
:
991232
},
"detect"
:{
"alert"
:
0
},
"app_layer"
:{
"flow"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"imap"
:
0
,
"msn"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"failed_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
,
"failed_udp"
:
0
},
"tx"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
}},
"flow_mgr"
:{
"closed_pruned"
:
0
,
"new_pruned"
:
0
,
"est_pruned"
:
0
,
"bypassed_pruned"
:
0
,
"flows_checked"
:
0
,
"flows_notimeout"
:
0
,
"flows_timeout"
:
0
,
"flows_timeout_inuse"
:
0
,
"flows_removed"
:
0
,
"rows_checked"
:
65536
,
"rows_skipped"
:
65536
,
"rows_empty"
:
0
,
"rows_busy"
:
0
,
"rows_maxlen"
:
0
},
"file_store"
:{
"open_files"
:
0
},
"dns"
:{
"memuse"
:
0
,
"memcap_state"
:
0
,
"memcap_global"
:
0
},
"http"
:{
"memuse"
:
35131
,
"memcap"
:
0
}}}
{
"timestamp"
:
"2018-02-06T11:04:13.000457+0100"
,
"event_type"
:
"stats"
,
"stats"
:{
"uptime"
:
205
,
"capture"
:{
"kernel_packets"
:
1
,
"kernel_drops"
:
0
},
"decoder"
:{
"pkts"
:
10
,
"bytes"
:
6852
,
"invalid"
:
0
,
"ipv4"
:
10
,
"ipv6"
:
0
,
"ethernet"
:
10
,
"raw"
:
0
,
"null"
:
0
,
"sll"
:
0
,
"tcp"
:
10
,
"udp"
:
0
,
"sctp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"ppp"
:
0
,
"pppoe"
:
0
,
"gre"
:
0
,
"vlan"
:
0
,
"vlan_qinq"
:
0
,
"ieee8021ah"
:
0
,
"teredo"
:
0
,
"ipv4_in_ipv6"
:
0
,
"ipv6_in_ipv6"
:
0
,
"mpls"
:
0
,
"avg_pkt_size"
:
685
,
"max_pkt_size"
:
1506
,
"erspan"
:
0
,
"ipraw"
:{
"invalid_ip_version"
:
0
},
"ltnull"
:{
"pkt_too_small"
:
0
,
"unsupported_type"
:
0
},
"dce"
:{
"pkt_too_small"
:
0
}},
"flow"
:{
"memcap"
:
0
,
"tcp"
:
1
,
"udp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"spare"
:
10000
,
"emerg_mode_entered"
:
0
,
"emerg_mode_over"
:
0
,
"tcp_reuse"
:
0
,
"memuse"
:
7074592
},
"defrag"
:{
"ipv4"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"ipv6"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"max_frag_hits"
:
0
},
"tcp"
:{
"sessions"
:
1
,
"ssn_memcap_drop"
:
0
,
"pseudo"
:
0
,
"pseudo_failed"
:
0
,
"invalid_checksum"
:
0
,
"no_flow"
:
0
,
"syn"
:
1
,
"synack"
:
1
,
"rst"
:
0
,
"segment_memcap_drop"
:
0
,
"stream_depth_reached"
:
0
,
"reassembly_gap"
:
0
,
"overlap"
:
0
,
"overlap_diff_data"
:
0
,
"insert_data_normal_fail"
:
0
,
"insert_data_overlap_fail"
:
0
,
"insert_list_fail"
:
0
,
"memuse"
:
6881280
,
"reassembly_memuse"
:
991232
},
"detect"
:{
"alert"
:
0
},
"app_layer"
:{
"flow"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"imap"
:
0
,
"msn"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"failed_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
,
"failed_udp"
:
0
},
"tx"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
}},
"flow_mgr"
:{
"closed_pruned"
:
0
,
"new_pruned"
:
0
,
"est_pruned"
:
0
,
"bypassed_pruned"
:
0
,
"flows_checked"
:
0
,
"flows_notimeout"
:
0
,
"flows_timeout"
:
0
,
"flows_timeout_inuse"
:
0
,
"flows_removed"
:
0
,
"rows_checked"
:
65536
,
"rows_skipped"
:
65536
,
"rows_empty"
:
0
,
"rows_busy"
:
0
,
"rows_maxlen"
:
0
},
"file_store"
:{
"open_files"
:
0
},
"dns"
:{
"memuse"
:
0
,
"memcap_state"
:
0
,
"memcap_global"
:
0
},
"http"
:{
"memuse"
:
35131
,
"memcap"
:
0
}}}
{
"timestamp"
:
"2018-02-06T11:04:20.000395+0100"
,
"event_type"
:
"stats"
,
"stats"
:{
"uptime"
:
212
,
"capture"
:{
"kernel_packets"
:
1
,
"kernel_drops"
:
0
},
"decoder"
:{
"pkts"
:
10
,
"bytes"
:
6852
,
"invalid"
:
0
,
"ipv4"
:
10
,
"ipv6"
:
0
,
"ethernet"
:
10
,
"raw"
:
0
,
"null"
:
0
,
"sll"
:
0
,
"tcp"
:
10
,
"udp"
:
0
,
"sctp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"ppp"
:
0
,
"pppoe"
:
0
,
"gre"
:
0
,
"vlan"
:
0
,
"vlan_qinq"
:
0
,
"ieee8021ah"
:
0
,
"teredo"
:
0
,
"ipv4_in_ipv6"
:
0
,
"ipv6_in_ipv6"
:
0
,
"mpls"
:
0
,
"avg_pkt_size"
:
685
,
"max_pkt_size"
:
1506
,
"erspan"
:
0
,
"ipraw"
:{
"invalid_ip_version"
:
0
},
"ltnull"
:{
"pkt_too_small"
:
0
,
"unsupported_type"
:
0
},
"dce"
:{
"pkt_too_small"
:
0
}},
"flow"
:{
"memcap"
:
0
,
"tcp"
:
1
,
"udp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"spare"
:
10000
,
"emerg_mode_entered"
:
0
,
"emerg_mode_over"
:
0
,
"tcp_reuse"
:
0
,
"memuse"
:
7074592
},
"defrag"
:{
"ipv4"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"ipv6"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"max_frag_hits"
:
0
},
"tcp"
:{
"sessions"
:
1
,
"ssn_memcap_drop"
:
0
,
"pseudo"
:
0
,
"pseudo_failed"
:
0
,
"invalid_checksum"
:
0
,
"no_flow"
:
0
,
"syn"
:
1
,
"synack"
:
1
,
"rst"
:
0
,
"segment_memcap_drop"
:
0
,
"stream_depth_reached"
:
0
,
"reassembly_gap"
:
0
,
"overlap"
:
0
,
"overlap_diff_data"
:
0
,
"insert_data_normal_fail"
:
0
,
"insert_data_overlap_fail"
:
0
,
"insert_list_fail"
:
0
,
"memuse"
:
6881280
,
"reassembly_memuse"
:
991232
},
"detect"
:{
"alert"
:
0
},
"app_layer"
:{
"flow"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"imap"
:
0
,
"msn"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"failed_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
,
"failed_udp"
:
0
},
"tx"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
}},
"flow_mgr"
:{
"closed_pruned"
:
0
,
"new_pruned"
:
0
,
"est_pruned"
:
0
,
"bypassed_pruned"
:
0
,
"flows_checked"
:
0
,
"flows_notimeout"
:
0
,
"flows_timeout"
:
0
,
"flows_timeout_inuse"
:
0
,
"flows_removed"
:
0
,
"rows_checked"
:
65536
,
"rows_skipped"
:
65536
,
"rows_empty"
:
0
,
"rows_busy"
:
0
,
"rows_maxlen"
:
0
},
"file_store"
:{
"open_files"
:
0
},
"dns"
:{
"memuse"
:
0
,
"memcap_state"
:
0
,
"memcap_global"
:
0
},
"http"
:{
"memuse"
:
35131
,
"memcap"
:
0
}}}
{
"timestamp"
:
"2018-02-06T11:04:27.000345+0100"
,
"event_type"
:
"stats"
,
"stats"
:{
"uptime"
:
219
,
"capture"
:{
"kernel_packets"
:
1
,
"kernel_drops"
:
0
},
"decoder"
:{
"pkts"
:
10
,
"bytes"
:
6852
,
"invalid"
:
0
,
"ipv4"
:
10
,
"ipv6"
:
0
,
"ethernet"
:
10
,
"raw"
:
0
,
"null"
:
0
,
"sll"
:
0
,
"tcp"
:
10
,
"udp"
:
0
,
"sctp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"ppp"
:
0
,
"pppoe"
:
0
,
"gre"
:
0
,
"vlan"
:
0
,
"vlan_qinq"
:
0
,
"ieee8021ah"
:
0
,
"teredo"
:
0
,
"ipv4_in_ipv6"
:
0
,
"ipv6_in_ipv6"
:
0
,
"mpls"
:
0
,
"avg_pkt_size"
:
685
,
"max_pkt_size"
:
1506
,
"erspan"
:
0
,
"ipraw"
:{
"invalid_ip_version"
:
0
},
"ltnull"
:{
"pkt_too_small"
:
0
,
"unsupported_type"
:
0
},
"dce"
:{
"pkt_too_small"
:
0
}},
"flow"
:{
"memcap"
:
0
,
"tcp"
:
1
,
"udp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"spare"
:
10000
,
"emerg_mode_entered"
:
0
,
"emerg_mode_over"
:
0
,
"tcp_reuse"
:
0
,
"memuse"
:
7074592
},
"defrag"
:{
"ipv4"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"ipv6"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"max_frag_hits"
:
0
},
"tcp"
:{
"sessions"
:
1
,
"ssn_memcap_drop"
:
0
,
"pseudo"
:
0
,
"pseudo_failed"
:
0
,
"invalid_checksum"
:
0
,
"no_flow"
:
0
,
"syn"
:
1
,
"synack"
:
1
,
"rst"
:
0
,
"segment_memcap_drop"
:
0
,
"stream_depth_reached"
:
0
,
"reassembly_gap"
:
0
,
"overlap"
:
0
,
"overlap_diff_data"
:
0
,
"insert_data_normal_fail"
:
0
,
"insert_data_overlap_fail"
:
0
,
"insert_list_fail"
:
0
,
"memuse"
:
6881280
,
"reassembly_memuse"
:
991232
},
"detect"
:{
"alert"
:
0
},
"app_layer"
:{
"flow"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"imap"
:
0
,
"msn"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"failed_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
,
"failed_udp"
:
0
},
"tx"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
}},
"flow_mgr"
:{
"closed_pruned"
:
0
,
"new_pruned"
:
0
,
"est_pruned"
:
0
,
"bypassed_pruned"
:
0
,
"flows_checked"
:
0
,
"flows_notimeout"
:
0
,
"flows_timeout"
:
0
,
"flows_timeout_inuse"
:
0
,
"flows_removed"
:
0
,
"rows_checked"
:
65536
,
"rows_skipped"
:
65536
,
"rows_empty"
:
0
,
"rows_busy"
:
0
,
"rows_maxlen"
:
0
},
"file_store"
:{
"open_files"
:
0
},
"dns"
:{
"memuse"
:
0
,
"memcap_state"
:
0
,
"memcap_global"
:
0
},
"http"
:{
"memuse"
:
35131
,
"memcap"
:
0
}}}
{
"timestamp"
:
"2018-02-06T11:04:34.000447+0100"
,
"event_type"
:
"stats"
,
"stats"
:{
"uptime"
:
226
,
"capture"
:{
"kernel_packets"
:
1
,
"kernel_drops"
:
0
},
"decoder"
:{
"pkts"
:
10
,
"bytes"
:
6852
,
"invalid"
:
0
,
"ipv4"
:
10
,
"ipv6"
:
0
,
"ethernet"
:
10
,
"raw"
:
0
,
"null"
:
0
,
"sll"
:
0
,
"tcp"
:
10
,
"udp"
:
0
,
"sctp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"ppp"
:
0
,
"pppoe"
:
0
,
"gre"
:
0
,
"vlan"
:
0
,
"vlan_qinq"
:
0
,
"ieee8021ah"
:
0
,
"teredo"
:
0
,
"ipv4_in_ipv6"
:
0
,
"ipv6_in_ipv6"
:
0
,
"mpls"
:
0
,
"avg_pkt_size"
:
685
,
"max_pkt_size"
:
1506
,
"erspan"
:
0
,
"ipraw"
:{
"invalid_ip_version"
:
0
},
"ltnull"
:{
"pkt_too_small"
:
0
,
"unsupported_type"
:
0
},
"dce"
:{
"pkt_too_small"
:
0
}},
"flow"
:{
"memcap"
:
0
,
"tcp"
:
1
,
"udp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"spare"
:
10000
,
"emerg_mode_entered"
:
0
,
"emerg_mode_over"
:
0
,
"tcp_reuse"
:
0
,
"memuse"
:
7074592
},
"defrag"
:{
"ipv4"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"ipv6"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"max_frag_hits"
:
0
},
"tcp"
:{
"sessions"
:
1
,
"ssn_memcap_drop"
:
0
,
"pseudo"
:
0
,
"pseudo_failed"
:
0
,
"invalid_checksum"
:
0
,
"no_flow"
:
0
,
"syn"
:
1
,
"synack"
:
1
,
"rst"
:
0
,
"segment_memcap_drop"
:
0
,
"stream_depth_reached"
:
0
,
"reassembly_gap"
:
0
,
"overlap"
:
0
,
"overlap_diff_data"
:
0
,
"insert_data_normal_fail"
:
0
,
"insert_data_overlap_fail"
:
0
,
"insert_list_fail"
:
0
,
"memuse"
:
6881280
,
"reassembly_memuse"
:
991232
},
"detect"
:{
"alert"
:
0
},
"app_layer"
:{
"flow"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"imap"
:
0
,
"msn"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"failed_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
,
"failed_udp"
:
0
},
"tx"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
}},
"flow_mgr"
:{
"closed_pruned"
:
0
,
"new_pruned"
:
0
,
"est_pruned"
:
0
,
"bypassed_pruned"
:
0
,
"flows_checked"
:
0
,
"flows_notimeout"
:
0
,
"flows_timeout"
:
0
,
"flows_timeout_inuse"
:
0
,
"flows_removed"
:
0
,
"rows_checked"
:
65536
,
"rows_skipped"
:
65536
,
"rows_empty"
:
0
,
"rows_busy"
:
0
,
"rows_maxlen"
:
0
},
"file_store"
:{
"open_files"
:
0
},
"dns"
:{
"memuse"
:
0
,
"memcap_state"
:
0
,
"memcap_global"
:
0
},
"http"
:{
"memuse"
:
35131
,
"memcap"
:
0
}}}
{
"timestamp"
:
"2018-02-06T11:04:41.000458+0100"
,
"event_type"
:
"stats"
,
"stats"
:{
"uptime"
:
233
,
"capture"
:{
"kernel_packets"
:
1
,
"kernel_drops"
:
0
},
"decoder"
:{
"pkts"
:
10
,
"bytes"
:
6852
,
"invalid"
:
0
,
"ipv4"
:
10
,
"ipv6"
:
0
,
"ethernet"
:
10
,
"raw"
:
0
,
"null"
:
0
,
"sll"
:
0
,
"tcp"
:
10
,
"udp"
:
0
,
"sctp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"ppp"
:
0
,
"pppoe"
:
0
,
"gre"
:
0
,
"vlan"
:
0
,
"vlan_qinq"
:
0
,
"ieee8021ah"
:
0
,
"teredo"
:
0
,
"ipv4_in_ipv6"
:
0
,
"ipv6_in_ipv6"
:
0
,
"mpls"
:
0
,
"avg_pkt_size"
:
685
,
"max_pkt_size"
:
1506
,
"erspan"
:
0
,
"ipraw"
:{
"invalid_ip_version"
:
0
},
"ltnull"
:{
"pkt_too_small"
:
0
,
"unsupported_type"
:
0
},
"dce"
:{
"pkt_too_small"
:
0
}},
"flow"
:{
"memcap"
:
0
,
"tcp"
:
1
,
"udp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"spare"
:
10000
,
"emerg_mode_entered"
:
0
,
"emerg_mode_over"
:
0
,
"tcp_reuse"
:
0
,
"memuse"
:
7074592
},
"defrag"
:{
"ipv4"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"ipv6"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"max_frag_hits"
:
0
},
"tcp"
:{
"sessions"
:
1
,
"ssn_memcap_drop"
:
0
,
"pseudo"
:
0
,
"pseudo_failed"
:
0
,
"invalid_checksum"
:
0
,
"no_flow"
:
0
,
"syn"
:
1
,
"synack"
:
1
,
"rst"
:
0
,
"segment_memcap_drop"
:
0
,
"stream_depth_reached"
:
0
,
"reassembly_gap"
:
0
,
"overlap"
:
0
,
"overlap_diff_data"
:
0
,
"insert_data_normal_fail"
:
0
,
"insert_data_overlap_fail"
:
0
,
"insert_list_fail"
:
0
,
"memuse"
:
6881280
,
"reassembly_memuse"
:
991232
},
"detect"
:{
"alert"
:
0
},
"app_layer"
:{
"flow"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"imap"
:
0
,
"msn"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"failed_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
,
"failed_udp"
:
0
},
"tx"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
}},
"flow_mgr"
:{
"closed_pruned"
:
0
,
"new_pruned"
:
0
,
"est_pruned"
:
0
,
"bypassed_pruned"
:
0
,
"flows_checked"
:
0
,
"flows_notimeout"
:
0
,
"flows_timeout"
:
0
,
"flows_timeout_inuse"
:
0
,
"flows_removed"
:
0
,
"rows_checked"
:
65536
,
"rows_skipped"
:
65536
,
"rows_empty"
:
0
,
"rows_busy"
:
0
,
"rows_maxlen"
:
0
},
"file_store"
:{
"open_files"
:
0
},
"dns"
:{
"memuse"
:
0
,
"memcap_state"
:
0
,
"memcap_global"
:
0
},
"http"
:{
"memuse"
:
35131
,
"memcap"
:
0
}}}
{
"timestamp"
:
"2018-02-06T11:04:48.000445+0100"
,
"event_type"
:
"stats"
,
"stats"
:{
"uptime"
:
240
,
"capture"
:{
"kernel_packets"
:
1
,
"kernel_drops"
:
0
},
"decoder"
:{
"pkts"
:
10
,
"bytes"
:
6852
,
"invalid"
:
0
,
"ipv4"
:
10
,
"ipv6"
:
0
,
"ethernet"
:
10
,
"raw"
:
0
,
"null"
:
0
,
"sll"
:
0
,
"tcp"
:
10
,
"udp"
:
0
,
"sctp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"ppp"
:
0
,
"pppoe"
:
0
,
"gre"
:
0
,
"vlan"
:
0
,
"vlan_qinq"
:
0
,
"ieee8021ah"
:
0
,
"teredo"
:
0
,
"ipv4_in_ipv6"
:
0
,
"ipv6_in_ipv6"
:
0
,
"mpls"
:
0
,
"avg_pkt_size"
:
685
,
"max_pkt_size"
:
1506
,
"erspan"
:
0
,
"ipraw"
:{
"invalid_ip_version"
:
0
},
"ltnull"
:{
"pkt_too_small"
:
0
,
"unsupported_type"
:
0
},
"dce"
:{
"pkt_too_small"
:
0
}},
"flow"
:{
"memcap"
:
0
,
"tcp"
:
1
,
"udp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"spare"
:
10000
,
"emerg_mode_entered"
:
0
,
"emerg_mode_over"
:
0
,
"tcp_reuse"
:
0
,
"memuse"
:
7074592
},
"defrag"
:{
"ipv4"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"ipv6"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"max_frag_hits"
:
0
},
"tcp"
:{
"sessions"
:
1
,
"ssn_memcap_drop"
:
0
,
"pseudo"
:
0
,
"pseudo_failed"
:
0
,
"invalid_checksum"
:
0
,
"no_flow"
:
0
,
"syn"
:
1
,
"synack"
:
1
,
"rst"
:
0
,
"segment_memcap_drop"
:
0
,
"stream_depth_reached"
:
0
,
"reassembly_gap"
:
0
,
"overlap"
:
0
,
"overlap_diff_data"
:
0
,
"insert_data_normal_fail"
:
0
,
"insert_data_overlap_fail"
:
0
,
"insert_list_fail"
:
0
,
"memuse"
:
6881280
,
"reassembly_memuse"
:
991232
},
"detect"
:{
"alert"
:
0
},
"app_layer"
:{
"flow"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"imap"
:
0
,
"msn"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"failed_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
,
"failed_udp"
:
0
},
"tx"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
}},
"flow_mgr"
:{
"closed_pruned"
:
0
,
"new_pruned"
:
0
,
"est_pruned"
:
0
,
"bypassed_pruned"
:
0
,
"flows_checked"
:
0
,
"flows_notimeout"
:
0
,
"flows_timeout"
:
0
,
"flows_timeout_inuse"
:
0
,
"flows_removed"
:
0
,
"rows_checked"
:
65536
,
"rows_skipped"
:
65536
,
"rows_empty"
:
0
,
"rows_busy"
:
0
,
"rows_maxlen"
:
0
},
"file_store"
:{
"open_files"
:
0
},
"dns"
:{
"memuse"
:
0
,
"memcap_state"
:
0
,
"memcap_global"
:
0
},
"http"
:{
"memuse"
:
35131
,
"memcap"
:
0
}}}
{
"timestamp"
:
"2018-02-06T11:04:55.000459+0100"
,
"event_type"
:
"stats"
,
"stats"
:{
"uptime"
:
247
,
"capture"
:{
"kernel_packets"
:
1
,
"kernel_drops"
:
0
},
"decoder"
:{
"pkts"
:
10
,
"bytes"
:
6852
,
"invalid"
:
0
,
"ipv4"
:
10
,
"ipv6"
:
0
,
"ethernet"
:
10
,
"raw"
:
0
,
"null"
:
0
,
"sll"
:
0
,
"tcp"
:
10
,
"udp"
:
0
,
"sctp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"ppp"
:
0
,
"pppoe"
:
0
,
"gre"
:
0
,
"vlan"
:
0
,
"vlan_qinq"
:
0
,
"ieee8021ah"
:
0
,
"teredo"
:
0
,
"ipv4_in_ipv6"
:
0
,
"ipv6_in_ipv6"
:
0
,
"mpls"
:
0
,
"avg_pkt_size"
:
685
,
"max_pkt_size"
:
1506
,
"erspan"
:
0
,
"ipraw"
:{
"invalid_ip_version"
:
0
},
"ltnull"
:{
"pkt_too_small"
:
0
,
"unsupported_type"
:
0
},
"dce"
:{
"pkt_too_small"
:
0
}},
"flow"
:{
"memcap"
:
0
,
"tcp"
:
1
,
"udp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"spare"
:
10000
,
"emerg_mode_entered"
:
0
,
"emerg_mode_over"
:
0
,
"tcp_reuse"
:
0
,
"memuse"
:
7074592
},
"defrag"
:{
"ipv4"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"ipv6"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"max_frag_hits"
:
0
},
"tcp"
:{
"sessions"
:
1
,
"ssn_memcap_drop"
:
0
,
"pseudo"
:
0
,
"pseudo_failed"
:
0
,
"invalid_checksum"
:
0
,
"no_flow"
:
0
,
"syn"
:
1
,
"synack"
:
1
,
"rst"
:
0
,
"segment_memcap_drop"
:
0
,
"stream_depth_reached"
:
0
,
"reassembly_gap"
:
0
,
"overlap"
:
0
,
"overlap_diff_data"
:
0
,
"insert_data_normal_fail"
:
0
,
"insert_data_overlap_fail"
:
0
,
"insert_list_fail"
:
0
,
"memuse"
:
6881280
,
"reassembly_memuse"
:
991232
},
"detect"
:{
"alert"
:
0
},
"app_layer"
:{
"flow"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"imap"
:
0
,
"msn"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"failed_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
,
"failed_udp"
:
0
},
"tx"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
}},
"flow_mgr"
:{
"closed_pruned"
:
0
,
"new_pruned"
:
0
,
"est_pruned"
:
0
,
"bypassed_pruned"
:
0
,
"flows_checked"
:
0
,
"flows_notimeout"
:
0
,
"flows_timeout"
:
0
,
"flows_timeout_inuse"
:
0
,
"flows_removed"
:
0
,
"rows_checked"
:
65536
,
"rows_skipped"
:
65536
,
"rows_empty"
:
0
,
"rows_busy"
:
0
,
"rows_maxlen"
:
0
},
"file_store"
:{
"open_files"
:
0
},
"dns"
:{
"memuse"
:
0
,
"memcap_state"
:
0
,
"memcap_global"
:
0
},
"http"
:{
"memuse"
:
35131
,
"memcap"
:
0
}}}
{
"timestamp"
:
"2018-02-06T11:05:02.000450+0100"
,
"event_type"
:
"stats"
,
"stats"
:{
"uptime"
:
254
,
"capture"
:{
"kernel_packets"
:
1
,
"kernel_drops"
:
0
},
"decoder"
:{
"pkts"
:
10
,
"bytes"
:
6852
,
"invalid"
:
0
,
"ipv4"
:
10
,
"ipv6"
:
0
,
"ethernet"
:
10
,
"raw"
:
0
,
"null"
:
0
,
"sll"
:
0
,
"tcp"
:
10
,
"udp"
:
0
,
"sctp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"ppp"
:
0
,
"pppoe"
:
0
,
"gre"
:
0
,
"vlan"
:
0
,
"vlan_qinq"
:
0
,
"ieee8021ah"
:
0
,
"teredo"
:
0
,
"ipv4_in_ipv6"
:
0
,
"ipv6_in_ipv6"
:
0
,
"mpls"
:
0
,
"avg_pkt_size"
:
685
,
"max_pkt_size"
:
1506
,
"erspan"
:
0
,
"ipraw"
:{
"invalid_ip_version"
:
0
},
"ltnull"
:{
"pkt_too_small"
:
0
,
"unsupported_type"
:
0
},
"dce"
:{
"pkt_too_small"
:
0
}},
"flow"
:{
"memcap"
:
0
,
"tcp"
:
1
,
"udp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"spare"
:
10000
,
"emerg_mode_entered"
:
0
,
"emerg_mode_over"
:
0
,
"tcp_reuse"
:
0
,
"memuse"
:
7074592
},
"defrag"
:{
"ipv4"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"ipv6"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"max_frag_hits"
:
0
},
"tcp"
:{
"sessions"
:
1
,
"ssn_memcap_drop"
:
0
,
"pseudo"
:
0
,
"pseudo_failed"
:
0
,
"invalid_checksum"
:
0
,
"no_flow"
:
0
,
"syn"
:
1
,
"synack"
:
1
,
"rst"
:
0
,
"segment_memcap_drop"
:
0
,
"stream_depth_reached"
:
0
,
"reassembly_gap"
:
0
,
"overlap"
:
0
,
"overlap_diff_data"
:
0
,
"insert_data_normal_fail"
:
0
,
"insert_data_overlap_fail"
:
0
,
"insert_list_fail"
:
0
,
"memuse"
:
6881280
,
"reassembly_memuse"
:
991232
},
"detect"
:{
"alert"
:
0
},
"app_layer"
:{
"flow"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"imap"
:
0
,
"msn"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"failed_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
,
"failed_udp"
:
0
},
"tx"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
}},
"flow_mgr"
:{
"closed_pruned"
:
0
,
"new_pruned"
:
0
,
"est_pruned"
:
0
,
"bypassed_pruned"
:
0
,
"flows_checked"
:
0
,
"flows_notimeout"
:
0
,
"flows_timeout"
:
0
,
"flows_timeout_inuse"
:
0
,
"flows_removed"
:
0
,
"rows_checked"
:
65536
,
"rows_skipped"
:
65536
,
"rows_empty"
:
0
,
"rows_busy"
:
0
,
"rows_maxlen"
:
0
},
"file_store"
:{
"open_files"
:
0
},
"dns"
:{
"memuse"
:
0
,
"memcap_state"
:
0
,
"memcap_global"
:
0
},
"http"
:{
"memuse"
:
35131
,
"memcap"
:
0
}}}
{
"timestamp"
:
"2018-02-06T11:05:09.000438+0100"
,
"event_type"
:
"stats"
,
"stats"
:{
"uptime"
:
261
,
"capture"
:{
"kernel_packets"
:
1
,
"kernel_drops"
:
0
},
"decoder"
:{
"pkts"
:
10
,
"bytes"
:
6852
,
"invalid"
:
0
,
"ipv4"
:
10
,
"ipv6"
:
0
,
"ethernet"
:
10
,
"raw"
:
0
,
"null"
:
0
,
"sll"
:
0
,
"tcp"
:
10
,
"udp"
:
0
,
"sctp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"ppp"
:
0
,
"pppoe"
:
0
,
"gre"
:
0
,
"vlan"
:
0
,
"vlan_qinq"
:
0
,
"ieee8021ah"
:
0
,
"teredo"
:
0
,
"ipv4_in_ipv6"
:
0
,
"ipv6_in_ipv6"
:
0
,
"mpls"
:
0
,
"avg_pkt_size"
:
685
,
"max_pkt_size"
:
1506
,
"erspan"
:
0
,
"ipraw"
:{
"invalid_ip_version"
:
0
},
"ltnull"
:{
"pkt_too_small"
:
0
,
"unsupported_type"
:
0
},
"dce"
:{
"pkt_too_small"
:
0
}},
"flow"
:{
"memcap"
:
0
,
"tcp"
:
1
,
"udp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"spare"
:
10000
,
"emerg_mode_entered"
:
0
,
"emerg_mode_over"
:
0
,
"tcp_reuse"
:
0
,
"memuse"
:
7074592
},
"defrag"
:{
"ipv4"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"ipv6"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"max_frag_hits"
:
0
},
"tcp"
:{
"sessions"
:
1
,
"ssn_memcap_drop"
:
0
,
"pseudo"
:
0
,
"pseudo_failed"
:
0
,
"invalid_checksum"
:
0
,
"no_flow"
:
0
,
"syn"
:
1
,
"synack"
:
1
,
"rst"
:
0
,
"segment_memcap_drop"
:
0
,
"stream_depth_reached"
:
0
,
"reassembly_gap"
:
0
,
"overlap"
:
0
,
"overlap_diff_data"
:
0
,
"insert_data_normal_fail"
:
0
,
"insert_data_overlap_fail"
:
0
,
"insert_list_fail"
:
0
,
"memuse"
:
6881280
,
"reassembly_memuse"
:
991232
},
"detect"
:{
"alert"
:
0
},
"app_layer"
:{
"flow"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"imap"
:
0
,
"msn"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"failed_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
,
"failed_udp"
:
0
},
"tx"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
}},
"flow_mgr"
:{
"closed_pruned"
:
0
,
"new_pruned"
:
0
,
"est_pruned"
:
0
,
"bypassed_pruned"
:
0
,
"flows_checked"
:
0
,
"flows_notimeout"
:
0
,
"flows_timeout"
:
0
,
"flows_timeout_inuse"
:
0
,
"flows_removed"
:
0
,
"rows_checked"
:
65536
,
"rows_skipped"
:
65536
,
"rows_empty"
:
0
,
"rows_busy"
:
0
,
"rows_maxlen"
:
0
},
"file_store"
:{
"open_files"
:
0
},
"dns"
:{
"memuse"
:
0
,
"memcap_state"
:
0
,
"memcap_global"
:
0
},
"http"
:{
"memuse"
:
35131
,
"memcap"
:
0
}}}
{
"timestamp"
:
"2018-02-06T11:05:16.000444+0100"
,
"event_type"
:
"stats"
,
"stats"
:{
"uptime"
:
268
,
"capture"
:{
"kernel_packets"
:
1
,
"kernel_drops"
:
0
},
"decoder"
:{
"pkts"
:
10
,
"bytes"
:
6852
,
"invalid"
:
0
,
"ipv4"
:
10
,
"ipv6"
:
0
,
"ethernet"
:
10
,
"raw"
:
0
,
"null"
:
0
,
"sll"
:
0
,
"tcp"
:
10
,
"udp"
:
0
,
"sctp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"ppp"
:
0
,
"pppoe"
:
0
,
"gre"
:
0
,
"vlan"
:
0
,
"vlan_qinq"
:
0
,
"ieee8021ah"
:
0
,
"teredo"
:
0
,
"ipv4_in_ipv6"
:
0
,
"ipv6_in_ipv6"
:
0
,
"mpls"
:
0
,
"avg_pkt_size"
:
685
,
"max_pkt_size"
:
1506
,
"erspan"
:
0
,
"ipraw"
:{
"invalid_ip_version"
:
0
},
"ltnull"
:{
"pkt_too_small"
:
0
,
"unsupported_type"
:
0
},
"dce"
:{
"pkt_too_small"
:
0
}},
"flow"
:{
"memcap"
:
0
,
"tcp"
:
1
,
"udp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"spare"
:
10000
,
"emerg_mode_entered"
:
0
,
"emerg_mode_over"
:
0
,
"tcp_reuse"
:
0
,
"memuse"
:
7074592
},
"defrag"
:{
"ipv4"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"ipv6"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"max_frag_hits"
:
0
},
"tcp"
:{
"sessions"
:
1
,
"ssn_memcap_drop"
:
0
,
"pseudo"
:
0
,
"pseudo_failed"
:
0
,
"invalid_checksum"
:
0
,
"no_flow"
:
0
,
"syn"
:
1
,
"synack"
:
1
,
"rst"
:
0
,
"segment_memcap_drop"
:
0
,
"stream_depth_reached"
:
0
,
"reassembly_gap"
:
0
,
"overlap"
:
0
,
"overlap_diff_data"
:
0
,
"insert_data_normal_fail"
:
0
,
"insert_data_overlap_fail"
:
0
,
"insert_list_fail"
:
0
,
"memuse"
:
6881280
,
"reassembly_memuse"
:
991232
},
"detect"
:{
"alert"
:
0
},
"app_layer"
:{
"flow"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"imap"
:
0
,
"msn"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"failed_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
,
"failed_udp"
:
0
},
"tx"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
}},
"flow_mgr"
:{
"closed_pruned"
:
0
,
"new_pruned"
:
0
,
"est_pruned"
:
0
,
"bypassed_pruned"
:
0
,
"flows_checked"
:
0
,
"flows_notimeout"
:
0
,
"flows_timeout"
:
0
,
"flows_timeout_inuse"
:
0
,
"flows_removed"
:
0
,
"rows_checked"
:
65536
,
"rows_skipped"
:
65536
,
"rows_empty"
:
0
,
"rows_busy"
:
0
,
"rows_maxlen"
:
0
},
"file_store"
:{
"open_files"
:
0
},
"dns"
:{
"memuse"
:
0
,
"memcap_state"
:
0
,
"memcap_global"
:
0
},
"http"
:{
"memuse"
:
35131
,
"memcap"
:
0
}}}
{
"timestamp"
:
"2018-02-06T11:05:23.000408+0100"
,
"event_type"
:
"stats"
,
"stats"
:{
"uptime"
:
275
,
"capture"
:{
"kernel_packets"
:
1
,
"kernel_drops"
:
0
},
"decoder"
:{
"pkts"
:
10
,
"bytes"
:
6852
,
"invalid"
:
0
,
"ipv4"
:
10
,
"ipv6"
:
0
,
"ethernet"
:
10
,
"raw"
:
0
,
"null"
:
0
,
"sll"
:
0
,
"tcp"
:
10
,
"udp"
:
0
,
"sctp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"ppp"
:
0
,
"pppoe"
:
0
,
"gre"
:
0
,
"vlan"
:
0
,
"vlan_qinq"
:
0
,
"ieee8021ah"
:
0
,
"teredo"
:
0
,
"ipv4_in_ipv6"
:
0
,
"ipv6_in_ipv6"
:
0
,
"mpls"
:
0
,
"avg_pkt_size"
:
685
,
"max_pkt_size"
:
1506
,
"erspan"
:
0
,
"ipraw"
:{
"invalid_ip_version"
:
0
},
"ltnull"
:{
"pkt_too_small"
:
0
,
"unsupported_type"
:
0
},
"dce"
:{
"pkt_too_small"
:
0
}},
"flow"
:{
"memcap"
:
0
,
"tcp"
:
1
,
"udp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"spare"
:
10000
,
"emerg_mode_entered"
:
0
,
"emerg_mode_over"
:
0
,
"tcp_reuse"
:
0
,
"memuse"
:
7074592
},
"defrag"
:{
"ipv4"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"ipv6"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"max_frag_hits"
:
0
},
"tcp"
:{
"sessions"
:
1
,
"ssn_memcap_drop"
:
0
,
"pseudo"
:
0
,
"pseudo_failed"
:
0
,
"invalid_checksum"
:
0
,
"no_flow"
:
0
,
"syn"
:
1
,
"synack"
:
1
,
"rst"
:
0
,
"segment_memcap_drop"
:
0
,
"stream_depth_reached"
:
0
,
"reassembly_gap"
:
0
,
"overlap"
:
0
,
"overlap_diff_data"
:
0
,
"insert_data_normal_fail"
:
0
,
"insert_data_overlap_fail"
:
0
,
"insert_list_fail"
:
0
,
"memuse"
:
6881280
,
"reassembly_memuse"
:
991232
},
"detect"
:{
"alert"
:
0
},
"app_layer"
:{
"flow"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"imap"
:
0
,
"msn"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"failed_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
,
"failed_udp"
:
0
},
"tx"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
}},
"flow_mgr"
:{
"closed_pruned"
:
0
,
"new_pruned"
:
0
,
"est_pruned"
:
0
,
"bypassed_pruned"
:
0
,
"flows_checked"
:
0
,
"flows_notimeout"
:
0
,
"flows_timeout"
:
0
,
"flows_timeout_inuse"
:
0
,
"flows_removed"
:
0
,
"rows_checked"
:
65536
,
"rows_skipped"
:
65536
,
"rows_empty"
:
0
,
"rows_busy"
:
0
,
"rows_maxlen"
:
0
},
"file_store"
:{
"open_files"
:
0
},
"dns"
:{
"memuse"
:
0
,
"memcap_state"
:
0
,
"memcap_global"
:
0
},
"http"
:{
"memuse"
:
35131
,
"memcap"
:
0
}}}
{
"timestamp"
:
"2018-02-06T11:05:30.000464+0100"
,
"event_type"
:
"stats"
,
"stats"
:{
"uptime"
:
282
,
"capture"
:{
"kernel_packets"
:
1
,
"kernel_drops"
:
0
},
"decoder"
:{
"pkts"
:
10
,
"bytes"
:
6852
,
"invalid"
:
0
,
"ipv4"
:
10
,
"ipv6"
:
0
,
"ethernet"
:
10
,
"raw"
:
0
,
"null"
:
0
,
"sll"
:
0
,
"tcp"
:
10
,
"udp"
:
0
,
"sctp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"ppp"
:
0
,
"pppoe"
:
0
,
"gre"
:
0
,
"vlan"
:
0
,
"vlan_qinq"
:
0
,
"ieee8021ah"
:
0
,
"teredo"
:
0
,
"ipv4_in_ipv6"
:
0
,
"ipv6_in_ipv6"
:
0
,
"mpls"
:
0
,
"avg_pkt_size"
:
685
,
"max_pkt_size"
:
1506
,
"erspan"
:
0
,
"ipraw"
:{
"invalid_ip_version"
:
0
},
"ltnull"
:{
"pkt_too_small"
:
0
,
"unsupported_type"
:
0
},
"dce"
:{
"pkt_too_small"
:
0
}},
"flow"
:{
"memcap"
:
0
,
"tcp"
:
1
,
"udp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"spare"
:
10000
,
"emerg_mode_entered"
:
0
,
"emerg_mode_over"
:
0
,
"tcp_reuse"
:
0
,
"memuse"
:
7074592
},
"defrag"
:{
"ipv4"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"ipv6"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"max_frag_hits"
:
0
},
"tcp"
:{
"sessions"
:
1
,
"ssn_memcap_drop"
:
0
,
"pseudo"
:
0
,
"pseudo_failed"
:
0
,
"invalid_checksum"
:
0
,
"no_flow"
:
0
,
"syn"
:
1
,
"synack"
:
1
,
"rst"
:
0
,
"segment_memcap_drop"
:
0
,
"stream_depth_reached"
:
0
,
"reassembly_gap"
:
0
,
"overlap"
:
0
,
"overlap_diff_data"
:
0
,
"insert_data_normal_fail"
:
0
,
"insert_data_overlap_fail"
:
0
,
"insert_list_fail"
:
0
,
"memuse"
:
6881280
,
"reassembly_memuse"
:
991232
},
"detect"
:{
"alert"
:
0
},
"app_layer"
:{
"flow"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"imap"
:
0
,
"msn"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"failed_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
,
"failed_udp"
:
0
},
"tx"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
}},
"flow_mgr"
:{
"closed_pruned"
:
0
,
"new_pruned"
:
0
,
"est_pruned"
:
0
,
"bypassed_pruned"
:
0
,
"flows_checked"
:
0
,
"flows_notimeout"
:
0
,
"flows_timeout"
:
0
,
"flows_timeout_inuse"
:
0
,
"flows_removed"
:
0
,
"rows_checked"
:
65536
,
"rows_skipped"
:
65536
,
"rows_empty"
:
0
,
"rows_busy"
:
0
,
"rows_maxlen"
:
0
},
"file_store"
:{
"open_files"
:
0
},
"dns"
:{
"memuse"
:
0
,
"memcap_state"
:
0
,
"memcap_global"
:
0
},
"http"
:{
"memuse"
:
35131
,
"memcap"
:
0
}}}
{
"timestamp"
:
"2018-02-06T11:05:37.000309+0100"
,
"event_type"
:
"stats"
,
"stats"
:{
"uptime"
:
289
,
"capture"
:{
"kernel_packets"
:
1
,
"kernel_drops"
:
0
},
"decoder"
:{
"pkts"
:
10
,
"bytes"
:
6852
,
"invalid"
:
0
,
"ipv4"
:
10
,
"ipv6"
:
0
,
"ethernet"
:
10
,
"raw"
:
0
,
"null"
:
0
,
"sll"
:
0
,
"tcp"
:
10
,
"udp"
:
0
,
"sctp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"ppp"
:
0
,
"pppoe"
:
0
,
"gre"
:
0
,
"vlan"
:
0
,
"vlan_qinq"
:
0
,
"ieee8021ah"
:
0
,
"teredo"
:
0
,
"ipv4_in_ipv6"
:
0
,
"ipv6_in_ipv6"
:
0
,
"mpls"
:
0
,
"avg_pkt_size"
:
685
,
"max_pkt_size"
:
1506
,
"erspan"
:
0
,
"ipraw"
:{
"invalid_ip_version"
:
0
},
"ltnull"
:{
"pkt_too_small"
:
0
,
"unsupported_type"
:
0
},
"dce"
:{
"pkt_too_small"
:
0
}},
"flow"
:{
"memcap"
:
0
,
"tcp"
:
1
,
"udp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"spare"
:
10000
,
"emerg_mode_entered"
:
0
,
"emerg_mode_over"
:
0
,
"tcp_reuse"
:
0
,
"memuse"
:
7074592
},
"defrag"
:{
"ipv4"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"ipv6"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"max_frag_hits"
:
0
},
"tcp"
:{
"sessions"
:
1
,
"ssn_memcap_drop"
:
0
,
"pseudo"
:
0
,
"pseudo_failed"
:
0
,
"invalid_checksum"
:
0
,
"no_flow"
:
0
,
"syn"
:
1
,
"synack"
:
1
,
"rst"
:
0
,
"segment_memcap_drop"
:
0
,
"stream_depth_reached"
:
0
,
"reassembly_gap"
:
0
,
"overlap"
:
0
,
"overlap_diff_data"
:
0
,
"insert_data_normal_fail"
:
0
,
"insert_data_overlap_fail"
:
0
,
"insert_list_fail"
:
0
,
"memuse"
:
6881280
,
"reassembly_memuse"
:
991232
},
"detect"
:{
"alert"
:
0
},
"app_layer"
:{
"flow"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"imap"
:
0
,
"msn"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"failed_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
,
"failed_udp"
:
0
},
"tx"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
}},
"flow_mgr"
:{
"closed_pruned"
:
0
,
"new_pruned"
:
0
,
"est_pruned"
:
0
,
"bypassed_pruned"
:
0
,
"flows_checked"
:
0
,
"flows_notimeout"
:
0
,
"flows_timeout"
:
0
,
"flows_timeout_inuse"
:
0
,
"flows_removed"
:
0
,
"rows_checked"
:
65536
,
"rows_skipped"
:
65536
,
"rows_empty"
:
0
,
"rows_busy"
:
0
,
"rows_maxlen"
:
0
},
"file_store"
:{
"open_files"
:
0
},
"dns"
:{
"memuse"
:
0
,
"memcap_state"
:
0
,
"memcap_global"
:
0
},
"http"
:{
"memuse"
:
35131
,
"memcap"
:
0
}}}
{
"timestamp"
:
"2018-02-06T11:05:44.000431+0100"
,
"event_type"
:
"stats"
,
"stats"
:{
"uptime"
:
296
,
"capture"
:{
"kernel_packets"
:
1
,
"kernel_drops"
:
0
},
"decoder"
:{
"pkts"
:
10
,
"bytes"
:
6852
,
"invalid"
:
0
,
"ipv4"
:
10
,
"ipv6"
:
0
,
"ethernet"
:
10
,
"raw"
:
0
,
"null"
:
0
,
"sll"
:
0
,
"tcp"
:
10
,
"udp"
:
0
,
"sctp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"ppp"
:
0
,
"pppoe"
:
0
,
"gre"
:
0
,
"vlan"
:
0
,
"vlan_qinq"
:
0
,
"ieee8021ah"
:
0
,
"teredo"
:
0
,
"ipv4_in_ipv6"
:
0
,
"ipv6_in_ipv6"
:
0
,
"mpls"
:
0
,
"avg_pkt_size"
:
685
,
"max_pkt_size"
:
1506
,
"erspan"
:
0
,
"ipraw"
:{
"invalid_ip_version"
:
0
},
"ltnull"
:{
"pkt_too_small"
:
0
,
"unsupported_type"
:
0
},
"dce"
:{
"pkt_too_small"
:
0
}},
"flow"
:{
"memcap"
:
0
,
"tcp"
:
1
,
"udp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"spare"
:
10000
,
"emerg_mode_entered"
:
0
,
"emerg_mode_over"
:
0
,
"tcp_reuse"
:
0
,
"memuse"
:
7074592
},
"defrag"
:{
"ipv4"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"ipv6"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"max_frag_hits"
:
0
},
"tcp"
:{
"sessions"
:
1
,
"ssn_memcap_drop"
:
0
,
"pseudo"
:
0
,
"pseudo_failed"
:
0
,
"invalid_checksum"
:
0
,
"no_flow"
:
0
,
"syn"
:
1
,
"synack"
:
1
,
"rst"
:
0
,
"segment_memcap_drop"
:
0
,
"stream_depth_reached"
:
0
,
"reassembly_gap"
:
0
,
"overlap"
:
0
,
"overlap_diff_data"
:
0
,
"insert_data_normal_fail"
:
0
,
"insert_data_overlap_fail"
:
0
,
"insert_list_fail"
:
0
,
"memuse"
:
6881280
,
"reassembly_memuse"
:
991232
},
"detect"
:{
"alert"
:
0
},
"app_layer"
:{
"flow"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"imap"
:
0
,
"msn"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"failed_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
,
"failed_udp"
:
0
},
"tx"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
}},
"flow_mgr"
:{
"closed_pruned"
:
0
,
"new_pruned"
:
0
,
"est_pruned"
:
0
,
"bypassed_pruned"
:
0
,
"flows_checked"
:
0
,
"flows_notimeout"
:
0
,
"flows_timeout"
:
0
,
"flows_timeout_inuse"
:
0
,
"flows_removed"
:
0
,
"rows_checked"
:
65536
,
"rows_skipped"
:
65536
,
"rows_empty"
:
0
,
"rows_busy"
:
0
,
"rows_maxlen"
:
0
},
"file_store"
:{
"open_files"
:
0
},
"dns"
:{
"memuse"
:
0
,
"memcap_state"
:
0
,
"memcap_global"
:
0
},
"http"
:{
"memuse"
:
35131
,
"memcap"
:
0
}}}
{
"timestamp"
:
"2018-02-06T11:05:51.000294+0100"
,
"event_type"
:
"stats"
,
"stats"
:{
"uptime"
:
303
,
"capture"
:{
"kernel_packets"
:
1
,
"kernel_drops"
:
0
},
"decoder"
:{
"pkts"
:
10
,
"bytes"
:
6852
,
"invalid"
:
0
,
"ipv4"
:
10
,
"ipv6"
:
0
,
"ethernet"
:
10
,
"raw"
:
0
,
"null"
:
0
,
"sll"
:
0
,
"tcp"
:
10
,
"udp"
:
0
,
"sctp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"ppp"
:
0
,
"pppoe"
:
0
,
"gre"
:
0
,
"vlan"
:
0
,
"vlan_qinq"
:
0
,
"ieee8021ah"
:
0
,
"teredo"
:
0
,
"ipv4_in_ipv6"
:
0
,
"ipv6_in_ipv6"
:
0
,
"mpls"
:
0
,
"avg_pkt_size"
:
685
,
"max_pkt_size"
:
1506
,
"erspan"
:
0
,
"ipraw"
:{
"invalid_ip_version"
:
0
},
"ltnull"
:{
"pkt_too_small"
:
0
,
"unsupported_type"
:
0
},
"dce"
:{
"pkt_too_small"
:
0
}},
"flow"
:{
"memcap"
:
0
,
"tcp"
:
1
,
"udp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"spare"
:
10000
,
"emerg_mode_entered"
:
0
,
"emerg_mode_over"
:
0
,
"tcp_reuse"
:
0
,
"memuse"
:
7074592
},
"defrag"
:{
"ipv4"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"ipv6"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"max_frag_hits"
:
0
},
"tcp"
:{
"sessions"
:
1
,
"ssn_memcap_drop"
:
0
,
"pseudo"
:
0
,
"pseudo_failed"
:
0
,
"invalid_checksum"
:
0
,
"no_flow"
:
0
,
"syn"
:
1
,
"synack"
:
1
,
"rst"
:
0
,
"segment_memcap_drop"
:
0
,
"stream_depth_reached"
:
0
,
"reassembly_gap"
:
0
,
"overlap"
:
0
,
"overlap_diff_data"
:
0
,
"insert_data_normal_fail"
:
0
,
"insert_data_overlap_fail"
:
0
,
"insert_list_fail"
:
0
,
"memuse"
:
6881280
,
"reassembly_memuse"
:
991232
},
"detect"
:{
"alert"
:
0
},
"app_layer"
:{
"flow"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"imap"
:
0
,
"msn"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"failed_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
,
"failed_udp"
:
0
},
"tx"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
}},
"flow_mgr"
:{
"closed_pruned"
:
0
,
"new_pruned"
:
0
,
"est_pruned"
:
0
,
"bypassed_pruned"
:
0
,
"flows_checked"
:
0
,
"flows_notimeout"
:
0
,
"flows_timeout"
:
0
,
"flows_timeout_inuse"
:
0
,
"flows_removed"
:
0
,
"rows_checked"
:
65536
,
"rows_skipped"
:
65536
,
"rows_empty"
:
0
,
"rows_busy"
:
0
,
"rows_maxlen"
:
0
},
"file_store"
:{
"open_files"
:
0
},
"dns"
:{
"memuse"
:
0
,
"memcap_state"
:
0
,
"memcap_global"
:
0
},
"http"
:{
"memuse"
:
35131
,
"memcap"
:
0
}}}
{
"timestamp"
:
"2018-02-06T11:05:58.000430+0100"
,
"event_type"
:
"stats"
,
"stats"
:{
"uptime"
:
310
,
"capture"
:{
"kernel_packets"
:
1
,
"kernel_drops"
:
0
},
"decoder"
:{
"pkts"
:
10
,
"bytes"
:
6852
,
"invalid"
:
0
,
"ipv4"
:
10
,
"ipv6"
:
0
,
"ethernet"
:
10
,
"raw"
:
0
,
"null"
:
0
,
"sll"
:
0
,
"tcp"
:
10
,
"udp"
:
0
,
"sctp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"ppp"
:
0
,
"pppoe"
:
0
,
"gre"
:
0
,
"vlan"
:
0
,
"vlan_qinq"
:
0
,
"ieee8021ah"
:
0
,
"teredo"
:
0
,
"ipv4_in_ipv6"
:
0
,
"ipv6_in_ipv6"
:
0
,
"mpls"
:
0
,
"avg_pkt_size"
:
685
,
"max_pkt_size"
:
1506
,
"erspan"
:
0
,
"ipraw"
:{
"invalid_ip_version"
:
0
},
"ltnull"
:{
"pkt_too_small"
:
0
,
"unsupported_type"
:
0
},
"dce"
:{
"pkt_too_small"
:
0
}},
"flow"
:{
"memcap"
:
0
,
"tcp"
:
1
,
"udp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"spare"
:
10000
,
"emerg_mode_entered"
:
0
,
"emerg_mode_over"
:
0
,
"tcp_reuse"
:
0
,
"memuse"
:
7074592
},
"defrag"
:{
"ipv4"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"ipv6"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"max_frag_hits"
:
0
},
"tcp"
:{
"sessions"
:
1
,
"ssn_memcap_drop"
:
0
,
"pseudo"
:
0
,
"pseudo_failed"
:
0
,
"invalid_checksum"
:
0
,
"no_flow"
:
0
,
"syn"
:
1
,
"synack"
:
1
,
"rst"
:
0
,
"segment_memcap_drop"
:
0
,
"stream_depth_reached"
:
0
,
"reassembly_gap"
:
0
,
"overlap"
:
0
,
"overlap_diff_data"
:
0
,
"insert_data_normal_fail"
:
0
,
"insert_data_overlap_fail"
:
0
,
"insert_list_fail"
:
0
,
"memuse"
:
6881280
,
"reassembly_memuse"
:
991232
},
"detect"
:{
"alert"
:
0
},
"app_layer"
:{
"flow"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"imap"
:
0
,
"msn"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"failed_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
,
"failed_udp"
:
0
},
"tx"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
}},
"flow_mgr"
:{
"closed_pruned"
:
0
,
"new_pruned"
:
0
,
"est_pruned"
:
0
,
"bypassed_pruned"
:
0
,
"flows_checked"
:
0
,
"flows_notimeout"
:
0
,
"flows_timeout"
:
0
,
"flows_timeout_inuse"
:
0
,
"flows_removed"
:
0
,
"rows_checked"
:
65536
,
"rows_skipped"
:
65536
,
"rows_empty"
:
0
,
"rows_busy"
:
0
,
"rows_maxlen"
:
0
},
"file_store"
:{
"open_files"
:
0
},
"dns"
:{
"memuse"
:
0
,
"memcap_state"
:
0
,
"memcap_global"
:
0
},
"http"
:{
"memuse"
:
35131
,
"memcap"
:
0
}}}
{
"timestamp"
:
"2018-02-06T11:06:05.000438+0100"
,
"event_type"
:
"stats"
,
"stats"
:{
"uptime"
:
317
,
"capture"
:{
"kernel_packets"
:
1
,
"kernel_drops"
:
0
},
"decoder"
:{
"pkts"
:
10
,
"bytes"
:
6852
,
"invalid"
:
0
,
"ipv4"
:
10
,
"ipv6"
:
0
,
"ethernet"
:
10
,
"raw"
:
0
,
"null"
:
0
,
"sll"
:
0
,
"tcp"
:
10
,
"udp"
:
0
,
"sctp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"ppp"
:
0
,
"pppoe"
:
0
,
"gre"
:
0
,
"vlan"
:
0
,
"vlan_qinq"
:
0
,
"ieee8021ah"
:
0
,
"teredo"
:
0
,
"ipv4_in_ipv6"
:
0
,
"ipv6_in_ipv6"
:
0
,
"mpls"
:
0
,
"avg_pkt_size"
:
685
,
"max_pkt_size"
:
1506
,
"erspan"
:
0
,
"ipraw"
:{
"invalid_ip_version"
:
0
},
"ltnull"
:{
"pkt_too_small"
:
0
,
"unsupported_type"
:
0
},
"dce"
:{
"pkt_too_small"
:
0
}},
"flow"
:{
"memcap"
:
0
,
"tcp"
:
1
,
"udp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"spare"
:
10000
,
"emerg_mode_entered"
:
0
,
"emerg_mode_over"
:
0
,
"tcp_reuse"
:
0
,
"memuse"
:
7074592
},
"defrag"
:{
"ipv4"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"ipv6"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"max_frag_hits"
:
0
},
"tcp"
:{
"sessions"
:
1
,
"ssn_memcap_drop"
:
0
,
"pseudo"
:
0
,
"pseudo_failed"
:
0
,
"invalid_checksum"
:
0
,
"no_flow"
:
0
,
"syn"
:
1
,
"synack"
:
1
,
"rst"
:
0
,
"segment_memcap_drop"
:
0
,
"stream_depth_reached"
:
0
,
"reassembly_gap"
:
0
,
"overlap"
:
0
,
"overlap_diff_data"
:
0
,
"insert_data_normal_fail"
:
0
,
"insert_data_overlap_fail"
:
0
,
"insert_list_fail"
:
0
,
"memuse"
:
6881280
,
"reassembly_memuse"
:
991232
},
"detect"
:{
"alert"
:
0
},
"app_layer"
:{
"flow"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"imap"
:
0
,
"msn"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"failed_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
,
"failed_udp"
:
0
},
"tx"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
}},
"flow_mgr"
:{
"closed_pruned"
:
0
,
"new_pruned"
:
0
,
"est_pruned"
:
0
,
"bypassed_pruned"
:
0
,
"flows_checked"
:
0
,
"flows_notimeout"
:
0
,
"flows_timeout"
:
0
,
"flows_timeout_inuse"
:
0
,
"flows_removed"
:
0
,
"rows_checked"
:
65536
,
"rows_skipped"
:
65536
,
"rows_empty"
:
0
,
"rows_busy"
:
0
,
"rows_maxlen"
:
0
},
"file_store"
:{
"open_files"
:
0
},
"dns"
:{
"memuse"
:
0
,
"memcap_state"
:
0
,
"memcap_global"
:
0
},
"http"
:{
"memuse"
:
35131
,
"memcap"
:
0
}}}
{
"timestamp"
:
"2018-02-06T11:06:12.000262+0100"
,
"event_type"
:
"stats"
,
"stats"
:{
"uptime"
:
324
,
"capture"
:{
"kernel_packets"
:
1
,
"kernel_drops"
:
0
},
"decoder"
:{
"pkts"
:
10
,
"bytes"
:
6852
,
"invalid"
:
0
,
"ipv4"
:
10
,
"ipv6"
:
0
,
"ethernet"
:
10
,
"raw"
:
0
,
"null"
:
0
,
"sll"
:
0
,
"tcp"
:
10
,
"udp"
:
0
,
"sctp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"ppp"
:
0
,
"pppoe"
:
0
,
"gre"
:
0
,
"vlan"
:
0
,
"vlan_qinq"
:
0
,
"ieee8021ah"
:
0
,
"teredo"
:
0
,
"ipv4_in_ipv6"
:
0
,
"ipv6_in_ipv6"
:
0
,
"mpls"
:
0
,
"avg_pkt_size"
:
685
,
"max_pkt_size"
:
1506
,
"erspan"
:
0
,
"ipraw"
:{
"invalid_ip_version"
:
0
},
"ltnull"
:{
"pkt_too_small"
:
0
,
"unsupported_type"
:
0
},
"dce"
:{
"pkt_too_small"
:
0
}},
"flow"
:{
"memcap"
:
0
,
"tcp"
:
1
,
"udp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"spare"
:
10000
,
"emerg_mode_entered"
:
0
,
"emerg_mode_over"
:
0
,
"tcp_reuse"
:
0
,
"memuse"
:
7074592
},
"defrag"
:{
"ipv4"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"ipv6"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"max_frag_hits"
:
0
},
"tcp"
:{
"sessions"
:
1
,
"ssn_memcap_drop"
:
0
,
"pseudo"
:
0
,
"pseudo_failed"
:
0
,
"invalid_checksum"
:
0
,
"no_flow"
:
0
,
"syn"
:
1
,
"synack"
:
1
,
"rst"
:
0
,
"segment_memcap_drop"
:
0
,
"stream_depth_reached"
:
0
,
"reassembly_gap"
:
0
,
"overlap"
:
0
,
"overlap_diff_data"
:
0
,
"insert_data_normal_fail"
:
0
,
"insert_data_overlap_fail"
:
0
,
"insert_list_fail"
:
0
,
"memuse"
:
6881280
,
"reassembly_memuse"
:
991232
},
"detect"
:{
"alert"
:
0
},
"app_layer"
:{
"flow"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"imap"
:
0
,
"msn"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"failed_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
,
"failed_udp"
:
0
},
"tx"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
}},
"flow_mgr"
:{
"closed_pruned"
:
0
,
"new_pruned"
:
0
,
"est_pruned"
:
0
,
"bypassed_pruned"
:
0
,
"flows_checked"
:
0
,
"flows_notimeout"
:
0
,
"flows_timeout"
:
0
,
"flows_timeout_inuse"
:
0
,
"flows_removed"
:
0
,
"rows_checked"
:
65536
,
"rows_skipped"
:
65536
,
"rows_empty"
:
0
,
"rows_busy"
:
0
,
"rows_maxlen"
:
0
},
"file_store"
:{
"open_files"
:
0
},
"dns"
:{
"memuse"
:
0
,
"memcap_state"
:
0
,
"memcap_global"
:
0
},
"http"
:{
"memuse"
:
35131
,
"memcap"
:
0
}}}
{
"timestamp"
:
"2018-02-06T11:06:19.000444+0100"
,
"event_type"
:
"stats"
,
"stats"
:{
"uptime"
:
331
,
"capture"
:{
"kernel_packets"
:
1
,
"kernel_drops"
:
0
},
"decoder"
:{
"pkts"
:
10
,
"bytes"
:
6852
,
"invalid"
:
0
,
"ipv4"
:
10
,
"ipv6"
:
0
,
"ethernet"
:
10
,
"raw"
:
0
,
"null"
:
0
,
"sll"
:
0
,
"tcp"
:
10
,
"udp"
:
0
,
"sctp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"ppp"
:
0
,
"pppoe"
:
0
,
"gre"
:
0
,
"vlan"
:
0
,
"vlan_qinq"
:
0
,
"ieee8021ah"
:
0
,
"teredo"
:
0
,
"ipv4_in_ipv6"
:
0
,
"ipv6_in_ipv6"
:
0
,
"mpls"
:
0
,
"avg_pkt_size"
:
685
,
"max_pkt_size"
:
1506
,
"erspan"
:
0
,
"ipraw"
:{
"invalid_ip_version"
:
0
},
"ltnull"
:{
"pkt_too_small"
:
0
,
"unsupported_type"
:
0
},
"dce"
:{
"pkt_too_small"
:
0
}},
"flow"
:{
"memcap"
:
0
,
"tcp"
:
1
,
"udp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"spare"
:
10000
,
"emerg_mode_entered"
:
0
,
"emerg_mode_over"
:
0
,
"tcp_reuse"
:
0
,
"memuse"
:
7074592
},
"defrag"
:{
"ipv4"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"ipv6"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"max_frag_hits"
:
0
},
"tcp"
:{
"sessions"
:
1
,
"ssn_memcap_drop"
:
0
,
"pseudo"
:
0
,
"pseudo_failed"
:
0
,
"invalid_checksum"
:
0
,
"no_flow"
:
0
,
"syn"
:
1
,
"synack"
:
1
,
"rst"
:
0
,
"segment_memcap_drop"
:
0
,
"stream_depth_reached"
:
0
,
"reassembly_gap"
:
0
,
"overlap"
:
0
,
"overlap_diff_data"
:
0
,
"insert_data_normal_fail"
:
0
,
"insert_data_overlap_fail"
:
0
,
"insert_list_fail"
:
0
,
"memuse"
:
6881280
,
"reassembly_memuse"
:
991232
},
"detect"
:{
"alert"
:
0
},
"app_layer"
:{
"flow"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"imap"
:
0
,
"msn"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"failed_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
,
"failed_udp"
:
0
},
"tx"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
}},
"flow_mgr"
:{
"closed_pruned"
:
0
,
"new_pruned"
:
0
,
"est_pruned"
:
0
,
"bypassed_pruned"
:
0
,
"flows_checked"
:
0
,
"flows_notimeout"
:
0
,
"flows_timeout"
:
0
,
"flows_timeout_inuse"
:
0
,
"flows_removed"
:
0
,
"rows_checked"
:
65536
,
"rows_skipped"
:
65536
,
"rows_empty"
:
0
,
"rows_busy"
:
0
,
"rows_maxlen"
:
0
},
"file_store"
:{
"open_files"
:
0
},
"dns"
:{
"memuse"
:
0
,
"memcap_state"
:
0
,
"memcap_global"
:
0
},
"http"
:{
"memuse"
:
35131
,
"memcap"
:
0
}}}
{
"timestamp"
:
"2018-02-06T11:06:26.000457+0100"
,
"event_type"
:
"stats"
,
"stats"
:{
"uptime"
:
338
,
"capture"
:{
"kernel_packets"
:
1
,
"kernel_drops"
:
0
},
"decoder"
:{
"pkts"
:
10
,
"bytes"
:
6852
,
"invalid"
:
0
,
"ipv4"
:
10
,
"ipv6"
:
0
,
"ethernet"
:
10
,
"raw"
:
0
,
"null"
:
0
,
"sll"
:
0
,
"tcp"
:
10
,
"udp"
:
0
,
"sctp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"ppp"
:
0
,
"pppoe"
:
0
,
"gre"
:
0
,
"vlan"
:
0
,
"vlan_qinq"
:
0
,
"ieee8021ah"
:
0
,
"teredo"
:
0
,
"ipv4_in_ipv6"
:
0
,
"ipv6_in_ipv6"
:
0
,
"mpls"
:
0
,
"avg_pkt_size"
:
685
,
"max_pkt_size"
:
1506
,
"erspan"
:
0
,
"ipraw"
:{
"invalid_ip_version"
:
0
},
"ltnull"
:{
"pkt_too_small"
:
0
,
"unsupported_type"
:
0
},
"dce"
:{
"pkt_too_small"
:
0
}},
"flow"
:{
"memcap"
:
0
,
"tcp"
:
1
,
"udp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"spare"
:
10000
,
"emerg_mode_entered"
:
0
,
"emerg_mode_over"
:
0
,
"tcp_reuse"
:
0
,
"memuse"
:
7074592
},
"defrag"
:{
"ipv4"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"ipv6"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"max_frag_hits"
:
0
},
"tcp"
:{
"sessions"
:
1
,
"ssn_memcap_drop"
:
0
,
"pseudo"
:
0
,
"pseudo_failed"
:
0
,
"invalid_checksum"
:
0
,
"no_flow"
:
0
,
"syn"
:
1
,
"synack"
:
1
,
"rst"
:
0
,
"segment_memcap_drop"
:
0
,
"stream_depth_reached"
:
0
,
"reassembly_gap"
:
0
,
"overlap"
:
0
,
"overlap_diff_data"
:
0
,
"insert_data_normal_fail"
:
0
,
"insert_data_overlap_fail"
:
0
,
"insert_list_fail"
:
0
,
"memuse"
:
6881280
,
"reassembly_memuse"
:
991232
},
"detect"
:{
"alert"
:
0
},
"app_layer"
:{
"flow"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"imap"
:
0
,
"msn"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"failed_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
,
"failed_udp"
:
0
},
"tx"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
}},
"flow_mgr"
:{
"closed_pruned"
:
0
,
"new_pruned"
:
0
,
"est_pruned"
:
0
,
"bypassed_pruned"
:
0
,
"flows_checked"
:
0
,
"flows_notimeout"
:
0
,
"flows_timeout"
:
0
,
"flows_timeout_inuse"
:
0
,
"flows_removed"
:
0
,
"rows_checked"
:
65536
,
"rows_skipped"
:
65536
,
"rows_empty"
:
0
,
"rows_busy"
:
0
,
"rows_maxlen"
:
0
},
"file_store"
:{
"open_files"
:
0
},
"dns"
:{
"memuse"
:
0
,
"memcap_state"
:
0
,
"memcap_global"
:
0
},
"http"
:{
"memuse"
:
35131
,
"memcap"
:
0
}}}
{
"timestamp"
:
"2018-02-06T11:06:33.000422+0100"
,
"event_type"
:
"stats"
,
"stats"
:{
"uptime"
:
345
,
"capture"
:{
"kernel_packets"
:
1
,
"kernel_drops"
:
0
},
"decoder"
:{
"pkts"
:
10
,
"bytes"
:
6852
,
"invalid"
:
0
,
"ipv4"
:
10
,
"ipv6"
:
0
,
"ethernet"
:
10
,
"raw"
:
0
,
"null"
:
0
,
"sll"
:
0
,
"tcp"
:
10
,
"udp"
:
0
,
"sctp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"ppp"
:
0
,
"pppoe"
:
0
,
"gre"
:
0
,
"vlan"
:
0
,
"vlan_qinq"
:
0
,
"ieee8021ah"
:
0
,
"teredo"
:
0
,
"ipv4_in_ipv6"
:
0
,
"ipv6_in_ipv6"
:
0
,
"mpls"
:
0
,
"avg_pkt_size"
:
685
,
"max_pkt_size"
:
1506
,
"erspan"
:
0
,
"ipraw"
:{
"invalid_ip_version"
:
0
},
"ltnull"
:{
"pkt_too_small"
:
0
,
"unsupported_type"
:
0
},
"dce"
:{
"pkt_too_small"
:
0
}},
"flow"
:{
"memcap"
:
0
,
"tcp"
:
1
,
"udp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"spare"
:
10000
,
"emerg_mode_entered"
:
0
,
"emerg_mode_over"
:
0
,
"tcp_reuse"
:
0
,
"memuse"
:
7074592
},
"defrag"
:{
"ipv4"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"ipv6"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"max_frag_hits"
:
0
},
"tcp"
:{
"sessions"
:
1
,
"ssn_memcap_drop"
:
0
,
"pseudo"
:
0
,
"pseudo_failed"
:
0
,
"invalid_checksum"
:
0
,
"no_flow"
:
0
,
"syn"
:
1
,
"synack"
:
1
,
"rst"
:
0
,
"segment_memcap_drop"
:
0
,
"stream_depth_reached"
:
0
,
"reassembly_gap"
:
0
,
"overlap"
:
0
,
"overlap_diff_data"
:
0
,
"insert_data_normal_fail"
:
0
,
"insert_data_overlap_fail"
:
0
,
"insert_list_fail"
:
0
,
"memuse"
:
6881280
,
"reassembly_memuse"
:
991232
},
"detect"
:{
"alert"
:
0
},
"app_layer"
:{
"flow"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"imap"
:
0
,
"msn"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"failed_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
,
"failed_udp"
:
0
},
"tx"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
}},
"flow_mgr"
:{
"closed_pruned"
:
0
,
"new_pruned"
:
0
,
"est_pruned"
:
0
,
"bypassed_pruned"
:
0
,
"flows_checked"
:
0
,
"flows_notimeout"
:
0
,
"flows_timeout"
:
0
,
"flows_timeout_inuse"
:
0
,
"flows_removed"
:
0
,
"rows_checked"
:
65536
,
"rows_skipped"
:
65536
,
"rows_empty"
:
0
,
"rows_busy"
:
0
,
"rows_maxlen"
:
0
},
"file_store"
:{
"open_files"
:
0
},
"dns"
:{
"memuse"
:
0
,
"memcap_state"
:
0
,
"memcap_global"
:
0
},
"http"
:{
"memuse"
:
35131
,
"memcap"
:
0
}}}
{
"timestamp"
:
"2018-02-06T11:06:40.000483+0100"
,
"event_type"
:
"stats"
,
"stats"
:{
"uptime"
:
352
,
"capture"
:{
"kernel_packets"
:
1
,
"kernel_drops"
:
0
},
"decoder"
:{
"pkts"
:
10
,
"bytes"
:
6852
,
"invalid"
:
0
,
"ipv4"
:
10
,
"ipv6"
:
0
,
"ethernet"
:
10
,
"raw"
:
0
,
"null"
:
0
,
"sll"
:
0
,
"tcp"
:
10
,
"udp"
:
0
,
"sctp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"ppp"
:
0
,
"pppoe"
:
0
,
"gre"
:
0
,
"vlan"
:
0
,
"vlan_qinq"
:
0
,
"ieee8021ah"
:
0
,
"teredo"
:
0
,
"ipv4_in_ipv6"
:
0
,
"ipv6_in_ipv6"
:
0
,
"mpls"
:
0
,
"avg_pkt_size"
:
685
,
"max_pkt_size"
:
1506
,
"erspan"
:
0
,
"ipraw"
:{
"invalid_ip_version"
:
0
},
"ltnull"
:{
"pkt_too_small"
:
0
,
"unsupported_type"
:
0
},
"dce"
:{
"pkt_too_small"
:
0
}},
"flow"
:{
"memcap"
:
0
,
"tcp"
:
1
,
"udp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"spare"
:
10000
,
"emerg_mode_entered"
:
0
,
"emerg_mode_over"
:
0
,
"tcp_reuse"
:
0
,
"memuse"
:
7074592
},
"defrag"
:{
"ipv4"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"ipv6"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"max_frag_hits"
:
0
},
"tcp"
:{
"sessions"
:
1
,
"ssn_memcap_drop"
:
0
,
"pseudo"
:
0
,
"pseudo_failed"
:
0
,
"invalid_checksum"
:
0
,
"no_flow"
:
0
,
"syn"
:
1
,
"synack"
:
1
,
"rst"
:
0
,
"segment_memcap_drop"
:
0
,
"stream_depth_reached"
:
0
,
"reassembly_gap"
:
0
,
"overlap"
:
0
,
"overlap_diff_data"
:
0
,
"insert_data_normal_fail"
:
0
,
"insert_data_overlap_fail"
:
0
,
"insert_list_fail"
:
0
,
"memuse"
:
6881280
,
"reassembly_memuse"
:
991232
},
"detect"
:{
"alert"
:
0
},
"app_layer"
:{
"flow"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"imap"
:
0
,
"msn"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"failed_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
,
"failed_udp"
:
0
},
"tx"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
}},
"flow_mgr"
:{
"closed_pruned"
:
0
,
"new_pruned"
:
0
,
"est_pruned"
:
0
,
"bypassed_pruned"
:
0
,
"flows_checked"
:
0
,
"flows_notimeout"
:
0
,
"flows_timeout"
:
0
,
"flows_timeout_inuse"
:
0
,
"flows_removed"
:
0
,
"rows_checked"
:
65536
,
"rows_skipped"
:
65536
,
"rows_empty"
:
0
,
"rows_busy"
:
0
,
"rows_maxlen"
:
0
},
"file_store"
:{
"open_files"
:
0
},
"dns"
:{
"memuse"
:
0
,
"memcap_state"
:
0
,
"memcap_global"
:
0
},
"http"
:{
"memuse"
:
35131
,
"memcap"
:
0
}}}
{
"timestamp"
:
"2018-02-06T11:06:47.000461+0100"
,
"event_type"
:
"stats"
,
"stats"
:{
"uptime"
:
359
,
"capture"
:{
"kernel_packets"
:
1
,
"kernel_drops"
:
0
},
"decoder"
:{
"pkts"
:
10
,
"bytes"
:
6852
,
"invalid"
:
0
,
"ipv4"
:
10
,
"ipv6"
:
0
,
"ethernet"
:
10
,
"raw"
:
0
,
"null"
:
0
,
"sll"
:
0
,
"tcp"
:
10
,
"udp"
:
0
,
"sctp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"ppp"
:
0
,
"pppoe"
:
0
,
"gre"
:
0
,
"vlan"
:
0
,
"vlan_qinq"
:
0
,
"ieee8021ah"
:
0
,
"teredo"
:
0
,
"ipv4_in_ipv6"
:
0
,
"ipv6_in_ipv6"
:
0
,
"mpls"
:
0
,
"avg_pkt_size"
:
685
,
"max_pkt_size"
:
1506
,
"erspan"
:
0
,
"ipraw"
:{
"invalid_ip_version"
:
0
},
"ltnull"
:{
"pkt_too_small"
:
0
,
"unsupported_type"
:
0
},
"dce"
:{
"pkt_too_small"
:
0
}},
"flow"
:{
"memcap"
:
0
,
"tcp"
:
1
,
"udp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"spare"
:
10000
,
"emerg_mode_entered"
:
0
,
"emerg_mode_over"
:
0
,
"tcp_reuse"
:
0
,
"memuse"
:
7074592
},
"defrag"
:{
"ipv4"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"ipv6"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"max_frag_hits"
:
0
},
"tcp"
:{
"sessions"
:
1
,
"ssn_memcap_drop"
:
0
,
"pseudo"
:
0
,
"pseudo_failed"
:
0
,
"invalid_checksum"
:
0
,
"no_flow"
:
0
,
"syn"
:
1
,
"synack"
:
1
,
"rst"
:
0
,
"segment_memcap_drop"
:
0
,
"stream_depth_reached"
:
0
,
"reassembly_gap"
:
0
,
"overlap"
:
0
,
"overlap_diff_data"
:
0
,
"insert_data_normal_fail"
:
0
,
"insert_data_overlap_fail"
:
0
,
"insert_list_fail"
:
0
,
"memuse"
:
6881280
,
"reassembly_memuse"
:
991232
},
"detect"
:{
"alert"
:
0
},
"app_layer"
:{
"flow"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"imap"
:
0
,
"msn"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"failed_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
,
"failed_udp"
:
0
},
"tx"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
}},
"flow_mgr"
:{
"closed_pruned"
:
0
,
"new_pruned"
:
0
,
"est_pruned"
:
0
,
"bypassed_pruned"
:
0
,
"flows_checked"
:
0
,
"flows_notimeout"
:
0
,
"flows_timeout"
:
0
,
"flows_timeout_inuse"
:
0
,
"flows_removed"
:
0
,
"rows_checked"
:
65536
,
"rows_skipped"
:
65536
,
"rows_empty"
:
0
,
"rows_busy"
:
0
,
"rows_maxlen"
:
0
},
"file_store"
:{
"open_files"
:
0
},
"dns"
:{
"memuse"
:
0
,
"memcap_state"
:
0
,
"memcap_global"
:
0
},
"http"
:{
"memuse"
:
35131
,
"memcap"
:
0
}}}
{
"timestamp"
:
"2018-02-06T11:06:54.000268+0100"
,
"event_type"
:
"stats"
,
"stats"
:{
"uptime"
:
366
,
"capture"
:{
"kernel_packets"
:
1
,
"kernel_drops"
:
0
},
"decoder"
:{
"pkts"
:
10
,
"bytes"
:
6852
,
"invalid"
:
0
,
"ipv4"
:
10
,
"ipv6"
:
0
,
"ethernet"
:
10
,
"raw"
:
0
,
"null"
:
0
,
"sll"
:
0
,
"tcp"
:
10
,
"udp"
:
0
,
"sctp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"ppp"
:
0
,
"pppoe"
:
0
,
"gre"
:
0
,
"vlan"
:
0
,
"vlan_qinq"
:
0
,
"ieee8021ah"
:
0
,
"teredo"
:
0
,
"ipv4_in_ipv6"
:
0
,
"ipv6_in_ipv6"
:
0
,
"mpls"
:
0
,
"avg_pkt_size"
:
685
,
"max_pkt_size"
:
1506
,
"erspan"
:
0
,
"ipraw"
:{
"invalid_ip_version"
:
0
},
"ltnull"
:{
"pkt_too_small"
:
0
,
"unsupported_type"
:
0
},
"dce"
:{
"pkt_too_small"
:
0
}},
"flow"
:{
"memcap"
:
0
,
"tcp"
:
1
,
"udp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"spare"
:
10000
,
"emerg_mode_entered"
:
0
,
"emerg_mode_over"
:
0
,
"tcp_reuse"
:
0
,
"memuse"
:
7074592
},
"defrag"
:{
"ipv4"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"ipv6"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"max_frag_hits"
:
0
},
"tcp"
:{
"sessions"
:
1
,
"ssn_memcap_drop"
:
0
,
"pseudo"
:
0
,
"pseudo_failed"
:
0
,
"invalid_checksum"
:
0
,
"no_flow"
:
0
,
"syn"
:
1
,
"synack"
:
1
,
"rst"
:
0
,
"segment_memcap_drop"
:
0
,
"stream_depth_reached"
:
0
,
"reassembly_gap"
:
0
,
"overlap"
:
0
,
"overlap_diff_data"
:
0
,
"insert_data_normal_fail"
:
0
,
"insert_data_overlap_fail"
:
0
,
"insert_list_fail"
:
0
,
"memuse"
:
6881280
,
"reassembly_memuse"
:
991232
},
"detect"
:{
"alert"
:
0
},
"app_layer"
:{
"flow"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"imap"
:
0
,
"msn"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"failed_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
,
"failed_udp"
:
0
},
"tx"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
}},
"flow_mgr"
:{
"closed_pruned"
:
0
,
"new_pruned"
:
0
,
"est_pruned"
:
0
,
"bypassed_pruned"
:
0
,
"flows_checked"
:
0
,
"flows_notimeout"
:
0
,
"flows_timeout"
:
0
,
"flows_timeout_inuse"
:
0
,
"flows_removed"
:
0
,
"rows_checked"
:
65536
,
"rows_skipped"
:
65536
,
"rows_empty"
:
0
,
"rows_busy"
:
0
,
"rows_maxlen"
:
0
},
"file_store"
:{
"open_files"
:
0
},
"dns"
:{
"memuse"
:
0
,
"memcap_state"
:
0
,
"memcap_global"
:
0
},
"http"
:{
"memuse"
:
35131
,
"memcap"
:
0
}}}
{
"timestamp"
:
"2018-02-06T11:07:01.000377+0100"
,
"event_type"
:
"stats"
,
"stats"
:{
"uptime"
:
373
,
"capture"
:{
"kernel_packets"
:
1
,
"kernel_drops"
:
0
},
"decoder"
:{
"pkts"
:
10
,
"bytes"
:
6852
,
"invalid"
:
0
,
"ipv4"
:
10
,
"ipv6"
:
0
,
"ethernet"
:
10
,
"raw"
:
0
,
"null"
:
0
,
"sll"
:
0
,
"tcp"
:
10
,
"udp"
:
0
,
"sctp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"ppp"
:
0
,
"pppoe"
:
0
,
"gre"
:
0
,
"vlan"
:
0
,
"vlan_qinq"
:
0
,
"ieee8021ah"
:
0
,
"teredo"
:
0
,
"ipv4_in_ipv6"
:
0
,
"ipv6_in_ipv6"
:
0
,
"mpls"
:
0
,
"avg_pkt_size"
:
685
,
"max_pkt_size"
:
1506
,
"erspan"
:
0
,
"ipraw"
:{
"invalid_ip_version"
:
0
},
"ltnull"
:{
"pkt_too_small"
:
0
,
"unsupported_type"
:
0
},
"dce"
:{
"pkt_too_small"
:
0
}},
"flow"
:{
"memcap"
:
0
,
"tcp"
:
1
,
"udp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"spare"
:
10000
,
"emerg_mode_entered"
:
0
,
"emerg_mode_over"
:
0
,
"tcp_reuse"
:
0
,
"memuse"
:
7074592
},
"defrag"
:{
"ipv4"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"ipv6"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"max_frag_hits"
:
0
},
"tcp"
:{
"sessions"
:
1
,
"ssn_memcap_drop"
:
0
,
"pseudo"
:
0
,
"pseudo_failed"
:
0
,
"invalid_checksum"
:
0
,
"no_flow"
:
0
,
"syn"
:
1
,
"synack"
:
1
,
"rst"
:
0
,
"segment_memcap_drop"
:
0
,
"stream_depth_reached"
:
0
,
"reassembly_gap"
:
0
,
"overlap"
:
0
,
"overlap_diff_data"
:
0
,
"insert_data_normal_fail"
:
0
,
"insert_data_overlap_fail"
:
0
,
"insert_list_fail"
:
0
,
"memuse"
:
6881280
,
"reassembly_memuse"
:
991232
},
"detect"
:{
"alert"
:
0
},
"app_layer"
:{
"flow"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"imap"
:
0
,
"msn"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"failed_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
,
"failed_udp"
:
0
},
"tx"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
}},
"flow_mgr"
:{
"closed_pruned"
:
0
,
"new_pruned"
:
0
,
"est_pruned"
:
0
,
"bypassed_pruned"
:
0
,
"flows_checked"
:
0
,
"flows_notimeout"
:
0
,
"flows_timeout"
:
0
,
"flows_timeout_inuse"
:
0
,
"flows_removed"
:
0
,
"rows_checked"
:
65536
,
"rows_skipped"
:
65536
,
"rows_empty"
:
0
,
"rows_busy"
:
0
,
"rows_maxlen"
:
0
},
"file_store"
:{
"open_files"
:
0
},
"dns"
:{
"memuse"
:
0
,
"memcap_state"
:
0
,
"memcap_global"
:
0
},
"http"
:{
"memuse"
:
35131
,
"memcap"
:
0
}}}
{
"timestamp"
:
"2018-02-06T11:07:08.000462+0100"
,
"event_type"
:
"stats"
,
"stats"
:{
"uptime"
:
380
,
"capture"
:{
"kernel_packets"
:
1
,
"kernel_drops"
:
0
},
"decoder"
:{
"pkts"
:
10
,
"bytes"
:
6852
,
"invalid"
:
0
,
"ipv4"
:
10
,
"ipv6"
:
0
,
"ethernet"
:
10
,
"raw"
:
0
,
"null"
:
0
,
"sll"
:
0
,
"tcp"
:
10
,
"udp"
:
0
,
"sctp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"ppp"
:
0
,
"pppoe"
:
0
,
"gre"
:
0
,
"vlan"
:
0
,
"vlan_qinq"
:
0
,
"ieee8021ah"
:
0
,
"teredo"
:
0
,
"ipv4_in_ipv6"
:
0
,
"ipv6_in_ipv6"
:
0
,
"mpls"
:
0
,
"avg_pkt_size"
:
685
,
"max_pkt_size"
:
1506
,
"erspan"
:
0
,
"ipraw"
:{
"invalid_ip_version"
:
0
},
"ltnull"
:{
"pkt_too_small"
:
0
,
"unsupported_type"
:
0
},
"dce"
:{
"pkt_too_small"
:
0
}},
"flow"
:{
"memcap"
:
0
,
"tcp"
:
1
,
"udp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"spare"
:
10000
,
"emerg_mode_entered"
:
0
,
"emerg_mode_over"
:
0
,
"tcp_reuse"
:
0
,
"memuse"
:
7074592
},
"defrag"
:{
"ipv4"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"ipv6"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"max_frag_hits"
:
0
},
"tcp"
:{
"sessions"
:
1
,
"ssn_memcap_drop"
:
0
,
"pseudo"
:
0
,
"pseudo_failed"
:
0
,
"invalid_checksum"
:
0
,
"no_flow"
:
0
,
"syn"
:
1
,
"synack"
:
1
,
"rst"
:
0
,
"segment_memcap_drop"
:
0
,
"stream_depth_reached"
:
0
,
"reassembly_gap"
:
0
,
"overlap"
:
0
,
"overlap_diff_data"
:
0
,
"insert_data_normal_fail"
:
0
,
"insert_data_overlap_fail"
:
0
,
"insert_list_fail"
:
0
,
"memuse"
:
6881280
,
"reassembly_memuse"
:
991232
},
"detect"
:{
"alert"
:
0
},
"app_layer"
:{
"flow"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"imap"
:
0
,
"msn"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"failed_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
,
"failed_udp"
:
0
},
"tx"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
}},
"flow_mgr"
:{
"closed_pruned"
:
0
,
"new_pruned"
:
0
,
"est_pruned"
:
0
,
"bypassed_pruned"
:
0
,
"flows_checked"
:
0
,
"flows_notimeout"
:
0
,
"flows_timeout"
:
0
,
"flows_timeout_inuse"
:
0
,
"flows_removed"
:
0
,
"rows_checked"
:
65536
,
"rows_skipped"
:
65536
,
"rows_empty"
:
0
,
"rows_busy"
:
0
,
"rows_maxlen"
:
0
},
"file_store"
:{
"open_files"
:
0
},
"dns"
:{
"memuse"
:
0
,
"memcap_state"
:
0
,
"memcap_global"
:
0
},
"http"
:{
"memuse"
:
35131
,
"memcap"
:
0
}}}
{
"timestamp"
:
"2018-02-06T11:07:15.000457+0100"
,
"event_type"
:
"stats"
,
"stats"
:{
"uptime"
:
387
,
"capture"
:{
"kernel_packets"
:
1
,
"kernel_drops"
:
0
},
"decoder"
:{
"pkts"
:
10
,
"bytes"
:
6852
,
"invalid"
:
0
,
"ipv4"
:
10
,
"ipv6"
:
0
,
"ethernet"
:
10
,
"raw"
:
0
,
"null"
:
0
,
"sll"
:
0
,
"tcp"
:
10
,
"udp"
:
0
,
"sctp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"ppp"
:
0
,
"pppoe"
:
0
,
"gre"
:
0
,
"vlan"
:
0
,
"vlan_qinq"
:
0
,
"ieee8021ah"
:
0
,
"teredo"
:
0
,
"ipv4_in_ipv6"
:
0
,
"ipv6_in_ipv6"
:
0
,
"mpls"
:
0
,
"avg_pkt_size"
:
685
,
"max_pkt_size"
:
1506
,
"erspan"
:
0
,
"ipraw"
:{
"invalid_ip_version"
:
0
},
"ltnull"
:{
"pkt_too_small"
:
0
,
"unsupported_type"
:
0
},
"dce"
:{
"pkt_too_small"
:
0
}},
"flow"
:{
"memcap"
:
0
,
"tcp"
:
1
,
"udp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"spare"
:
10000
,
"emerg_mode_entered"
:
0
,
"emerg_mode_over"
:
0
,
"tcp_reuse"
:
0
,
"memuse"
:
7074592
},
"defrag"
:{
"ipv4"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"ipv6"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"max_frag_hits"
:
0
},
"tcp"
:{
"sessions"
:
1
,
"ssn_memcap_drop"
:
0
,
"pseudo"
:
0
,
"pseudo_failed"
:
0
,
"invalid_checksum"
:
0
,
"no_flow"
:
0
,
"syn"
:
1
,
"synack"
:
1
,
"rst"
:
0
,
"segment_memcap_drop"
:
0
,
"stream_depth_reached"
:
0
,
"reassembly_gap"
:
0
,
"overlap"
:
0
,
"overlap_diff_data"
:
0
,
"insert_data_normal_fail"
:
0
,
"insert_data_overlap_fail"
:
0
,
"insert_list_fail"
:
0
,
"memuse"
:
6881280
,
"reassembly_memuse"
:
991232
},
"detect"
:{
"alert"
:
0
},
"app_layer"
:{
"flow"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"imap"
:
0
,
"msn"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"failed_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
,
"failed_udp"
:
0
},
"tx"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
}},
"flow_mgr"
:{
"closed_pruned"
:
0
,
"new_pruned"
:
0
,
"est_pruned"
:
0
,
"bypassed_pruned"
:
0
,
"flows_checked"
:
0
,
"flows_notimeout"
:
0
,
"flows_timeout"
:
0
,
"flows_timeout_inuse"
:
0
,
"flows_removed"
:
0
,
"rows_checked"
:
65536
,
"rows_skipped"
:
65536
,
"rows_empty"
:
0
,
"rows_busy"
:
0
,
"rows_maxlen"
:
0
},
"file_store"
:{
"open_files"
:
0
},
"dns"
:{
"memuse"
:
0
,
"memcap_state"
:
0
,
"memcap_global"
:
0
},
"http"
:{
"memuse"
:
35131
,
"memcap"
:
0
}}}
{
"timestamp"
:
"2018-02-06T11:07:22.000479+0100"
,
"event_type"
:
"stats"
,
"stats"
:{
"uptime"
:
394
,
"capture"
:{
"kernel_packets"
:
1
,
"kernel_drops"
:
0
},
"decoder"
:{
"pkts"
:
10
,
"bytes"
:
6852
,
"invalid"
:
0
,
"ipv4"
:
10
,
"ipv6"
:
0
,
"ethernet"
:
10
,
"raw"
:
0
,
"null"
:
0
,
"sll"
:
0
,
"tcp"
:
10
,
"udp"
:
0
,
"sctp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"ppp"
:
0
,
"pppoe"
:
0
,
"gre"
:
0
,
"vlan"
:
0
,
"vlan_qinq"
:
0
,
"ieee8021ah"
:
0
,
"teredo"
:
0
,
"ipv4_in_ipv6"
:
0
,
"ipv6_in_ipv6"
:
0
,
"mpls"
:
0
,
"avg_pkt_size"
:
685
,
"max_pkt_size"
:
1506
,
"erspan"
:
0
,
"ipraw"
:{
"invalid_ip_version"
:
0
},
"ltnull"
:{
"pkt_too_small"
:
0
,
"unsupported_type"
:
0
},
"dce"
:{
"pkt_too_small"
:
0
}},
"flow"
:{
"memcap"
:
0
,
"tcp"
:
1
,
"udp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"spare"
:
10000
,
"emerg_mode_entered"
:
0
,
"emerg_mode_over"
:
0
,
"tcp_reuse"
:
0
,
"memuse"
:
7074592
},
"defrag"
:{
"ipv4"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"ipv6"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"max_frag_hits"
:
0
},
"tcp"
:{
"sessions"
:
1
,
"ssn_memcap_drop"
:
0
,
"pseudo"
:
0
,
"pseudo_failed"
:
0
,
"invalid_checksum"
:
0
,
"no_flow"
:
0
,
"syn"
:
1
,
"synack"
:
1
,
"rst"
:
0
,
"segment_memcap_drop"
:
0
,
"stream_depth_reached"
:
0
,
"reassembly_gap"
:
0
,
"overlap"
:
0
,
"overlap_diff_data"
:
0
,
"insert_data_normal_fail"
:
0
,
"insert_data_overlap_fail"
:
0
,
"insert_list_fail"
:
0
,
"memuse"
:
6881280
,
"reassembly_memuse"
:
991232
},
"detect"
:{
"alert"
:
0
},
"app_layer"
:{
"flow"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"imap"
:
0
,
"msn"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"failed_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
,
"failed_udp"
:
0
},
"tx"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
}},
"flow_mgr"
:{
"closed_pruned"
:
0
,
"new_pruned"
:
0
,
"est_pruned"
:
0
,
"bypassed_pruned"
:
0
,
"flows_checked"
:
0
,
"flows_notimeout"
:
0
,
"flows_timeout"
:
0
,
"flows_timeout_inuse"
:
0
,
"flows_removed"
:
0
,
"rows_checked"
:
65536
,
"rows_skipped"
:
65536
,
"rows_empty"
:
0
,
"rows_busy"
:
0
,
"rows_maxlen"
:
0
},
"file_store"
:{
"open_files"
:
0
},
"dns"
:{
"memuse"
:
0
,
"memcap_state"
:
0
,
"memcap_global"
:
0
},
"http"
:{
"memuse"
:
35131
,
"memcap"
:
0
}}}
{
"timestamp"
:
"2018-02-06T11:07:29.000465+0100"
,
"event_type"
:
"stats"
,
"stats"
:{
"uptime"
:
401
,
"capture"
:{
"kernel_packets"
:
1
,
"kernel_drops"
:
0
},
"decoder"
:{
"pkts"
:
10
,
"bytes"
:
6852
,
"invalid"
:
0
,
"ipv4"
:
10
,
"ipv6"
:
0
,
"ethernet"
:
10
,
"raw"
:
0
,
"null"
:
0
,
"sll"
:
0
,
"tcp"
:
10
,
"udp"
:
0
,
"sctp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"ppp"
:
0
,
"pppoe"
:
0
,
"gre"
:
0
,
"vlan"
:
0
,
"vlan_qinq"
:
0
,
"ieee8021ah"
:
0
,
"teredo"
:
0
,
"ipv4_in_ipv6"
:
0
,
"ipv6_in_ipv6"
:
0
,
"mpls"
:
0
,
"avg_pkt_size"
:
685
,
"max_pkt_size"
:
1506
,
"erspan"
:
0
,
"ipraw"
:{
"invalid_ip_version"
:
0
},
"ltnull"
:{
"pkt_too_small"
:
0
,
"unsupported_type"
:
0
},
"dce"
:{
"pkt_too_small"
:
0
}},
"flow"
:{
"memcap"
:
0
,
"tcp"
:
1
,
"udp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"spare"
:
10000
,
"emerg_mode_entered"
:
0
,
"emerg_mode_over"
:
0
,
"tcp_reuse"
:
0
,
"memuse"
:
7074592
},
"defrag"
:{
"ipv4"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"ipv6"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"max_frag_hits"
:
0
},
"tcp"
:{
"sessions"
:
1
,
"ssn_memcap_drop"
:
0
,
"pseudo"
:
0
,
"pseudo_failed"
:
0
,
"invalid_checksum"
:
0
,
"no_flow"
:
0
,
"syn"
:
1
,
"synack"
:
1
,
"rst"
:
0
,
"segment_memcap_drop"
:
0
,
"stream_depth_reached"
:
0
,
"reassembly_gap"
:
0
,
"overlap"
:
0
,
"overlap_diff_data"
:
0
,
"insert_data_normal_fail"
:
0
,
"insert_data_overlap_fail"
:
0
,
"insert_list_fail"
:
0
,
"memuse"
:
6881280
,
"reassembly_memuse"
:
991232
},
"detect"
:{
"alert"
:
0
},
"app_layer"
:{
"flow"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"imap"
:
0
,
"msn"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"failed_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
,
"failed_udp"
:
0
},
"tx"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
}},
"flow_mgr"
:{
"closed_pruned"
:
0
,
"new_pruned"
:
0
,
"est_pruned"
:
0
,
"bypassed_pruned"
:
0
,
"flows_checked"
:
0
,
"flows_notimeout"
:
0
,
"flows_timeout"
:
0
,
"flows_timeout_inuse"
:
0
,
"flows_removed"
:
0
,
"rows_checked"
:
65536
,
"rows_skipped"
:
65536
,
"rows_empty"
:
0
,
"rows_busy"
:
0
,
"rows_maxlen"
:
0
},
"file_store"
:{
"open_files"
:
0
},
"dns"
:{
"memuse"
:
0
,
"memcap_state"
:
0
,
"memcap_global"
:
0
},
"http"
:{
"memuse"
:
35131
,
"memcap"
:
0
}}}
{
"timestamp"
:
"2018-02-06T11:07:36.000462+0100"
,
"event_type"
:
"stats"
,
"stats"
:{
"uptime"
:
408
,
"capture"
:{
"kernel_packets"
:
1
,
"kernel_drops"
:
0
},
"decoder"
:{
"pkts"
:
10
,
"bytes"
:
6852
,
"invalid"
:
0
,
"ipv4"
:
10
,
"ipv6"
:
0
,
"ethernet"
:
10
,
"raw"
:
0
,
"null"
:
0
,
"sll"
:
0
,
"tcp"
:
10
,
"udp"
:
0
,
"sctp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"ppp"
:
0
,
"pppoe"
:
0
,
"gre"
:
0
,
"vlan"
:
0
,
"vlan_qinq"
:
0
,
"ieee8021ah"
:
0
,
"teredo"
:
0
,
"ipv4_in_ipv6"
:
0
,
"ipv6_in_ipv6"
:
0
,
"mpls"
:
0
,
"avg_pkt_size"
:
685
,
"max_pkt_size"
:
1506
,
"erspan"
:
0
,
"ipraw"
:{
"invalid_ip_version"
:
0
},
"ltnull"
:{
"pkt_too_small"
:
0
,
"unsupported_type"
:
0
},
"dce"
:{
"pkt_too_small"
:
0
}},
"flow"
:{
"memcap"
:
0
,
"tcp"
:
1
,
"udp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"spare"
:
10000
,
"emerg_mode_entered"
:
0
,
"emerg_mode_over"
:
0
,
"tcp_reuse"
:
0
,
"memuse"
:
7074592
},
"defrag"
:{
"ipv4"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"ipv6"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"max_frag_hits"
:
0
},
"tcp"
:{
"sessions"
:
1
,
"ssn_memcap_drop"
:
0
,
"pseudo"
:
0
,
"pseudo_failed"
:
0
,
"invalid_checksum"
:
0
,
"no_flow"
:
0
,
"syn"
:
1
,
"synack"
:
1
,
"rst"
:
0
,
"segment_memcap_drop"
:
0
,
"stream_depth_reached"
:
0
,
"reassembly_gap"
:
0
,
"overlap"
:
0
,
"overlap_diff_data"
:
0
,
"insert_data_normal_fail"
:
0
,
"insert_data_overlap_fail"
:
0
,
"insert_list_fail"
:
0
,
"memuse"
:
6881280
,
"reassembly_memuse"
:
991232
},
"detect"
:{
"alert"
:
0
},
"app_layer"
:{
"flow"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"imap"
:
0
,
"msn"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"failed_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
,
"failed_udp"
:
0
},
"tx"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
}},
"flow_mgr"
:{
"closed_pruned"
:
0
,
"new_pruned"
:
0
,
"est_pruned"
:
0
,
"bypassed_pruned"
:
0
,
"flows_checked"
:
0
,
"flows_notimeout"
:
0
,
"flows_timeout"
:
0
,
"flows_timeout_inuse"
:
0
,
"flows_removed"
:
0
,
"rows_checked"
:
65536
,
"rows_skipped"
:
65536
,
"rows_empty"
:
0
,
"rows_busy"
:
0
,
"rows_maxlen"
:
0
},
"file_store"
:{
"open_files"
:
0
},
"dns"
:{
"memuse"
:
0
,
"memcap_state"
:
0
,
"memcap_global"
:
0
},
"http"
:{
"memuse"
:
35131
,
"memcap"
:
0
}}}
{
"timestamp"
:
"2018-02-06T11:07:44.000367+0100"
,
"event_type"
:
"stats"
,
"stats"
:{
"uptime"
:
416
,
"capture"
:{
"kernel_packets"
:
1
,
"kernel_drops"
:
0
},
"decoder"
:{
"pkts"
:
10
,
"bytes"
:
6852
,
"invalid"
:
0
,
"ipv4"
:
10
,
"ipv6"
:
0
,
"ethernet"
:
10
,
"raw"
:
0
,
"null"
:
0
,
"sll"
:
0
,
"tcp"
:
10
,
"udp"
:
0
,
"sctp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"ppp"
:
0
,
"pppoe"
:
0
,
"gre"
:
0
,
"vlan"
:
0
,
"vlan_qinq"
:
0
,
"ieee8021ah"
:
0
,
"teredo"
:
0
,
"ipv4_in_ipv6"
:
0
,
"ipv6_in_ipv6"
:
0
,
"mpls"
:
0
,
"avg_pkt_size"
:
685
,
"max_pkt_size"
:
1506
,
"erspan"
:
0
,
"ipraw"
:{
"invalid_ip_version"
:
0
},
"ltnull"
:{
"pkt_too_small"
:
0
,
"unsupported_type"
:
0
},
"dce"
:{
"pkt_too_small"
:
0
}},
"flow"
:{
"memcap"
:
0
,
"tcp"
:
1
,
"udp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"spare"
:
10000
,
"emerg_mode_entered"
:
0
,
"emerg_mode_over"
:
0
,
"tcp_reuse"
:
0
,
"memuse"
:
7074592
},
"defrag"
:{
"ipv4"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"ipv6"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"max_frag_hits"
:
0
},
"tcp"
:{
"sessions"
:
1
,
"ssn_memcap_drop"
:
0
,
"pseudo"
:
0
,
"pseudo_failed"
:
0
,
"invalid_checksum"
:
0
,
"no_flow"
:
0
,
"syn"
:
1
,
"synack"
:
1
,
"rst"
:
0
,
"segment_memcap_drop"
:
0
,
"stream_depth_reached"
:
0
,
"reassembly_gap"
:
0
,
"overlap"
:
0
,
"overlap_diff_data"
:
0
,
"insert_data_normal_fail"
:
0
,
"insert_data_overlap_fail"
:
0
,
"insert_list_fail"
:
0
,
"memuse"
:
6881280
,
"reassembly_memuse"
:
991232
},
"detect"
:{
"alert"
:
0
},
"app_layer"
:{
"flow"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"imap"
:
0
,
"msn"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"failed_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
,
"failed_udp"
:
0
},
"tx"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
}},
"flow_mgr"
:{
"closed_pruned"
:
0
,
"new_pruned"
:
0
,
"est_pruned"
:
0
,
"bypassed_pruned"
:
0
,
"flows_checked"
:
0
,
"flows_notimeout"
:
0
,
"flows_timeout"
:
0
,
"flows_timeout_inuse"
:
0
,
"flows_removed"
:
0
,
"rows_checked"
:
65536
,
"rows_skipped"
:
65536
,
"rows_empty"
:
0
,
"rows_busy"
:
0
,
"rows_maxlen"
:
0
},
"file_store"
:{
"open_files"
:
0
},
"dns"
:{
"memuse"
:
0
,
"memcap_state"
:
0
,
"memcap_global"
:
0
},
"http"
:{
"memuse"
:
35131
,
"memcap"
:
0
}}}
{
"timestamp"
:
"2018-02-06T11:07:51.000461+0100"
,
"event_type"
:
"stats"
,
"stats"
:{
"uptime"
:
423
,
"capture"
:{
"kernel_packets"
:
1
,
"kernel_drops"
:
0
},
"decoder"
:{
"pkts"
:
10
,
"bytes"
:
6852
,
"invalid"
:
0
,
"ipv4"
:
10
,
"ipv6"
:
0
,
"ethernet"
:
10
,
"raw"
:
0
,
"null"
:
0
,
"sll"
:
0
,
"tcp"
:
10
,
"udp"
:
0
,
"sctp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"ppp"
:
0
,
"pppoe"
:
0
,
"gre"
:
0
,
"vlan"
:
0
,
"vlan_qinq"
:
0
,
"ieee8021ah"
:
0
,
"teredo"
:
0
,
"ipv4_in_ipv6"
:
0
,
"ipv6_in_ipv6"
:
0
,
"mpls"
:
0
,
"avg_pkt_size"
:
685
,
"max_pkt_size"
:
1506
,
"erspan"
:
0
,
"ipraw"
:{
"invalid_ip_version"
:
0
},
"ltnull"
:{
"pkt_too_small"
:
0
,
"unsupported_type"
:
0
},
"dce"
:{
"pkt_too_small"
:
0
}},
"flow"
:{
"memcap"
:
0
,
"tcp"
:
1
,
"udp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"spare"
:
10000
,
"emerg_mode_entered"
:
0
,
"emerg_mode_over"
:
0
,
"tcp_reuse"
:
0
,
"memuse"
:
7074592
},
"defrag"
:{
"ipv4"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"ipv6"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"max_frag_hits"
:
0
},
"tcp"
:{
"sessions"
:
1
,
"ssn_memcap_drop"
:
0
,
"pseudo"
:
0
,
"pseudo_failed"
:
0
,
"invalid_checksum"
:
0
,
"no_flow"
:
0
,
"syn"
:
1
,
"synack"
:
1
,
"rst"
:
0
,
"segment_memcap_drop"
:
0
,
"stream_depth_reached"
:
0
,
"reassembly_gap"
:
0
,
"overlap"
:
0
,
"overlap_diff_data"
:
0
,
"insert_data_normal_fail"
:
0
,
"insert_data_overlap_fail"
:
0
,
"insert_list_fail"
:
0
,
"memuse"
:
6881280
,
"reassembly_memuse"
:
991232
},
"detect"
:{
"alert"
:
0
},
"app_layer"
:{
"flow"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"imap"
:
0
,
"msn"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"failed_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
,
"failed_udp"
:
0
},
"tx"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
}},
"flow_mgr"
:{
"closed_pruned"
:
0
,
"new_pruned"
:
0
,
"est_pruned"
:
0
,
"bypassed_pruned"
:
0
,
"flows_checked"
:
0
,
"flows_notimeout"
:
0
,
"flows_timeout"
:
0
,
"flows_timeout_inuse"
:
0
,
"flows_removed"
:
0
,
"rows_checked"
:
65536
,
"rows_skipped"
:
65536
,
"rows_empty"
:
0
,
"rows_busy"
:
0
,
"rows_maxlen"
:
0
},
"file_store"
:{
"open_files"
:
0
},
"dns"
:{
"memuse"
:
0
,
"memcap_state"
:
0
,
"memcap_global"
:
0
},
"http"
:{
"memuse"
:
35131
,
"memcap"
:
0
}}}
{
"timestamp"
:
"2018-02-06T11:07:58.000470+0100"
,
"event_type"
:
"stats"
,
"stats"
:{
"uptime"
:
430
,
"capture"
:{
"kernel_packets"
:
1
,
"kernel_drops"
:
0
},
"decoder"
:{
"pkts"
:
10
,
"bytes"
:
6852
,
"invalid"
:
0
,
"ipv4"
:
10
,
"ipv6"
:
0
,
"ethernet"
:
10
,
"raw"
:
0
,
"null"
:
0
,
"sll"
:
0
,
"tcp"
:
10
,
"udp"
:
0
,
"sctp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"ppp"
:
0
,
"pppoe"
:
0
,
"gre"
:
0
,
"vlan"
:
0
,
"vlan_qinq"
:
0
,
"ieee8021ah"
:
0
,
"teredo"
:
0
,
"ipv4_in_ipv6"
:
0
,
"ipv6_in_ipv6"
:
0
,
"mpls"
:
0
,
"avg_pkt_size"
:
685
,
"max_pkt_size"
:
1506
,
"erspan"
:
0
,
"ipraw"
:{
"invalid_ip_version"
:
0
},
"ltnull"
:{
"pkt_too_small"
:
0
,
"unsupported_type"
:
0
},
"dce"
:{
"pkt_too_small"
:
0
}},
"flow"
:{
"memcap"
:
0
,
"tcp"
:
1
,
"udp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"spare"
:
10000
,
"emerg_mode_entered"
:
0
,
"emerg_mode_over"
:
0
,
"tcp_reuse"
:
0
,
"memuse"
:
7074592
},
"defrag"
:{
"ipv4"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"ipv6"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"max_frag_hits"
:
0
},
"tcp"
:{
"sessions"
:
1
,
"ssn_memcap_drop"
:
0
,
"pseudo"
:
0
,
"pseudo_failed"
:
0
,
"invalid_checksum"
:
0
,
"no_flow"
:
0
,
"syn"
:
1
,
"synack"
:
1
,
"rst"
:
0
,
"segment_memcap_drop"
:
0
,
"stream_depth_reached"
:
0
,
"reassembly_gap"
:
0
,
"overlap"
:
0
,
"overlap_diff_data"
:
0
,
"insert_data_normal_fail"
:
0
,
"insert_data_overlap_fail"
:
0
,
"insert_list_fail"
:
0
,
"memuse"
:
6881280
,
"reassembly_memuse"
:
991232
},
"detect"
:{
"alert"
:
0
},
"app_layer"
:{
"flow"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"imap"
:
0
,
"msn"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"failed_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
,
"failed_udp"
:
0
},
"tx"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
}},
"flow_mgr"
:{
"closed_pruned"
:
0
,
"new_pruned"
:
0
,
"est_pruned"
:
0
,
"bypassed_pruned"
:
0
,
"flows_checked"
:
0
,
"flows_notimeout"
:
0
,
"flows_timeout"
:
0
,
"flows_timeout_inuse"
:
0
,
"flows_removed"
:
0
,
"rows_checked"
:
65536
,
"rows_skipped"
:
65536
,
"rows_empty"
:
0
,
"rows_busy"
:
0
,
"rows_maxlen"
:
0
},
"file_store"
:{
"open_files"
:
0
},
"dns"
:{
"memuse"
:
0
,
"memcap_state"
:
0
,
"memcap_global"
:
0
},
"http"
:{
"memuse"
:
35131
,
"memcap"
:
0
}}}
{
"timestamp"
:
"2018-02-06T11:08:05.000291+0100"
,
"event_type"
:
"stats"
,
"stats"
:{
"uptime"
:
437
,
"capture"
:{
"kernel_packets"
:
1
,
"kernel_drops"
:
0
},
"decoder"
:{
"pkts"
:
10
,
"bytes"
:
6852
,
"invalid"
:
0
,
"ipv4"
:
10
,
"ipv6"
:
0
,
"ethernet"
:
10
,
"raw"
:
0
,
"null"
:
0
,
"sll"
:
0
,
"tcp"
:
10
,
"udp"
:
0
,
"sctp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"ppp"
:
0
,
"pppoe"
:
0
,
"gre"
:
0
,
"vlan"
:
0
,
"vlan_qinq"
:
0
,
"ieee8021ah"
:
0
,
"teredo"
:
0
,
"ipv4_in_ipv6"
:
0
,
"ipv6_in_ipv6"
:
0
,
"mpls"
:
0
,
"avg_pkt_size"
:
685
,
"max_pkt_size"
:
1506
,
"erspan"
:
0
,
"ipraw"
:{
"invalid_ip_version"
:
0
},
"ltnull"
:{
"pkt_too_small"
:
0
,
"unsupported_type"
:
0
},
"dce"
:{
"pkt_too_small"
:
0
}},
"flow"
:{
"memcap"
:
0
,
"tcp"
:
1
,
"udp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"spare"
:
10000
,
"emerg_mode_entered"
:
0
,
"emerg_mode_over"
:
0
,
"tcp_reuse"
:
0
,
"memuse"
:
7074592
},
"defrag"
:{
"ipv4"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"ipv6"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"max_frag_hits"
:
0
},
"tcp"
:{
"sessions"
:
1
,
"ssn_memcap_drop"
:
0
,
"pseudo"
:
0
,
"pseudo_failed"
:
0
,
"invalid_checksum"
:
0
,
"no_flow"
:
0
,
"syn"
:
1
,
"synack"
:
1
,
"rst"
:
0
,
"segment_memcap_drop"
:
0
,
"stream_depth_reached"
:
0
,
"reassembly_gap"
:
0
,
"overlap"
:
0
,
"overlap_diff_data"
:
0
,
"insert_data_normal_fail"
:
0
,
"insert_data_overlap_fail"
:
0
,
"insert_list_fail"
:
0
,
"memuse"
:
6881280
,
"reassembly_memuse"
:
991232
},
"detect"
:{
"alert"
:
0
},
"app_layer"
:{
"flow"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"imap"
:
0
,
"msn"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"failed_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
,
"failed_udp"
:
0
},
"tx"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
}},
"flow_mgr"
:{
"closed_pruned"
:
0
,
"new_pruned"
:
0
,
"est_pruned"
:
0
,
"bypassed_pruned"
:
0
,
"flows_checked"
:
0
,
"flows_notimeout"
:
0
,
"flows_timeout"
:
0
,
"flows_timeout_inuse"
:
0
,
"flows_removed"
:
0
,
"rows_checked"
:
65536
,
"rows_skipped"
:
65536
,
"rows_empty"
:
0
,
"rows_busy"
:
0
,
"rows_maxlen"
:
0
},
"file_store"
:{
"open_files"
:
0
},
"dns"
:{
"memuse"
:
0
,
"memcap_state"
:
0
,
"memcap_global"
:
0
},
"http"
:{
"memuse"
:
35131
,
"memcap"
:
0
}}}
{
"timestamp"
:
"2018-02-06T11:08:12.000422+0100"
,
"event_type"
:
"stats"
,
"stats"
:{
"uptime"
:
444
,
"capture"
:{
"kernel_packets"
:
1
,
"kernel_drops"
:
0
},
"decoder"
:{
"pkts"
:
10
,
"bytes"
:
6852
,
"invalid"
:
0
,
"ipv4"
:
10
,
"ipv6"
:
0
,
"ethernet"
:
10
,
"raw"
:
0
,
"null"
:
0
,
"sll"
:
0
,
"tcp"
:
10
,
"udp"
:
0
,
"sctp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"ppp"
:
0
,
"pppoe"
:
0
,
"gre"
:
0
,
"vlan"
:
0
,
"vlan_qinq"
:
0
,
"ieee8021ah"
:
0
,
"teredo"
:
0
,
"ipv4_in_ipv6"
:
0
,
"ipv6_in_ipv6"
:
0
,
"mpls"
:
0
,
"avg_pkt_size"
:
685
,
"max_pkt_size"
:
1506
,
"erspan"
:
0
,
"ipraw"
:{
"invalid_ip_version"
:
0
},
"ltnull"
:{
"pkt_too_small"
:
0
,
"unsupported_type"
:
0
},
"dce"
:{
"pkt_too_small"
:
0
}},
"flow"
:{
"memcap"
:
0
,
"tcp"
:
1
,
"udp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"spare"
:
10000
,
"emerg_mode_entered"
:
0
,
"emerg_mode_over"
:
0
,
"tcp_reuse"
:
0
,
"memuse"
:
7074592
},
"defrag"
:{
"ipv4"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"ipv6"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"max_frag_hits"
:
0
},
"tcp"
:{
"sessions"
:
1
,
"ssn_memcap_drop"
:
0
,
"pseudo"
:
0
,
"pseudo_failed"
:
0
,
"invalid_checksum"
:
0
,
"no_flow"
:
0
,
"syn"
:
1
,
"synack"
:
1
,
"rst"
:
0
,
"segment_memcap_drop"
:
0
,
"stream_depth_reached"
:
0
,
"reassembly_gap"
:
0
,
"overlap"
:
0
,
"overlap_diff_data"
:
0
,
"insert_data_normal_fail"
:
0
,
"insert_data_overlap_fail"
:
0
,
"insert_list_fail"
:
0
,
"memuse"
:
6881280
,
"reassembly_memuse"
:
991232
},
"detect"
:{
"alert"
:
0
},
"app_layer"
:{
"flow"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"imap"
:
0
,
"msn"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"failed_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
,
"failed_udp"
:
0
},
"tx"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
}},
"flow_mgr"
:{
"closed_pruned"
:
0
,
"new_pruned"
:
0
,
"est_pruned"
:
0
,
"bypassed_pruned"
:
0
,
"flows_checked"
:
0
,
"flows_notimeout"
:
0
,
"flows_timeout"
:
0
,
"flows_timeout_inuse"
:
0
,
"flows_removed"
:
0
,
"rows_checked"
:
65536
,
"rows_skipped"
:
65536
,
"rows_empty"
:
0
,
"rows_busy"
:
0
,
"rows_maxlen"
:
0
},
"file_store"
:{
"open_files"
:
0
},
"dns"
:{
"memuse"
:
0
,
"memcap_state"
:
0
,
"memcap_global"
:
0
},
"http"
:{
"memuse"
:
35131
,
"memcap"
:
0
}}}
{
"timestamp"
:
"2018-02-06T11:08:19.000457+0100"
,
"event_type"
:
"stats"
,
"stats"
:{
"uptime"
:
451
,
"capture"
:{
"kernel_packets"
:
1
,
"kernel_drops"
:
0
},
"decoder"
:{
"pkts"
:
10
,
"bytes"
:
6852
,
"invalid"
:
0
,
"ipv4"
:
10
,
"ipv6"
:
0
,
"ethernet"
:
10
,
"raw"
:
0
,
"null"
:
0
,
"sll"
:
0
,
"tcp"
:
10
,
"udp"
:
0
,
"sctp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"ppp"
:
0
,
"pppoe"
:
0
,
"gre"
:
0
,
"vlan"
:
0
,
"vlan_qinq"
:
0
,
"ieee8021ah"
:
0
,
"teredo"
:
0
,
"ipv4_in_ipv6"
:
0
,
"ipv6_in_ipv6"
:
0
,
"mpls"
:
0
,
"avg_pkt_size"
:
685
,
"max_pkt_size"
:
1506
,
"erspan"
:
0
,
"ipraw"
:{
"invalid_ip_version"
:
0
},
"ltnull"
:{
"pkt_too_small"
:
0
,
"unsupported_type"
:
0
},
"dce"
:{
"pkt_too_small"
:
0
}},
"flow"
:{
"memcap"
:
0
,
"tcp"
:
1
,
"udp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"spare"
:
10000
,
"emerg_mode_entered"
:
0
,
"emerg_mode_over"
:
0
,
"tcp_reuse"
:
0
,
"memuse"
:
7074592
},
"defrag"
:{
"ipv4"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"ipv6"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"max_frag_hits"
:
0
},
"tcp"
:{
"sessions"
:
1
,
"ssn_memcap_drop"
:
0
,
"pseudo"
:
0
,
"pseudo_failed"
:
0
,
"invalid_checksum"
:
0
,
"no_flow"
:
0
,
"syn"
:
1
,
"synack"
:
1
,
"rst"
:
0
,
"segment_memcap_drop"
:
0
,
"stream_depth_reached"
:
0
,
"reassembly_gap"
:
0
,
"overlap"
:
0
,
"overlap_diff_data"
:
0
,
"insert_data_normal_fail"
:
0
,
"insert_data_overlap_fail"
:
0
,
"insert_list_fail"
:
0
,
"memuse"
:
6881280
,
"reassembly_memuse"
:
991232
},
"detect"
:{
"alert"
:
0
},
"app_layer"
:{
"flow"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"imap"
:
0
,
"msn"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"failed_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
,
"failed_udp"
:
0
},
"tx"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
}},
"flow_mgr"
:{
"closed_pruned"
:
0
,
"new_pruned"
:
0
,
"est_pruned"
:
0
,
"bypassed_pruned"
:
0
,
"flows_checked"
:
0
,
"flows_notimeout"
:
0
,
"flows_timeout"
:
0
,
"flows_timeout_inuse"
:
0
,
"flows_removed"
:
0
,
"rows_checked"
:
65536
,
"rows_skipped"
:
65536
,
"rows_empty"
:
0
,
"rows_busy"
:
0
,
"rows_maxlen"
:
0
},
"file_store"
:{
"open_files"
:
0
},
"dns"
:{
"memuse"
:
0
,
"memcap_state"
:
0
,
"memcap_global"
:
0
},
"http"
:{
"memuse"
:
35131
,
"memcap"
:
0
}}}
{
"timestamp"
:
"2018-02-06T11:08:26.000470+0100"
,
"event_type"
:
"stats"
,
"stats"
:{
"uptime"
:
458
,
"capture"
:{
"kernel_packets"
:
1
,
"kernel_drops"
:
0
},
"decoder"
:{
"pkts"
:
10
,
"bytes"
:
6852
,
"invalid"
:
0
,
"ipv4"
:
10
,
"ipv6"
:
0
,
"ethernet"
:
10
,
"raw"
:
0
,
"null"
:
0
,
"sll"
:
0
,
"tcp"
:
10
,
"udp"
:
0
,
"sctp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"ppp"
:
0
,
"pppoe"
:
0
,
"gre"
:
0
,
"vlan"
:
0
,
"vlan_qinq"
:
0
,
"ieee8021ah"
:
0
,
"teredo"
:
0
,
"ipv4_in_ipv6"
:
0
,
"ipv6_in_ipv6"
:
0
,
"mpls"
:
0
,
"avg_pkt_size"
:
685
,
"max_pkt_size"
:
1506
,
"erspan"
:
0
,
"ipraw"
:{
"invalid_ip_version"
:
0
},
"ltnull"
:{
"pkt_too_small"
:
0
,
"unsupported_type"
:
0
},
"dce"
:{
"pkt_too_small"
:
0
}},
"flow"
:{
"memcap"
:
0
,
"tcp"
:
1
,
"udp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"spare"
:
10000
,
"emerg_mode_entered"
:
0
,
"emerg_mode_over"
:
0
,
"tcp_reuse"
:
0
,
"memuse"
:
7074592
},
"defrag"
:{
"ipv4"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"ipv6"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"max_frag_hits"
:
0
},
"tcp"
:{
"sessions"
:
1
,
"ssn_memcap_drop"
:
0
,
"pseudo"
:
0
,
"pseudo_failed"
:
0
,
"invalid_checksum"
:
0
,
"no_flow"
:
0
,
"syn"
:
1
,
"synack"
:
1
,
"rst"
:
0
,
"segment_memcap_drop"
:
0
,
"stream_depth_reached"
:
0
,
"reassembly_gap"
:
0
,
"overlap"
:
0
,
"overlap_diff_data"
:
0
,
"insert_data_normal_fail"
:
0
,
"insert_data_overlap_fail"
:
0
,
"insert_list_fail"
:
0
,
"memuse"
:
6881280
,
"reassembly_memuse"
:
991232
},
"detect"
:{
"alert"
:
0
},
"app_layer"
:{
"flow"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"imap"
:
0
,
"msn"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"failed_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
,
"failed_udp"
:
0
},
"tx"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
}},
"flow_mgr"
:{
"closed_pruned"
:
0
,
"new_pruned"
:
0
,
"est_pruned"
:
0
,
"bypassed_pruned"
:
0
,
"flows_checked"
:
0
,
"flows_notimeout"
:
0
,
"flows_timeout"
:
0
,
"flows_timeout_inuse"
:
0
,
"flows_removed"
:
0
,
"rows_checked"
:
65536
,
"rows_skipped"
:
65536
,
"rows_empty"
:
0
,
"rows_busy"
:
0
,
"rows_maxlen"
:
0
},
"file_store"
:{
"open_files"
:
0
},
"dns"
:{
"memuse"
:
0
,
"memcap_state"
:
0
,
"memcap_global"
:
0
},
"http"
:{
"memuse"
:
35131
,
"memcap"
:
0
}}}
{
"timestamp"
:
"2018-02-06T11:08:33.000447+0100"
,
"event_type"
:
"stats"
,
"stats"
:{
"uptime"
:
465
,
"capture"
:{
"kernel_packets"
:
1
,
"kernel_drops"
:
0
},
"decoder"
:{
"pkts"
:
10
,
"bytes"
:
6852
,
"invalid"
:
0
,
"ipv4"
:
10
,
"ipv6"
:
0
,
"ethernet"
:
10
,
"raw"
:
0
,
"null"
:
0
,
"sll"
:
0
,
"tcp"
:
10
,
"udp"
:
0
,
"sctp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"ppp"
:
0
,
"pppoe"
:
0
,
"gre"
:
0
,
"vlan"
:
0
,
"vlan_qinq"
:
0
,
"ieee8021ah"
:
0
,
"teredo"
:
0
,
"ipv4_in_ipv6"
:
0
,
"ipv6_in_ipv6"
:
0
,
"mpls"
:
0
,
"avg_pkt_size"
:
685
,
"max_pkt_size"
:
1506
,
"erspan"
:
0
,
"ipraw"
:{
"invalid_ip_version"
:
0
},
"ltnull"
:{
"pkt_too_small"
:
0
,
"unsupported_type"
:
0
},
"dce"
:{
"pkt_too_small"
:
0
}},
"flow"
:{
"memcap"
:
0
,
"tcp"
:
1
,
"udp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"spare"
:
10000
,
"emerg_mode_entered"
:
0
,
"emerg_mode_over"
:
0
,
"tcp_reuse"
:
0
,
"memuse"
:
7074592
},
"defrag"
:{
"ipv4"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"ipv6"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"max_frag_hits"
:
0
},
"tcp"
:{
"sessions"
:
1
,
"ssn_memcap_drop"
:
0
,
"pseudo"
:
0
,
"pseudo_failed"
:
0
,
"invalid_checksum"
:
0
,
"no_flow"
:
0
,
"syn"
:
1
,
"synack"
:
1
,
"rst"
:
0
,
"segment_memcap_drop"
:
0
,
"stream_depth_reached"
:
0
,
"reassembly_gap"
:
0
,
"overlap"
:
0
,
"overlap_diff_data"
:
0
,
"insert_data_normal_fail"
:
0
,
"insert_data_overlap_fail"
:
0
,
"insert_list_fail"
:
0
,
"memuse"
:
6881280
,
"reassembly_memuse"
:
991232
},
"detect"
:{
"alert"
:
0
},
"app_layer"
:{
"flow"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"imap"
:
0
,
"msn"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"failed_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
,
"failed_udp"
:
0
},
"tx"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
}},
"flow_mgr"
:{
"closed_pruned"
:
0
,
"new_pruned"
:
0
,
"est_pruned"
:
0
,
"bypassed_pruned"
:
0
,
"flows_checked"
:
0
,
"flows_notimeout"
:
0
,
"flows_timeout"
:
0
,
"flows_timeout_inuse"
:
0
,
"flows_removed"
:
0
,
"rows_checked"
:
65536
,
"rows_skipped"
:
65536
,
"rows_empty"
:
0
,
"rows_busy"
:
0
,
"rows_maxlen"
:
0
},
"file_store"
:{
"open_files"
:
0
},
"dns"
:{
"memuse"
:
0
,
"memcap_state"
:
0
,
"memcap_global"
:
0
},
"http"
:{
"memuse"
:
35131
,
"memcap"
:
0
}}}
{
"timestamp"
:
"2018-02-06T11:08:40.000394+0100"
,
"event_type"
:
"stats"
,
"stats"
:{
"uptime"
:
472
,
"capture"
:{
"kernel_packets"
:
1
,
"kernel_drops"
:
0
},
"decoder"
:{
"pkts"
:
10
,
"bytes"
:
6852
,
"invalid"
:
0
,
"ipv4"
:
10
,
"ipv6"
:
0
,
"ethernet"
:
10
,
"raw"
:
0
,
"null"
:
0
,
"sll"
:
0
,
"tcp"
:
10
,
"udp"
:
0
,
"sctp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"ppp"
:
0
,
"pppoe"
:
0
,
"gre"
:
0
,
"vlan"
:
0
,
"vlan_qinq"
:
0
,
"ieee8021ah"
:
0
,
"teredo"
:
0
,
"ipv4_in_ipv6"
:
0
,
"ipv6_in_ipv6"
:
0
,
"mpls"
:
0
,
"avg_pkt_size"
:
685
,
"max_pkt_size"
:
1506
,
"erspan"
:
0
,
"ipraw"
:{
"invalid_ip_version"
:
0
},
"ltnull"
:{
"pkt_too_small"
:
0
,
"unsupported_type"
:
0
},
"dce"
:{
"pkt_too_small"
:
0
}},
"flow"
:{
"memcap"
:
0
,
"tcp"
:
1
,
"udp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"spare"
:
10000
,
"emerg_mode_entered"
:
0
,
"emerg_mode_over"
:
0
,
"tcp_reuse"
:
0
,
"memuse"
:
7074592
},
"defrag"
:{
"ipv4"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"ipv6"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"max_frag_hits"
:
0
},
"tcp"
:{
"sessions"
:
1
,
"ssn_memcap_drop"
:
0
,
"pseudo"
:
0
,
"pseudo_failed"
:
0
,
"invalid_checksum"
:
0
,
"no_flow"
:
0
,
"syn"
:
1
,
"synack"
:
1
,
"rst"
:
0
,
"segment_memcap_drop"
:
0
,
"stream_depth_reached"
:
0
,
"reassembly_gap"
:
0
,
"overlap"
:
0
,
"overlap_diff_data"
:
0
,
"insert_data_normal_fail"
:
0
,
"insert_data_overlap_fail"
:
0
,
"insert_list_fail"
:
0
,
"memuse"
:
6881280
,
"reassembly_memuse"
:
991232
},
"detect"
:{
"alert"
:
0
},
"app_layer"
:{
"flow"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"imap"
:
0
,
"msn"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"failed_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
,
"failed_udp"
:
0
},
"tx"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
}},
"flow_mgr"
:{
"closed_pruned"
:
0
,
"new_pruned"
:
0
,
"est_pruned"
:
0
,
"bypassed_pruned"
:
0
,
"flows_checked"
:
0
,
"flows_notimeout"
:
0
,
"flows_timeout"
:
0
,
"flows_timeout_inuse"
:
0
,
"flows_removed"
:
0
,
"rows_checked"
:
65536
,
"rows_skipped"
:
65536
,
"rows_empty"
:
0
,
"rows_busy"
:
0
,
"rows_maxlen"
:
0
},
"file_store"
:{
"open_files"
:
0
},
"dns"
:{
"memuse"
:
0
,
"memcap_state"
:
0
,
"memcap_global"
:
0
},
"http"
:{
"memuse"
:
35131
,
"memcap"
:
0
}}}
{
"timestamp"
:
"2018-02-06T11:08:47.000468+0100"
,
"event_type"
:
"stats"
,
"stats"
:{
"uptime"
:
479
,
"capture"
:{
"kernel_packets"
:
1
,
"kernel_drops"
:
0
},
"decoder"
:{
"pkts"
:
10
,
"bytes"
:
6852
,
"invalid"
:
0
,
"ipv4"
:
10
,
"ipv6"
:
0
,
"ethernet"
:
10
,
"raw"
:
0
,
"null"
:
0
,
"sll"
:
0
,
"tcp"
:
10
,
"udp"
:
0
,
"sctp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"ppp"
:
0
,
"pppoe"
:
0
,
"gre"
:
0
,
"vlan"
:
0
,
"vlan_qinq"
:
0
,
"ieee8021ah"
:
0
,
"teredo"
:
0
,
"ipv4_in_ipv6"
:
0
,
"ipv6_in_ipv6"
:
0
,
"mpls"
:
0
,
"avg_pkt_size"
:
685
,
"max_pkt_size"
:
1506
,
"erspan"
:
0
,
"ipraw"
:{
"invalid_ip_version"
:
0
},
"ltnull"
:{
"pkt_too_small"
:
0
,
"unsupported_type"
:
0
},
"dce"
:{
"pkt_too_small"
:
0
}},
"flow"
:{
"memcap"
:
0
,
"tcp"
:
1
,
"udp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"spare"
:
10000
,
"emerg_mode_entered"
:
0
,
"emerg_mode_over"
:
0
,
"tcp_reuse"
:
0
,
"memuse"
:
7074592
},
"defrag"
:{
"ipv4"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"ipv6"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"max_frag_hits"
:
0
},
"tcp"
:{
"sessions"
:
1
,
"ssn_memcap_drop"
:
0
,
"pseudo"
:
0
,
"pseudo_failed"
:
0
,
"invalid_checksum"
:
0
,
"no_flow"
:
0
,
"syn"
:
1
,
"synack"
:
1
,
"rst"
:
0
,
"segment_memcap_drop"
:
0
,
"stream_depth_reached"
:
0
,
"reassembly_gap"
:
0
,
"overlap"
:
0
,
"overlap_diff_data"
:
0
,
"insert_data_normal_fail"
:
0
,
"insert_data_overlap_fail"
:
0
,
"insert_list_fail"
:
0
,
"memuse"
:
6881280
,
"reassembly_memuse"
:
991232
},
"detect"
:{
"alert"
:
0
},
"app_layer"
:{
"flow"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"imap"
:
0
,
"msn"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"failed_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
,
"failed_udp"
:
0
},
"tx"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
}},
"flow_mgr"
:{
"closed_pruned"
:
0
,
"new_pruned"
:
0
,
"est_pruned"
:
0
,
"bypassed_pruned"
:
0
,
"flows_checked"
:
0
,
"flows_notimeout"
:
0
,
"flows_timeout"
:
0
,
"flows_timeout_inuse"
:
0
,
"flows_removed"
:
0
,
"rows_checked"
:
65536
,
"rows_skipped"
:
65536
,
"rows_empty"
:
0
,
"rows_busy"
:
0
,
"rows_maxlen"
:
0
},
"file_store"
:{
"open_files"
:
0
},
"dns"
:{
"memuse"
:
0
,
"memcap_state"
:
0
,
"memcap_global"
:
0
},
"http"
:{
"memuse"
:
35131
,
"memcap"
:
0
}}}
{
"timestamp"
:
"2018-02-06T11:08:54.000425+0100"
,
"event_type"
:
"stats"
,
"stats"
:{
"uptime"
:
486
,
"capture"
:{
"kernel_packets"
:
1
,
"kernel_drops"
:
0
},
"decoder"
:{
"pkts"
:
10
,
"bytes"
:
6852
,
"invalid"
:
0
,
"ipv4"
:
10
,
"ipv6"
:
0
,
"ethernet"
:
10
,
"raw"
:
0
,
"null"
:
0
,
"sll"
:
0
,
"tcp"
:
10
,
"udp"
:
0
,
"sctp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"ppp"
:
0
,
"pppoe"
:
0
,
"gre"
:
0
,
"vlan"
:
0
,
"vlan_qinq"
:
0
,
"ieee8021ah"
:
0
,
"teredo"
:
0
,
"ipv4_in_ipv6"
:
0
,
"ipv6_in_ipv6"
:
0
,
"mpls"
:
0
,
"avg_pkt_size"
:
685
,
"max_pkt_size"
:
1506
,
"erspan"
:
0
,
"ipraw"
:{
"invalid_ip_version"
:
0
},
"ltnull"
:{
"pkt_too_small"
:
0
,
"unsupported_type"
:
0
},
"dce"
:{
"pkt_too_small"
:
0
}},
"flow"
:{
"memcap"
:
0
,
"tcp"
:
1
,
"udp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"spare"
:
10000
,
"emerg_mode_entered"
:
0
,
"emerg_mode_over"
:
0
,
"tcp_reuse"
:
0
,
"memuse"
:
7074592
},
"defrag"
:{
"ipv4"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"ipv6"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"max_frag_hits"
:
0
},
"tcp"
:{
"sessions"
:
1
,
"ssn_memcap_drop"
:
0
,
"pseudo"
:
0
,
"pseudo_failed"
:
0
,
"invalid_checksum"
:
0
,
"no_flow"
:
0
,
"syn"
:
1
,
"synack"
:
1
,
"rst"
:
0
,
"segment_memcap_drop"
:
0
,
"stream_depth_reached"
:
0
,
"reassembly_gap"
:
0
,
"overlap"
:
0
,
"overlap_diff_data"
:
0
,
"insert_data_normal_fail"
:
0
,
"insert_data_overlap_fail"
:
0
,
"insert_list_fail"
:
0
,
"memuse"
:
6881280
,
"reassembly_memuse"
:
991232
},
"detect"
:{
"alert"
:
0
},
"app_layer"
:{
"flow"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"imap"
:
0
,
"msn"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"failed_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
,
"failed_udp"
:
0
},
"tx"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
}},
"flow_mgr"
:{
"closed_pruned"
:
0
,
"new_pruned"
:
0
,
"est_pruned"
:
0
,
"bypassed_pruned"
:
0
,
"flows_checked"
:
0
,
"flows_notimeout"
:
0
,
"flows_timeout"
:
0
,
"flows_timeout_inuse"
:
0
,
"flows_removed"
:
0
,
"rows_checked"
:
65536
,
"rows_skipped"
:
65536
,
"rows_empty"
:
0
,
"rows_busy"
:
0
,
"rows_maxlen"
:
0
},
"file_store"
:{
"open_files"
:
0
},
"dns"
:{
"memuse"
:
0
,
"memcap_state"
:
0
,
"memcap_global"
:
0
},
"http"
:{
"memuse"
:
35131
,
"memcap"
:
0
}}}
{
"timestamp"
:
"2018-02-06T11:09:01.000396+0100"
,
"event_type"
:
"stats"
,
"stats"
:{
"uptime"
:
493
,
"capture"
:{
"kernel_packets"
:
1
,
"kernel_drops"
:
0
},
"decoder"
:{
"pkts"
:
10
,
"bytes"
:
6852
,
"invalid"
:
0
,
"ipv4"
:
10
,
"ipv6"
:
0
,
"ethernet"
:
10
,
"raw"
:
0
,
"null"
:
0
,
"sll"
:
0
,
"tcp"
:
10
,
"udp"
:
0
,
"sctp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"ppp"
:
0
,
"pppoe"
:
0
,
"gre"
:
0
,
"vlan"
:
0
,
"vlan_qinq"
:
0
,
"ieee8021ah"
:
0
,
"teredo"
:
0
,
"ipv4_in_ipv6"
:
0
,
"ipv6_in_ipv6"
:
0
,
"mpls"
:
0
,
"avg_pkt_size"
:
685
,
"max_pkt_size"
:
1506
,
"erspan"
:
0
,
"ipraw"
:{
"invalid_ip_version"
:
0
},
"ltnull"
:{
"pkt_too_small"
:
0
,
"unsupported_type"
:
0
},
"dce"
:{
"pkt_too_small"
:
0
}},
"flow"
:{
"memcap"
:
0
,
"tcp"
:
1
,
"udp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"spare"
:
10000
,
"emerg_mode_entered"
:
0
,
"emerg_mode_over"
:
0
,
"tcp_reuse"
:
0
,
"memuse"
:
7074592
},
"defrag"
:{
"ipv4"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"ipv6"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"max_frag_hits"
:
0
},
"tcp"
:{
"sessions"
:
1
,
"ssn_memcap_drop"
:
0
,
"pseudo"
:
0
,
"pseudo_failed"
:
0
,
"invalid_checksum"
:
0
,
"no_flow"
:
0
,
"syn"
:
1
,
"synack"
:
1
,
"rst"
:
0
,
"segment_memcap_drop"
:
0
,
"stream_depth_reached"
:
0
,
"reassembly_gap"
:
0
,
"overlap"
:
0
,
"overlap_diff_data"
:
0
,
"insert_data_normal_fail"
:
0
,
"insert_data_overlap_fail"
:
0
,
"insert_list_fail"
:
0
,
"memuse"
:
6881280
,
"reassembly_memuse"
:
991232
},
"detect"
:{
"alert"
:
0
},
"app_layer"
:{
"flow"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"imap"
:
0
,
"msn"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"failed_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
,
"failed_udp"
:
0
},
"tx"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
}},
"flow_mgr"
:{
"closed_pruned"
:
0
,
"new_pruned"
:
0
,
"est_pruned"
:
0
,
"bypassed_pruned"
:
0
,
"flows_checked"
:
0
,
"flows_notimeout"
:
0
,
"flows_timeout"
:
0
,
"flows_timeout_inuse"
:
0
,
"flows_removed"
:
0
,
"rows_checked"
:
65536
,
"rows_skipped"
:
65536
,
"rows_empty"
:
0
,
"rows_busy"
:
0
,
"rows_maxlen"
:
0
},
"file_store"
:{
"open_files"
:
0
},
"dns"
:{
"memuse"
:
0
,
"memcap_state"
:
0
,
"memcap_global"
:
0
},
"http"
:{
"memuse"
:
35131
,
"memcap"
:
0
}}}
{
"timestamp"
:
"2018-02-06T11:09:08.000309+0100"
,
"event_type"
:
"stats"
,
"stats"
:{
"uptime"
:
500
,
"capture"
:{
"kernel_packets"
:
1
,
"kernel_drops"
:
0
},
"decoder"
:{
"pkts"
:
10
,
"bytes"
:
6852
,
"invalid"
:
0
,
"ipv4"
:
10
,
"ipv6"
:
0
,
"ethernet"
:
10
,
"raw"
:
0
,
"null"
:
0
,
"sll"
:
0
,
"tcp"
:
10
,
"udp"
:
0
,
"sctp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"ppp"
:
0
,
"pppoe"
:
0
,
"gre"
:
0
,
"vlan"
:
0
,
"vlan_qinq"
:
0
,
"ieee8021ah"
:
0
,
"teredo"
:
0
,
"ipv4_in_ipv6"
:
0
,
"ipv6_in_ipv6"
:
0
,
"mpls"
:
0
,
"avg_pkt_size"
:
685
,
"max_pkt_size"
:
1506
,
"erspan"
:
0
,
"ipraw"
:{
"invalid_ip_version"
:
0
},
"ltnull"
:{
"pkt_too_small"
:
0
,
"unsupported_type"
:
0
},
"dce"
:{
"pkt_too_small"
:
0
}},
"flow"
:{
"memcap"
:
0
,
"tcp"
:
1
,
"udp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"spare"
:
10000
,
"emerg_mode_entered"
:
0
,
"emerg_mode_over"
:
0
,
"tcp_reuse"
:
0
,
"memuse"
:
7074592
},
"defrag"
:{
"ipv4"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"ipv6"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"max_frag_hits"
:
0
},
"tcp"
:{
"sessions"
:
1
,
"ssn_memcap_drop"
:
0
,
"pseudo"
:
0
,
"pseudo_failed"
:
0
,
"invalid_checksum"
:
0
,
"no_flow"
:
0
,
"syn"
:
1
,
"synack"
:
1
,
"rst"
:
0
,
"segment_memcap_drop"
:
0
,
"stream_depth_reached"
:
0
,
"reassembly_gap"
:
0
,
"overlap"
:
0
,
"overlap_diff_data"
:
0
,
"insert_data_normal_fail"
:
0
,
"insert_data_overlap_fail"
:
0
,
"insert_list_fail"
:
0
,
"memuse"
:
6881280
,
"reassembly_memuse"
:
991232
},
"detect"
:{
"alert"
:
0
},
"app_layer"
:{
"flow"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"imap"
:
0
,
"msn"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"failed_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
,
"failed_udp"
:
0
},
"tx"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
}},
"flow_mgr"
:{
"closed_pruned"
:
0
,
"new_pruned"
:
0
,
"est_pruned"
:
0
,
"bypassed_pruned"
:
0
,
"flows_checked"
:
0
,
"flows_notimeout"
:
0
,
"flows_timeout"
:
0
,
"flows_timeout_inuse"
:
0
,
"flows_removed"
:
0
,
"rows_checked"
:
65536
,
"rows_skipped"
:
65536
,
"rows_empty"
:
0
,
"rows_busy"
:
0
,
"rows_maxlen"
:
0
},
"file_store"
:{
"open_files"
:
0
},
"dns"
:{
"memuse"
:
0
,
"memcap_state"
:
0
,
"memcap_global"
:
0
},
"http"
:{
"memuse"
:
35131
,
"memcap"
:
0
}}}
{
"timestamp"
:
"2018-02-06T11:09:15.000471+0100"
,
"event_type"
:
"stats"
,
"stats"
:{
"uptime"
:
507
,
"capture"
:{
"kernel_packets"
:
1
,
"kernel_drops"
:
0
},
"decoder"
:{
"pkts"
:
10
,
"bytes"
:
6852
,
"invalid"
:
0
,
"ipv4"
:
10
,
"ipv6"
:
0
,
"ethernet"
:
10
,
"raw"
:
0
,
"null"
:
0
,
"sll"
:
0
,
"tcp"
:
10
,
"udp"
:
0
,
"sctp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"ppp"
:
0
,
"pppoe"
:
0
,
"gre"
:
0
,
"vlan"
:
0
,
"vlan_qinq"
:
0
,
"ieee8021ah"
:
0
,
"teredo"
:
0
,
"ipv4_in_ipv6"
:
0
,
"ipv6_in_ipv6"
:
0
,
"mpls"
:
0
,
"avg_pkt_size"
:
685
,
"max_pkt_size"
:
1506
,
"erspan"
:
0
,
"ipraw"
:{
"invalid_ip_version"
:
0
},
"ltnull"
:{
"pkt_too_small"
:
0
,
"unsupported_type"
:
0
},
"dce"
:{
"pkt_too_small"
:
0
}},
"flow"
:{
"memcap"
:
0
,
"tcp"
:
1
,
"udp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"spare"
:
10000
,
"emerg_mode_entered"
:
0
,
"emerg_mode_over"
:
0
,
"tcp_reuse"
:
0
,
"memuse"
:
7074592
},
"defrag"
:{
"ipv4"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"ipv6"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"max_frag_hits"
:
0
},
"tcp"
:{
"sessions"
:
1
,
"ssn_memcap_drop"
:
0
,
"pseudo"
:
0
,
"pseudo_failed"
:
0
,
"invalid_checksum"
:
0
,
"no_flow"
:
0
,
"syn"
:
1
,
"synack"
:
1
,
"rst"
:
0
,
"segment_memcap_drop"
:
0
,
"stream_depth_reached"
:
0
,
"reassembly_gap"
:
0
,
"overlap"
:
0
,
"overlap_diff_data"
:
0
,
"insert_data_normal_fail"
:
0
,
"insert_data_overlap_fail"
:
0
,
"insert_list_fail"
:
0
,
"memuse"
:
6881280
,
"reassembly_memuse"
:
991232
},
"detect"
:{
"alert"
:
0
},
"app_layer"
:{
"flow"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"imap"
:
0
,
"msn"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"failed_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
,
"failed_udp"
:
0
},
"tx"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
}},
"flow_mgr"
:{
"closed_pruned"
:
0
,
"new_pruned"
:
0
,
"est_pruned"
:
0
,
"bypassed_pruned"
:
0
,
"flows_checked"
:
0
,
"flows_notimeout"
:
0
,
"flows_timeout"
:
0
,
"flows_timeout_inuse"
:
0
,
"flows_removed"
:
0
,
"rows_checked"
:
65536
,
"rows_skipped"
:
65536
,
"rows_empty"
:
0
,
"rows_busy"
:
0
,
"rows_maxlen"
:
0
},
"file_store"
:{
"open_files"
:
0
},
"dns"
:{
"memuse"
:
0
,
"memcap_state"
:
0
,
"memcap_global"
:
0
},
"http"
:{
"memuse"
:
35131
,
"memcap"
:
0
}}}
{
"timestamp"
:
"2018-02-06T11:09:22.000433+0100"
,
"event_type"
:
"stats"
,
"stats"
:{
"uptime"
:
514
,
"capture"
:{
"kernel_packets"
:
1
,
"kernel_drops"
:
0
},
"decoder"
:{
"pkts"
:
10
,
"bytes"
:
6852
,
"invalid"
:
0
,
"ipv4"
:
10
,
"ipv6"
:
0
,
"ethernet"
:
10
,
"raw"
:
0
,
"null"
:
0
,
"sll"
:
0
,
"tcp"
:
10
,
"udp"
:
0
,
"sctp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"ppp"
:
0
,
"pppoe"
:
0
,
"gre"
:
0
,
"vlan"
:
0
,
"vlan_qinq"
:
0
,
"ieee8021ah"
:
0
,
"teredo"
:
0
,
"ipv4_in_ipv6"
:
0
,
"ipv6_in_ipv6"
:
0
,
"mpls"
:
0
,
"avg_pkt_size"
:
685
,
"max_pkt_size"
:
1506
,
"erspan"
:
0
,
"ipraw"
:{
"invalid_ip_version"
:
0
},
"ltnull"
:{
"pkt_too_small"
:
0
,
"unsupported_type"
:
0
},
"dce"
:{
"pkt_too_small"
:
0
}},
"flow"
:{
"memcap"
:
0
,
"tcp"
:
1
,
"udp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"spare"
:
10000
,
"emerg_mode_entered"
:
0
,
"emerg_mode_over"
:
0
,
"tcp_reuse"
:
0
,
"memuse"
:
7074592
},
"defrag"
:{
"ipv4"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"ipv6"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"max_frag_hits"
:
0
},
"tcp"
:{
"sessions"
:
1
,
"ssn_memcap_drop"
:
0
,
"pseudo"
:
0
,
"pseudo_failed"
:
0
,
"invalid_checksum"
:
0
,
"no_flow"
:
0
,
"syn"
:
1
,
"synack"
:
1
,
"rst"
:
0
,
"segment_memcap_drop"
:
0
,
"stream_depth_reached"
:
0
,
"reassembly_gap"
:
0
,
"overlap"
:
0
,
"overlap_diff_data"
:
0
,
"insert_data_normal_fail"
:
0
,
"insert_data_overlap_fail"
:
0
,
"insert_list_fail"
:
0
,
"memuse"
:
6881280
,
"reassembly_memuse"
:
991232
},
"detect"
:{
"alert"
:
0
},
"app_layer"
:{
"flow"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"imap"
:
0
,
"msn"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"failed_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
,
"failed_udp"
:
0
},
"tx"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
}},
"flow_mgr"
:{
"closed_pruned"
:
0
,
"new_pruned"
:
0
,
"est_pruned"
:
0
,
"bypassed_pruned"
:
0
,
"flows_checked"
:
0
,
"flows_notimeout"
:
0
,
"flows_timeout"
:
0
,
"flows_timeout_inuse"
:
0
,
"flows_removed"
:
0
,
"rows_checked"
:
65536
,
"rows_skipped"
:
65536
,
"rows_empty"
:
0
,
"rows_busy"
:
0
,
"rows_maxlen"
:
0
},
"file_store"
:{
"open_files"
:
0
},
"dns"
:{
"memuse"
:
0
,
"memcap_state"
:
0
,
"memcap_global"
:
0
},
"http"
:{
"memuse"
:
35131
,
"memcap"
:
0
}}}
{
"timestamp"
:
"2018-02-06T11:09:29.000460+0100"
,
"event_type"
:
"stats"
,
"stats"
:{
"uptime"
:
521
,
"capture"
:{
"kernel_packets"
:
1
,
"kernel_drops"
:
0
},
"decoder"
:{
"pkts"
:
10
,
"bytes"
:
6852
,
"invalid"
:
0
,
"ipv4"
:
10
,
"ipv6"
:
0
,
"ethernet"
:
10
,
"raw"
:
0
,
"null"
:
0
,
"sll"
:
0
,
"tcp"
:
10
,
"udp"
:
0
,
"sctp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"ppp"
:
0
,
"pppoe"
:
0
,
"gre"
:
0
,
"vlan"
:
0
,
"vlan_qinq"
:
0
,
"ieee8021ah"
:
0
,
"teredo"
:
0
,
"ipv4_in_ipv6"
:
0
,
"ipv6_in_ipv6"
:
0
,
"mpls"
:
0
,
"avg_pkt_size"
:
685
,
"max_pkt_size"
:
1506
,
"erspan"
:
0
,
"ipraw"
:{
"invalid_ip_version"
:
0
},
"ltnull"
:{
"pkt_too_small"
:
0
,
"unsupported_type"
:
0
},
"dce"
:{
"pkt_too_small"
:
0
}},
"flow"
:{
"memcap"
:
0
,
"tcp"
:
1
,
"udp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"spare"
:
10000
,
"emerg_mode_entered"
:
0
,
"emerg_mode_over"
:
0
,
"tcp_reuse"
:
0
,
"memuse"
:
7074592
},
"defrag"
:{
"ipv4"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"ipv6"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"max_frag_hits"
:
0
},
"tcp"
:{
"sessions"
:
1
,
"ssn_memcap_drop"
:
0
,
"pseudo"
:
0
,
"pseudo_failed"
:
0
,
"invalid_checksum"
:
0
,
"no_flow"
:
0
,
"syn"
:
1
,
"synack"
:
1
,
"rst"
:
0
,
"segment_memcap_drop"
:
0
,
"stream_depth_reached"
:
0
,
"reassembly_gap"
:
0
,
"overlap"
:
0
,
"overlap_diff_data"
:
0
,
"insert_data_normal_fail"
:
0
,
"insert_data_overlap_fail"
:
0
,
"insert_list_fail"
:
0
,
"memuse"
:
6881280
,
"reassembly_memuse"
:
991232
},
"detect"
:{
"alert"
:
0
},
"app_layer"
:{
"flow"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"imap"
:
0
,
"msn"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"failed_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
,
"failed_udp"
:
0
},
"tx"
:{
"http"
:
1
,
"ftp"
:
0
,
"smtp"
:
0
,
"tls"
:
0
,
"ssh"
:
0
,
"smb"
:
0
,
"dcerpc_tcp"
:
0
,
"dns_tcp"
:
0
,
"dcerpc_udp"
:
0
,
"dns_udp"
:
0
}},
"flow_mgr"
:{
"closed_pruned"
:
0
,
"new_pruned"
:
0
,
"est_pruned"
:
0
,
"bypassed_pruned"
:
0
,
"flows_checked"
:
0
,
"flows_notimeout"
:
0
,
"flows_timeout"
:
0
,
"flows_timeout_inuse"
:
0
,
"flows_removed"
:
0
,
"rows_checked"
:
65536
,
"rows_skipped"
:
65536
,
"rows_empty"
:
0
,
"rows_busy"
:
0
,
"rows_maxlen"
:
0
},
"file_store"
:{
"open_files"
:
0
},
"dns"
:{
"memuse"
:
0
,
"memcap_state"
:
0
,
"memcap_global"
:
0
},
"http"
:{
"memuse"
:
35131
,
"memcap"
:
0
}}}
{
"timestamp"
:
"2018-02-06T11:09:36.000456+0100"
,
"event_type"
:
"stats"
,
"stats"
:{
"uptime"
:
528
,
"capture"
:{
"kernel_packets"
:
1
,
"kernel_drops"
:
0
},
"decoder"
:{
"pkts"
:
10
,
"bytes"
:
6852
,
"invalid"
:
0
,
"ipv4"
:
10
,
"ipv6"
:
0
,
"ethernet"
:
10
,
"raw"
:
0
,
"null"
:
0
,
"sll"
:
0
,
"tcp"
:
10
,
"udp"
:
0
,
"sctp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"ppp"
:
0
,
"pppoe"
:
0
,
"gre"
:
0
,
"vlan"
:
0
,
"vlan_qinq"
:
0
,
"ieee8021ah"
:
0
,
"teredo"
:
0
,
"ipv4_in_ipv6"
:
0
,
"ipv6_in_ipv6"
:
0
,
"mpls"
:
0
,
"avg_pkt_size"
:
685
,
"max_pkt_size"
:
1506
,
"erspan"
:
0
,
"ipraw"
:{
"invalid_ip_version"
:
0
},
"ltnull"
:{
"pkt_too_small"
:
0
,
"unsupported_type"
:
0
},
"dce"
:{
"pkt_too_small"
:
0
}},
"flow"
:{
"memcap"
:
0
,
"tcp"
:
1
,
"udp"
:
0
,
"icmpv4"
:
0
,
"icmpv6"
:
0
,
"spare"
:
10000
,
"emerg_mode_entered"
:
0
,
"emerg_mode_over"
:
0
,
"tcp_reuse"
:
0
,
"memuse"
:
7074592
},
"defrag"
:{
"ipv4"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"ipv6"
:{
"fragments"
:
0
,
"reassembled"
:
0
,
"timeouts"
:
0
},
"max_frag_hits"
:
0
},
"tcp"
:{
"sessions"
:
1
,
"ssn_memcap_drop"
:
0
,
"pseudo"
:
0
,
"pseudo_failed"
:
0
,
"invalid_checksum"